Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FphbhF4bHItBAJ15x6kSVrsN6pU.roa
File:                     FphbhF4bHItBAJ15x6kSVrsN6pU.roa (raw, json)
Hash identifier:          yYhTV5iq5/j1I+js1c/3MuIU6Ez0Xr1/8YJaeDtkn70=
Subject key identifier:   16:98:5B:84:5E:1B:1C:8B:41:00:9D:79:C7:A9:12:56:BB:0D:EA:95
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E783A43F235535E8388880770A886C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FphbhF4bHItBAJ15x6kSVrsN6pU.roa
Signing time:             Mon 02 Jan 2023 05:14:58 +0000
ROA not before:           Mon 02 Jan 2023 05:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50798
IP address blocks:        2a0e:b107:af0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:83:a4:3f:23:55:35:e8:38:88:80:77:0a:88:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=16985b845e1b1c8b41009d79c7a91256bb0dea95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:95:19:93:46:8d:f5:f0:dc:0a:bb:84:92:90:
                    f7:7a:8e:4d:b3:c9:8a:04:99:b6:da:71:98:53:53:
                    b0:72:95:4f:35:01:d6:71:77:ef:b3:d7:72:b5:46:
                    42:c3:c0:eb:72:fa:e4:e3:2f:37:88:0d:37:5b:93:
                    55:ab:c0:34:da:5b:10:a9:d4:c6:af:01:22:3a:4f:
                    d6:bd:83:8b:30:5a:78:80:94:d1:08:d7:93:75:82:
                    28:f8:8d:3c:6e:0e:52:b4:a9:a8:6d:e4:70:f1:53:
                    da:b3:50:5b:84:a5:e3:9a:38:7c:1b:d9:2a:20:10:
                    08:60:8f:e9:23:80:47:08:be:0c:52:b5:e9:d7:32:
                    94:17:2c:6b:d4:db:bc:34:1c:30:1a:5b:b2:30:91:
                    2a:7f:17:81:b2:ca:51:2f:cf:51:6a:3a:a7:5b:53:
                    b9:90:d4:07:3a:c1:70:5a:12:cc:df:1b:7e:d5:38:
                    89:cb:f1:8d:3e:a9:7c:60:56:31:04:6b:12:08:6f:
                    9c:2f:9b:a6:93:fa:a9:70:43:27:7e:f4:c6:2c:85:
                    1f:9a:46:9e:03:7d:63:7e:d9:04:83:62:01:d1:88:
                    26:6b:88:b9:66:e4:fb:a8:0f:0a:80:a0:72:fc:90:
                    3b:be:70:06:10:e5:81:13:6e:b8:44:63:c1:71:58:
                    cc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:98:5B:84:5E:1B:1C:8B:41:00:9D:79:C7:A9:12:56:BB:0D:EA:95
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FphbhF4bHItBAJ15x6kSVrsN6pU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:af0::/44

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:23:a2:32:00:bf:c6:b7:3b:12:62:ad:3d:2c:b0:7f:67:
         bb:4d:2d:1b:62:e8:4b:ea:69:64:02:ae:0b:04:3a:df:8b:7b:
         9f:d5:08:a6:28:49:ea:b6:4f:48:c8:cc:d2:f7:79:bc:f5:e0:
         93:72:76:03:ca:5d:86:09:64:0e:be:54:18:b6:93:97:ad:2b:
         0f:34:a1:09:e6:45:56:d5:db:ff:ac:66:df:82:35:b8:f1:bc:
         24:ae:96:9d:3a:3e:fe:84:26:ce:40:fb:ce:ba:bf:fb:d3:87:
         4e:62:3f:dc:07:1e:07:02:15:6f:ee:04:30:31:86:c3:0a:af:
         c1:07:c3:9e:69:35:cb:fc:49:36:f9:72:e0:c5:43:ae:c7:66:
         ea:93:46:bf:77:4e:88:74:13:1b:ad:05:59:c5:26:50:5b:6b:
         0f:f4:0c:01:1f:9d:b4:ac:e3:9d:88:be:28:44:a6:bd:4d:59:
         b5:88:f5:6d:04:90:8e:39:4b:c1:bc:c4:8d:3c:e4:8f:c5:3a:
         a6:8a:0b:69:e6:8b:a2:1f:c8:54:51:51:db:3b:8f:63:d4:ff:
         b2:8f:53:fd:15:40:f7:34:b1:f4:7f:5e:17:55:50:6e:64:1b:
         16:c7:0a:b6:29:23:ce:c3:ad:b1:5f:99:db:6b:66:6b:cc:dd:
         8d:a7:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----