Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C68AnWcJv05zYN5cT_RVRiy2HOE.roa
File:                     C68AnWcJv05zYN5cT_RVRiy2HOE.roa (raw, json)
Hash identifier:          mbl7WwLa5CL+WQhtr04RHPgs/eMZcXBGqDQYhqGqpuw=
Subject key identifier:   0B:AF:00:9D:67:09:BF:4E:73:60:DE:5C:4F:F4:55:46:2C:B6:1C:E1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A1A429548236B01DB7D64B08A902BD134
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C68AnWcJv05zYN5cT_RVRiy2HOE.roa
Signing time:             Mon 21 Aug 2023 22:41:25 +0000
ROA not before:           Mon 21 Aug 2023 22:41:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216457
IP address blocks:        2a10:2f00:198::/48 maxlen: 48
                          2a0e:b107:27ac::/48 maxlen: 48
                          2a0e:b107:27a9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1a:42:95:48:23:6b:01:db:7d:64:b0:8a:90:2b:d1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 21 22:41:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0baf009d6709bf4e7360de5c4ff455462cb61ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:7f:26:d2:9b:11:be:74:ff:ff:85:18:f4:
                    1c:3f:e1:17:89:fb:60:24:69:a5:02:89:e6:fe:fa:
                    02:f1:21:ba:db:df:d8:cb:4b:30:81:f2:8a:f9:eb:
                    6f:91:c2:fa:59:3d:d9:76:ca:08:f4:ff:db:35:4b:
                    f7:4a:96:77:29:15:91:bb:0a:af:02:1d:d8:10:41:
                    58:03:bc:b3:1a:4a:f3:c9:3d:6b:91:c6:d3:66:85:
                    08:67:f3:bf:cf:85:10:f6:94:a8:7a:df:0d:22:11:
                    b5:8b:0d:d0:a6:39:ac:aa:f9:fb:72:24:89:20:47:
                    49:8d:08:20:9b:7c:1b:35:f5:16:5d:5f:61:99:8f:
                    f6:bd:1a:3d:50:f9:f9:c7:4c:55:e4:54:6e:c7:ab:
                    fc:aa:ab:03:ea:7f:9b:5d:0e:79:7e:9c:92:cd:68:
                    5b:58:c5:fe:42:ff:e3:98:0a:50:7e:6a:dc:f3:55:
                    7d:7c:e4:16:ed:34:f6:42:a2:51:4f:7b:f8:e0:56:
                    e9:7e:5c:0f:bf:e4:9b:da:7e:2f:c2:ed:cb:de:9a:
                    98:4d:e6:5d:07:aa:7c:f6:80:bb:c5:e9:af:8f:71:
                    d9:9e:82:28:0a:21:e7:c4:34:21:a5:83:64:7d:d2:
                    3e:23:8b:e9:fd:f9:4d:52:4d:fa:33:40:90:35:fc:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AF:00:9D:67:09:BF:4E:73:60:DE:5C:4F:F4:55:46:2C:B6:1C:E1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C68AnWcJv05zYN5cT_RVRiy2HOE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27a9::/48
                  2a0e:b107:27ac::/48
                  2a10:2f00:198::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:70:de:10:9d:c9:f3:8a:b4:e3:c2:dd:73:d2:4c:f0:51:11:
         9c:ae:c8:c5:65:5b:92:ef:50:b2:dc:f2:4f:1f:c1:d7:87:6c:
         d3:6e:fa:3b:d6:7b:ed:42:55:a5:82:98:d8:53:02:af:51:76:
         e3:ea:24:08:2f:61:d5:f2:20:35:0c:a1:ed:00:81:de:29:f1:
         bb:b0:a1:84:1c:69:df:8c:0d:cb:fb:df:5a:b2:1e:12:7b:3c:
         e5:ab:a1:48:01:0b:ae:2a:99:b8:64:ab:d1:71:09:07:87:50:
         b5:5b:f1:ab:2a:56:bb:61:3b:22:9b:f5:17:14:23:53:1c:04:
         e9:9e:d7:cb:eb:1a:07:d7:89:59:bc:01:b7:19:2e:d7:e9:d5:
         a9:e2:27:cb:d3:ba:21:11:8b:3b:55:03:94:f2:88:53:e0:98:
         07:01:c1:85:83:b7:db:4d:19:e1:02:16:1e:02:56:46:17:ec:
         ed:ef:ec:1a:c7:28:55:fa:78:b8:2f:01:35:7f:22:a2:4e:0b:
         2a:b0:06:5a:e3:5d:f0:c0:f8:21:2b:0d:67:93:24:b7:5f:6f:
         91:07:7e:0e:b1:a9:10:43:92:1a:e3:03:bb:23:59:0f:6c:b5:
         d4:7c:aa:a4:18:2a:91:b6:a3:0e:06:e0:73:33:36:ce:80:56:
         44:0b:49:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----