Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F0KYAJyLD7XpeDAj7TBJN_-ZNQI.roa
File:                     F0KYAJyLD7XpeDAj7TBJN_-ZNQI.roa (raw, json)
Hash identifier:          OEGszASXzrM+ABu95dloDQyYHMSn27+n00uoN+1RM5E=
Subject key identifier:   17:42:98:00:9C:8B:0F:B5:E9:78:30:23:ED:30:49:37:FF:99:35:02
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018B5BC0B08282B099B50CBF10BAEDDB42E4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F0KYAJyLD7XpeDAj7TBJN_-ZNQI.roa
Signing time:             Mon 23 Oct 2023 08:57:16 +0000
ROA not before:           Mon 23 Oct 2023 08:57:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216112
IP address blocks:        2a0e:97c0:de0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5b:c0:b0:82:82:b0:99:b5:0c:bf:10:ba:ed:db:42:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 23 08:57:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=174298009c8b0fb5e9783023ed304937ff993502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:5b:b3:ac:ed:ab:e2:79:ec:df:22:d5:a5:
                    89:a2:a0:09:7c:48:72:2c:85:ae:8d:74:79:97:29:
                    45:0c:42:a9:c3:9c:73:90:02:e3:46:93:9d:e6:67:
                    c3:34:11:c7:b0:86:d4:7f:79:0e:6c:60:6e:b7:d6:
                    88:a5:68:7c:e1:24:6c:69:70:6c:5c:60:d8:5e:05:
                    cc:2f:ff:bc:47:18:7e:de:1b:52:a8:b2:fd:bc:56:
                    d5:ee:f3:13:97:70:e9:59:a1:86:90:2e:86:19:4b:
                    14:8a:c8:3a:fc:e1:2f:0c:a9:3c:10:8b:1b:03:cb:
                    ca:33:24:77:92:aa:a6:5b:b9:75:d4:15:04:5f:2b:
                    83:f3:ca:81:f8:88:5d:99:eb:4e:c4:56:8b:bc:74:
                    e9:d6:8c:3d:95:7d:f4:de:e0:75:52:83:f6:de:92:
                    42:8b:f9:24:d7:7b:67:22:c6:1a:8b:26:5e:5d:28:
                    77:67:41:57:6a:2b:6e:69:fb:7b:ae:8c:4e:6f:5c:
                    62:4e:85:25:ae:90:ef:2e:d3:46:cd:e1:a2:71:1f:
                    d5:29:5e:2d:31:03:2c:85:f7:05:d0:2b:0a:c7:74:
                    52:44:8f:a4:c4:a6:85:57:ec:c1:2a:40:15:ab:f5:
                    b8:1c:1a:79:d2:23:24:6d:ef:24:c0:f9:9a:13:e3:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:42:98:00:9C:8B:0F:B5:E9:78:30:23:ED:30:49:37:FF:99:35:02
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F0KYAJyLD7XpeDAj7TBJN_-ZNQI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:de0::/44

    Signature Algorithm: sha256WithRSAEncryption
         bd:68:c9:69:c1:5f:ce:9f:8c:23:1b:0c:ad:d4:c1:bc:02:44:
         15:c8:18:6e:a7:c6:b2:dd:27:32:da:2a:98:8c:2e:bb:4c:a0:
         42:08:f0:97:83:9c:13:2d:4f:3e:13:ed:a2:95:1a:d3:a5:5d:
         c9:25:17:7f:09:11:20:ac:9f:4d:da:99:84:18:6e:49:5a:81:
         58:b9:61:20:a6:fa:fd:c7:fb:c6:5d:f9:00:f9:d3:1a:be:2d:
         12:8f:a4:75:a7:b9:93:f1:db:29:76:de:38:b2:97:a0:58:a8:
         fa:b8:8f:62:0f:b4:d3:34:86:b7:c5:5f:c2:0f:bc:c3:53:1c:
         d6:18:a6:87:d5:c0:b2:3f:a5:50:e0:58:ef:b0:6f:0c:c9:b7:
         9d:b3:b6:67:47:a5:af:c2:73:ef:07:74:4c:04:ce:81:ca:56:
         9c:94:58:2f:25:73:7f:f2:f4:05:c9:80:46:7b:1b:a9:a9:5e:
         18:26:cb:ad:8b:17:72:c9:9a:5d:08:c1:67:5c:bc:b2:de:10:
         d7:1c:64:a3:5b:59:13:e8:fd:ab:29:ba:4c:05:01:59:99:11:
         1a:f1:1d:3b:27:07:22:d8:52:0d:e6:e4:12:63:c6:fb:9e:01:
         8a:99:6e:b5:18:31:b3:f1:2e:7f:98:60:63:c6:bb:8d:59:30:
         15:eb:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----