Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FDPla-xCL_DNCcz1uPkg6aLegKE.roa
File:                     FDPla-xCL_DNCcz1uPkg6aLegKE.roa (raw, json)
Hash identifier:          DDo0maWvLfj1koeJcAUT4FWgWSbHlMdyZ3Ob6MLLlnc=
Subject key identifier:   14:33:E5:6B:EC:42:2F:F0:CD:09:CC:F5:B8:F9:20:E9:A2:DE:80:A1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E798DC76C2947667A193B908D9D3F1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FDPla-xCL_DNCcz1uPkg6aLegKE.roa
Signing time:             Mon 02 Jan 2023 05:15:04 +0000
ROA not before:           Mon 02 Jan 2023 05:15:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142438
IP address blocks:        2a0e:b107:da0::/44 maxlen: 48
                          2a0e:b107:14a0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:98:dc:76:c2:94:76:67:a1:93:b9:08:d9:d3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1433e56bec422ff0cd09ccf5b8f920e9a2de80a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:f6:1f:03:52:62:91:60:ad:42:17:98:2a:
                    f9:30:d8:d4:3d:40:00:bd:3a:7a:e0:e9:e1:15:7c:
                    f5:49:62:5a:54:1f:0b:e7:58:f9:ff:eb:87:d5:9f:
                    80:2e:d7:55:0d:0f:a8:66:0d:9d:02:fd:60:67:0b:
                    e0:b2:aa:12:a9:47:d9:f4:c3:4f:ea:34:47:f7:74:
                    94:a1:b7:8b:b4:e7:93:0d:42:64:16:97:33:5a:4e:
                    b1:fa:3d:98:c3:75:47:ac:0b:a3:17:21:b0:58:f2:
                    45:27:dc:ff:f4:8c:fd:89:77:52:25:06:ba:f0:7c:
                    84:d5:ca:dc:6b:07:c1:81:34:66:d4:67:b2:3e:e2:
                    e8:47:a8:09:92:1a:19:ea:77:a7:2b:4d:00:a7:a1:
                    b7:fc:9f:c2:41:c2:f9:4e:78:da:08:91:e6:d7:d1:
                    5d:49:34:bd:93:78:be:4d:cc:c2:09:d3:49:24:25:
                    ea:2e:62:20:cf:30:c9:e2:6a:91:2b:28:54:ca:db:
                    6d:a9:59:e2:75:f7:92:07:39:b2:45:c9:5c:b1:89:
                    c2:7e:1c:aa:f7:36:e6:1e:db:65:b7:72:ce:3c:9b:
                    89:d0:05:8e:cc:19:3c:a3:f3:f6:9d:4d:5b:c9:51:
                    45:be:d8:b1:3f:c1:80:bb:58:df:3c:1e:9b:23:4a:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:33:E5:6B:EC:42:2F:F0:CD:09:CC:F5:B8:F9:20:E9:A2:DE:80:A1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FDPla-xCL_DNCcz1uPkg6aLegKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:da0::/44
                  2a0e:b107:14a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:48:3c:ac:68:0a:b5:3a:0a:31:a3:d3:7a:0e:68:47:53:2f:
         5d:4d:bc:7e:e1:76:22:7e:0f:59:8f:1f:88:51:f7:01:77:e4:
         99:38:29:30:25:c0:4c:b8:39:d7:4f:48:6a:bb:84:34:f8:84:
         c6:db:d9:24:3d:64:23:28:58:27:37:65:0c:68:74:90:dd:b7:
         78:2a:fa:54:e8:da:49:88:17:cd:30:c9:f9:4f:bd:d9:b1:5d:
         b6:a9:3e:11:c7:b2:6b:35:f7:d5:fe:24:2b:93:d8:ca:17:14:
         e2:05:2a:63:95:9c:f6:c9:db:89:41:5e:8b:0f:d5:54:6b:c5:
         53:85:2c:b2:14:5f:43:c8:2a:d2:9a:56:fd:bd:a0:7e:99:4c:
         da:dd:a6:76:9e:f5:cc:a0:c1:74:f7:5b:22:2f:aa:02:e6:21:
         39:24:cc:52:a6:60:95:ff:f4:83:a8:8a:07:b8:37:05:c7:9d:
         fb:56:ee:63:c8:82:7d:e4:7c:8c:b4:6a:22:19:79:32:c9:50:
         06:ed:da:4f:4e:3b:ca:db:63:ae:48:74:f1:76:37:00:7e:0e:
         aa:a1:d4:9c:fd:47:1f:c0:9a:64:7f:e7:e3:16:12:7e:d4:65:
         80:0d:db:75:8a:4a:8f:10:e5:63:83:77:09:bd:b5:6e:13:34:
         a8:2e:23:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----