Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EBnXqHc2CNDQQaZyYZSPMJNjhJM.roa
File:                     EBnXqHc2CNDQQaZyYZSPMJNjhJM.roa (raw, json)
Hash identifier:          BC4+m7Td6J/QtpE0N3dYbimunf+NCE4HaBY5KdF06zU=
Subject key identifier:   10:19:D7:A8:77:36:08:D0:D0:41:A6:72:61:94:8F:30:93:63:84:93
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7EBBB425E58468A19B48FCA33E773
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EBnXqHc2CNDQQaZyYZSPMJNjhJM.roa
Signing time:             Mon 02 Jan 2023 05:15:25 +0000
ROA not before:           Mon 02 Jan 2023 05:15:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210562
IP address blocks:        2a0e:97c0:620::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:eb:bb:42:5e:58:46:8a:19:b4:8f:ca:33:e7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1019d7a8773608d0d041a67261948f3093638493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ee:de:75:b9:e5:95:60:b6:57:74:a4:03:7c:
                    8a:87:8d:3d:5e:d2:60:1c:31:d2:ac:f0:b4:d2:55:
                    f0:3c:33:dc:81:d8:55:bc:c3:ad:20:01:e9:40:48:
                    d8:92:44:7e:5f:f6:eb:54:b6:3f:a7:6d:7e:ed:6e:
                    b6:69:7d:31:3c:02:22:d3:be:98:73:21:01:60:3f:
                    98:e9:8d:72:ca:eb:0c:e6:be:78:2a:ac:82:e3:25:
                    18:29:52:4c:5d:d4:70:da:1e:62:3b:a5:12:47:6a:
                    46:d4:ef:ba:d3:be:f7:d3:9a:3f:4d:c3:5d:e2:0d:
                    08:e9:9d:02:2d:15:13:c1:8f:a9:11:17:e4:2a:3c:
                    c1:3f:11:d9:ec:74:ef:fb:cc:3c:40:61:ce:19:ba:
                    37:38:40:9a:77:98:d6:9e:6e:f4:a1:7a:76:5b:b3:
                    1e:3f:64:d4:95:f7:7a:53:a1:65:30:b4:44:c2:98:
                    31:11:54:7f:36:db:ab:bf:07:ad:66:ce:c4:82:8e:
                    02:2d:cc:81:09:60:bb:96:f8:62:15:af:a9:59:ed:
                    80:f3:ff:83:0c:1b:b9:26:98:a2:f9:13:6a:2e:d0:
                    b2:93:29:d7:e9:b1:7f:2e:f1:45:c9:74:a9:a6:9f:
                    34:d6:72:7d:34:b5:c2:0b:68:1c:2b:88:18:16:65:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:19:D7:A8:77:36:08:D0:D0:41:A6:72:61:94:8F:30:93:63:84:93
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EBnXqHc2CNDQQaZyYZSPMJNjhJM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:620::/44

    Signature Algorithm: sha256WithRSAEncryption
         a4:16:85:15:10:e8:3d:9d:4d:48:8b:9f:9a:65:4a:b4:16:35:
         f7:73:00:e0:06:8c:f7:f0:81:2c:31:d9:d1:f6:53:2d:4c:db:
         f2:b1:d4:1b:c4:5e:00:79:cc:74:4d:0c:2f:e2:e2:4f:6f:db:
         9a:be:1a:1a:ab:15:32:39:a9:9d:28:5d:12:93:f0:de:f7:36:
         ac:f4:8e:28:18:ed:f7:5c:0c:2d:ba:7c:07:db:38:9a:9b:57:
         81:18:41:3d:6f:96:1e:92:34:cb:20:79:3a:d4:23:b2:6b:06:
         62:ce:59:ae:3c:35:3d:66:1f:c4:80:51:1d:b3:6f:38:4f:1d:
         30:41:e4:75:ec:13:43:25:1c:3d:3e:6d:6f:c8:63:34:2f:c3:
         00:81:90:85:89:40:c4:0d:7c:68:79:57:e9:55:58:92:21:4f:
         3e:8c:c0:b2:b4:00:0c:79:15:af:4f:97:35:ab:7e:2e:dd:8a:
         24:d6:39:d4:74:af:ba:aa:8d:7e:2b:4d:54:85:1f:1f:fb:6a:
         16:9e:b2:ab:d7:ff:5c:4e:bd:96:44:8a:f3:70:5b:d4:f0:0b:
         0b:9e:c4:37:a8:15:9b:bf:d4:50:96:c9:4e:82:d8:bd:0f:29:
         f9:3f:8a:5f:21:74:cf:b0:93:ec:6f:d9:ca:b6:cd:e9:38:cb:
         8b:4b:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----