Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CGp-qRiNbVjNrNe5lefWt9Kdyo4.roa
File:                     CGp-qRiNbVjNrNe5lefWt9Kdyo4.roa (raw, json)
Hash identifier:          BDSgEykbpiVJ25ho0xH5mc1/YjiHtYZmO3Q3wyGiUSo=
Subject key identifier:   08:6A:7E:A9:18:8D:6D:58:CD:AC:D7:B9:95:E7:D6:B7:D2:9D:CA:8E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AD744108817119C05468E05CFB0D1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CGp-qRiNbVjNrNe5lefWt9Kdyo4.roa
Signing time:             Tue 24 Jan 2023 16:09:42 +0000
ROA not before:           Tue 24 Jan 2023 16:09:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204729
IP address blocks:        2a0e:b107:1b9d::/48 maxlen: 48
                          2a0e:b107:1b9c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:d7:44:10:88:17:11:9c:05:46:8e:05:cf:b0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=086a7ea9188d6d58cdacd7b995e7d6b7d29dca8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:72:56:57:f7:d9:69:60:d4:c9:09:db:53:
                    4f:fc:13:80:43:89:85:fd:0b:b1:5d:4a:91:cf:d4:
                    f5:2b:9b:63:ac:b8:e8:78:17:90:35:4d:49:f8:7a:
                    34:69:02:3d:ab:6e:0e:8f:e8:e5:df:d1:96:0d:53:
                    da:62:f4:81:82:f9:d1:a0:e4:fe:e0:e7:07:ff:de:
                    38:b8:f9:a3:41:8c:1c:d7:1c:e8:95:0c:c1:da:6d:
                    14:f2:08:88:29:8e:e0:62:d6:ec:8c:57:47:09:ac:
                    28:8d:52:e1:82:d2:2b:91:2a:bb:da:b3:67:ec:35:
                    a1:3c:08:b1:cc:03:b9:24:ab:f7:3e:42:86:06:28:
                    b6:19:de:be:32:fb:0b:38:76:ba:6d:5b:53:2c:27:
                    fd:ae:40:54:68:b6:30:17:08:ea:ee:df:a3:bc:12:
                    67:1b:f8:48:92:8e:2c:fc:dc:02:7e:8e:c7:6a:44:
                    cd:04:11:71:ca:c7:12:db:93:10:39:bc:12:fd:c5:
                    e9:27:09:55:c2:e0:ee:52:df:40:1c:30:63:ef:76:
                    a7:44:e8:03:79:cd:f2:39:39:54:de:78:27:3e:2c:
                    84:a2:92:02:c2:e7:75:4c:bb:03:d5:4f:84:f2:01:
                    e9:34:f7:26:16:3f:69:c3:26:4c:07:57:c0:57:e6:
                    73:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6A:7E:A9:18:8D:6D:58:CD:AC:D7:B9:95:E7:D6:B7:D2:9D:CA:8E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CGp-qRiNbVjNrNe5lefWt9Kdyo4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1b9c::/47

    Signature Algorithm: sha256WithRSAEncryption
         2e:d9:85:4e:a0:d5:d3:5f:88:31:bf:84:e5:9a:64:5b:fa:d1:
         5f:d8:80:47:a1:d0:27:33:ef:62:d7:85:84:e3:8b:c9:43:87:
         1b:bb:fc:1d:68:11:d0:d1:26:27:93:df:d0:60:3c:ef:8f:18:
         22:3e:21:2d:7d:8e:6c:31:90:ae:ec:8d:4a:37:3e:36:00:0a:
         0c:9e:c7:1b:43:b1:d9:e6:31:94:ba:2b:0c:71:06:b9:03:d5:
         92:5a:a3:39:39:b0:90:11:f1:f8:26:50:eb:1d:ab:cc:96:0d:
         da:12:01:80:6e:35:c8:98:e7:f5:b2:da:a2:74:2f:5c:0c:d7:
         7e:85:92:e4:41:bc:87:4b:d7:e7:e9:79:9a:48:bb:4c:19:e5:
         f3:fc:ac:a5:14:57:6b:13:95:dc:25:a8:ae:cf:09:f0:4f:46:
         85:24:22:72:12:50:80:b4:f5:77:eb:10:d1:bd:b5:43:09:b6:
         2b:b7:96:b1:b5:64:f0:08:3c:74:e2:8f:57:49:1b:69:fc:cb:
         de:db:04:c2:67:78:38:7d:f5:ef:04:b5:67:94:dc:ec:99:0d:
         08:41:03:d9:44:35:21:f7:66:21:95:fb:12:c8:0e:51:a5:23:
         41:f0:59:07:fd:9d:62:ad:fd:84:c2:75:72:b3:6c:ec:86:16:
         8d:8f:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----