Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E-EMHzpk1ftZf5xKf3LX8g5EiK4.roa
File:                     E-EMHzpk1ftZf5xKf3LX8g5EiK4.roa (raw, json)
Hash identifier:          AVqd95MGg9gmjcfVDtrbi7BbVvHhycPx4itc5I4Q+yI=
Subject key identifier:   13:E1:0C:1F:3A:64:D5:FB:59:7F:9C:4A:7F:72:D7:F2:0E:44:88:AE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01867AEA905AA5AA241ABC675F3CFCEEB92F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E-EMHzpk1ftZf5xKf3LX8g5EiK4.roa
Signing time:             Wed 22 Feb 2023 20:57:18 +0000
ROA not before:           Wed 22 Feb 2023 20:57:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210397
IP address blocks:        2a0e:97c0:78f::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 24 Feb 2023 22:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7a:ea:90:5a:a5:aa:24:1a:bc:67:5f:3c:fc:ee:b9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 22 20:57:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13e10c1f3a64d5fb597f9c4a7f72d7f20e4488ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:6c:9f:ac:38:6c:0b:9e:1b:85:dd:91:f3:
                    aa:bc:9d:0a:bd:d0:10:bc:31:ee:88:2d:17:e6:e2:
                    6a:51:7f:37:1f:dd:31:37:1f:78:6d:85:86:15:ca:
                    42:9f:1a:dd:8b:73:a7:41:35:cf:ab:10:6f:36:79:
                    ff:a2:f6:cb:33:bb:bb:ea:dc:41:1d:ed:24:02:7e:
                    a1:4e:5c:5f:a8:51:ea:e4:5b:8c:9d:70:7b:ee:5f:
                    6e:96:36:77:20:22:da:37:53:e3:fa:30:8f:12:54:
                    51:a1:05:8b:ab:a4:17:1b:2a:74:ff:7d:5e:17:f8:
                    35:7a:36:91:1d:a4:c5:b0:3f:12:cc:d5:b2:0a:2e:
                    29:59:2b:b5:6a:77:4a:33:25:e8:9a:00:ad:6f:20:
                    c7:9f:e7:9a:ae:93:2b:c6:2e:7f:68:73:12:bd:6d:
                    31:e4:ef:f8:e2:51:a0:ef:37:aa:b2:61:0c:f8:10:
                    6a:6f:a9:d3:99:72:7c:25:7f:f8:0a:66:08:57:24:
                    ee:a1:e3:bb:70:55:53:b0:f3:cc:ef:a4:e8:c3:51:
                    a9:e9:b0:0b:bf:dd:0a:9f:99:eb:6f:6e:61:41:74:
                    44:49:93:27:91:76:17:03:85:20:aa:54:33:96:0a:
                    5f:2f:25:92:19:0a:6a:0c:8f:b5:0d:52:f6:f7:cf:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E1:0C:1F:3A:64:D5:FB:59:7F:9C:4A:7F:72:D7:F2:0E:44:88:AE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E-EMHzpk1ftZf5xKf3LX8g5EiK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:78f::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:63:ad:86:27:f2:85:2e:36:a8:19:79:0a:77:b3:3e:c2:
         45:02:3e:16:89:5a:90:05:a6:1f:0e:89:ac:5d:8f:aa:3f:9b:
         8d:83:14:83:04:3d:bb:75:6e:fc:fc:18:dd:ff:de:b2:9b:69:
         d7:53:fa:fb:07:0b:7c:fd:ae:7f:a9:1d:c7:3c:f3:b3:bf:af:
         f6:5b:26:cd:ff:c0:a8:96:5d:78:28:54:bb:01:8a:bb:f2:b2:
         19:43:0c:fc:a9:ce:d1:9b:e7:99:33:8c:29:b9:0c:f1:0e:59:
         77:03:d8:e2:07:64:3f:da:cb:81:e3:f0:fc:09:eb:bf:5a:5a:
         7b:19:0d:eb:60:3d:0e:28:36:62:0d:1d:b3:db:ba:44:e5:22:
         d7:96:e7:71:83:46:a3:d5:a8:1a:f3:11:27:60:ce:67:fc:c4:
         0b:f7:36:7a:f7:fe:c5:46:34:46:10:7d:f2:2b:d5:a9:47:c6:
         8d:75:bd:a6:d4:73:b8:11:6d:e5:91:7a:db:e6:69:2f:66:32:
         c8:e6:68:87:d9:33:b3:1b:f8:fc:f3:5a:16:d8:a1:4c:d6:5d:
         9d:dd:a4:cc:22:ca:61:ab:0b:1d:d0:a3:62:ad:23:a8:03:fa:
         7b:67:40:f3:54:4a:29:82:49:f3:62:dd:2d:fa:e0:80:19:1b:
         9e:e6:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----