Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E2KRkSXUHXjtpKDYduAw6PsTofQ.roa
File:                     E2KRkSXUHXjtpKDYduAw6PsTofQ.roa (raw, json)
Hash identifier:          OMu+5tQdIOIgs8kMraIFVGVX8792tJ8cySvnj7uPYGg=
Subject key identifier:   13:62:91:91:25:D4:1D:78:ED:A4:A0:D8:76:E0:30:E8:FB:13:A1:F4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018AAD065F88019EDBA5D6728CDE56E5E7AB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E2KRkSXUHXjtpKDYduAw6PsTofQ.roa
Signing time:             Tue 19 Sep 2023 10:39:50 +0000
ROA not before:           Tue 19 Sep 2023 10:39:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49581
IP address blocks:        2a0e:b107:27d0::/48 maxlen: 48
                          2a0e:b107:27d5::/48 maxlen: 48
                          2a0e:b107:27f5::/48 maxlen: 48
                          2a0e:b107:27d4::/48 maxlen: 48
                          2a0e:b107:27f4::/48 maxlen: 48
                          2a0e:b107:27f3::/48 maxlen: 48
                          2a0e:b107:27d3::/48 maxlen: 48
                          2a0e:b107:27f2::/48 maxlen: 48
                          2a0e:b107:27d2::/48 maxlen: 48
                          2a0e:b107:27f7::/48 maxlen: 48
                          2a0e:b107:27d7::/48 maxlen: 48
                          2a0e:b107:27d1::/48 maxlen: 48
                          2a0e:b107:27f6::/48 maxlen: 48
                          2a0e:b107:27d6::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 30 Sep 2023 14:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ad:06:5f:88:01:9e:db:a5:d6:72:8c:de:56:e5:e7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 19 10:39:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1362919125d41d78eda4a0d876e030e8fb13a1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:b4:47:78:86:ca:e0:fb:ac:8e:4e:86:e7:
                    34:2a:d3:86:85:2b:44:8f:9e:14:c7:4c:b5:46:b7:
                    eb:4b:8e:5c:97:16:90:07:79:b3:9e:f3:7b:7e:aa:
                    7a:5f:59:52:dd:2c:a5:ed:37:ca:3b:12:26:14:12:
                    71:5b:74:da:7d:37:5e:53:81:b6:fc:54:b6:36:40:
                    14:a1:7b:63:89:43:01:6a:c2:55:15:f3:55:4c:b6:
                    4b:d4:36:82:ce:71:c6:76:eb:11:61:4b:4e:f3:9b:
                    62:4b:3a:84:5d:d4:63:27:da:59:3e:17:51:11:e5:
                    7b:9f:c5:79:f2:bf:9b:89:2a:19:b5:51:a8:f0:99:
                    bb:2d:f1:38:d8:0d:64:8d:28:27:6e:57:42:0d:5b:
                    b4:46:93:fd:da:7b:3d:ca:59:4f:fb:ee:79:83:3a:
                    34:88:67:00:a5:21:eb:ca:dd:cd:88:1f:7c:1f:c6:
                    df:fb:ad:c9:91:1c:9b:0b:2d:fc:1a:0f:1a:18:a2:
                    dc:b3:fd:59:66:9f:a7:5b:70:5a:41:d5:e3:9e:fb:
                    9e:d6:e2:91:db:e9:6c:bd:40:36:2b:ee:4b:63:6a:
                    4a:c6:cf:61:a8:29:a9:fb:48:b6:be:3b:36:19:9a:
                    c8:4c:17:67:96:81:75:f1:df:ca:13:48:f1:7e:f6:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:62:91:91:25:D4:1D:78:ED:A4:A0:D8:76:E0:30:E8:FB:13:A1:F4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E2KRkSXUHXjtpKDYduAw6PsTofQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27d0::/45
                  2a0e:b107:27f2::-2a0e:b107:27f7:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         ba:55:4e:ff:f1:be:02:a5:05:9b:12:c8:96:37:54:40:ca:36:
         79:21:51:63:f3:f4:7a:cb:a4:26:c7:50:00:44:cf:b1:8e:aa:
         98:7b:86:16:c2:5c:f3:d0:29:76:0d:40:71:ba:43:60:0a:bf:
         f1:ef:37:23:23:ca:71:78:51:c4:81:44:24:af:6c:1b:7e:b6:
         d1:24:02:97:3c:4c:92:93:c8:36:41:eb:2a:a1:03:07:29:ba:
         6f:b8:fb:f8:7d:77:e9:3c:1e:8a:ef:9c:31:54:2a:5d:87:ca:
         8a:07:f4:0a:65:ac:e0:e6:0a:b7:54:65:b2:f5:38:41:a5:99:
         d0:f5:c2:a4:01:76:9e:54:3b:7b:0c:c4:69:28:35:e2:82:8d:
         65:e8:63:2e:ab:1d:ee:07:c8:61:22:3c:6b:68:54:06:15:84:
         21:5e:3d:84:4f:91:78:3c:5e:4e:19:e4:fd:13:ec:ab:39:6d:
         45:eb:7c:e6:91:06:58:84:95:97:f1:d0:d0:8d:d5:29:49:d5:
         d1:b8:5b:6a:47:2f:cd:aa:ce:94:cc:a6:e9:3d:04:7a:22:ed:
         aa:64:89:7d:e4:bd:48:6b:8f:ee:f4:24:aa:ac:97:b2:3b:fb:
         95:c2:4e:07:be:d0:e0:24:66:60:dc:3b:30:01:4b:77:a8:f3:
         8c:b3:4a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----