Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G29YoqAFxzCPjkvwScbLzaCW2wk.roa
File:                     G29YoqAFxzCPjkvwScbLzaCW2wk.roa (raw, json)
Hash identifier:          8hhg+Pa4ZMWxHU23g0CUKa7VjqevEn6/XjKrUHJHsqI=
Subject key identifier:   1B:6F:58:A2:A0:05:C7:30:8F:8E:4B:F0:49:C6:CB:CD:A0:96:DB:09
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187F183490BB20E5AF9E34F521AD47C9F6A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G29YoqAFxzCPjkvwScbLzaCW2wk.roa
Signing time:             Sat 06 May 2023 14:42:05 +0000
ROA not before:           Sat 06 May 2023 14:42:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207466
IP address blocks:        2a0e:b107:1fd0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:f1:83:49:0b:b2:0e:5a:f9:e3:4f:52:1a:d4:7c:9f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May  6 14:42:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b6f58a2a005c7308f8e4bf049c6cbcda096db09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:51:45:f3:ff:a0:32:49:44:72:78:ce:39:9e:
                    5f:45:ec:61:45:18:96:30:f7:27:c8:cf:e3:ae:e6:
                    95:24:6e:0b:03:3f:02:2c:c7:03:ea:ce:ee:65:86:
                    0e:53:8c:4a:f9:09:5f:3a:17:66:ef:78:51:ad:fe:
                    93:4c:dd:89:a6:00:26:60:92:ea:04:03:19:19:a2:
                    89:e8:e1:34:14:e3:4d:23:05:a4:03:a9:d4:4e:c5:
                    20:4a:3d:e4:76:82:c3:22:9a:06:b0:cd:c1:8b:96:
                    61:67:ca:58:0f:cf:f8:3c:98:e5:ea:c5:76:ee:78:
                    2e:39:43:fa:ec:d8:b6:b4:e6:a2:08:6d:a1:c2:37:
                    8e:d6:fc:3a:a9:5d:22:a9:03:54:2e:8d:72:77:de:
                    20:4a:d4:7e:48:b9:04:3a:84:fc:ce:88:86:90:ce:
                    27:c7:f9:6f:af:25:83:f1:03:8d:56:90:2b:04:ff:
                    a8:de:11:ee:3c:06:79:74:1f:a8:2f:a9:7f:f7:70:
                    77:d3:55:6d:46:78:76:5a:96:01:c2:a7:ba:cf:76:
                    ee:f0:3f:81:0d:64:bf:c3:67:d3:0f:bc:43:af:17:
                    60:a8:7c:01:35:cc:1d:2d:9d:14:cd:48:25:c4:8a:
                    38:69:d2:88:0c:c3:09:bb:d1:77:93:10:0a:53:64:
                    4d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6F:58:A2:A0:05:C7:30:8F:8E:4B:F0:49:C6:CB:CD:A0:96:DB:09
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G29YoqAFxzCPjkvwScbLzaCW2wk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1fd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:cb:63:fc:c4:41:29:65:a8:65:90:cd:e3:9d:43:cc:98:fc:
         2b:3f:d7:05:2c:34:fd:64:88:4f:1b:77:1f:7a:cc:b8:bc:0c:
         f4:f0:7a:da:f3:3b:ef:60:2f:e0:97:97:51:cc:37:1a:ac:cc:
         3e:18:4f:91:76:80:42:d9:6b:c9:b6:f0:0a:36:0b:8f:54:ee:
         b5:db:f1:e8:5b:f2:6f:e7:b8:f8:d9:89:fc:f8:6e:29:bd:02:
         d7:02:91:a6:66:22:fd:bc:43:4e:dc:c4:d6:c6:5e:bf:df:04:
         d9:bf:d1:f9:41:94:28:f7:51:72:69:a8:f3:7c:f2:54:45:ed:
         da:91:82:89:58:ca:48:88:15:4b:22:e7:fa:11:1f:26:94:1d:
         36:ef:71:b8:80:44:35:dc:6d:39:ec:6f:ff:b9:4e:57:cf:d1:
         00:5d:1d:b7:78:54:51:80:e0:d8:9c:7a:ac:0b:3c:66:27:58:
         18:7a:50:15:c5:e2:9d:0c:16:b1:01:42:48:3f:9b:d7:96:5c:
         5d:f1:09:9b:59:00:82:21:64:c5:e2:62:fd:50:aa:d0:83:6b:
         b1:b3:ee:dc:fe:f1:e6:86:8e:b3:11:cb:2d:0e:c4:74:87:7c:
         c4:76:c3:c7:3b:8f:e7:fc:10:5b:28:64:83:f3:a1:b3:91:b7:
         f4:7e:59:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----