Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G2XuZLo-gh1C_RkRj-Bh-EEhTc0.roa
File:                     G2XuZLo-gh1C_RkRj-Bh-EEhTc0.roa (raw, json)
Hash identifier:          JYqgrgkEok/0W7RvtQjf4YtT6899gV9eDKfCbPVpqPY=
Subject key identifier:   1B:65:EE:64:BA:3E:82:1D:42:FD:19:11:8F:E0:61:F8:41:21:4D:CD
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01864E271C11D80AEFAF62A8143316009246
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G2XuZLo-gh1C_RkRj-Bh-EEhTc0.roa
Signing time:             Tue 14 Feb 2023 04:20:31 +0000
ROA not before:           Tue 14 Feb 2023 04:20:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211659
IP address blocks:        2a0e:97c0:261::/48 maxlen: 48
                          2a0e:b105:121::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4e:27:1c:11:d8:0a:ef:af:62:a8:14:33:16:00:92:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 14 04:20:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b65ee64ba3e821d42fd19118fe061f841214dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:26:7a:e0:50:33:b4:96:6f:03:39:5b:95:
                    1a:cc:13:bf:8d:6e:14:49:5d:c4:3d:a1:de:78:7b:
                    f9:e6:87:42:75:67:71:17:f7:54:13:2d:ab:6e:b7:
                    da:4a:13:15:53:60:f4:e6:e2:78:49:63:5d:5a:41:
                    e9:c1:61:89:ad:04:63:58:39:29:9d:28:be:b4:e1:
                    33:1f:91:af:74:1d:ea:f6:e3:e7:06:ec:3b:50:e6:
                    fb:ce:72:d2:30:7c:05:60:53:e9:02:99:d9:c3:0b:
                    34:d2:2e:1c:84:fc:f0:0e:21:c7:f2:fd:d2:6e:b7:
                    80:46:bd:6c:7a:93:bd:36:21:e5:13:53:18:92:38:
                    cb:7c:66:e9:70:7e:a6:1a:c9:87:cc:83:6f:37:1c:
                    b0:a7:b6:7e:09:c8:fc:95:b0:7f:ac:a0:bc:cb:2c:
                    4e:64:8d:25:49:2e:8d:46:33:da:e6:53:cd:ee:0d:
                    da:c8:b4:67:d0:4e:4d:16:a0:ec:74:a3:4e:f2:4e:
                    c9:e1:21:af:6b:56:7a:5e:41:bc:20:5a:e1:13:83:
                    21:a1:a9:aa:f2:dd:e7:f2:d6:f4:36:cd:1c:82:25:
                    52:82:64:0b:a0:44:79:84:d3:9e:2d:3e:10:8d:ce:
                    91:b0:f0:7e:3f:bb:50:38:5c:db:96:9f:6b:70:6a:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:65:EE:64:BA:3E:82:1D:42:FD:19:11:8F:E0:61:F8:41:21:4D:CD
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G2XuZLo-gh1C_RkRj-Bh-EEhTc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:261::/48
                  2a0e:b105:121::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:b1:59:b3:f4:5c:ae:74:69:21:59:1b:cf:a4:ff:ef:60:bb:
         0c:cc:35:8e:1b:a5:28:62:b0:5e:2c:2b:ff:6d:97:a2:6f:71:
         c4:84:ef:8e:d8:a9:ca:9b:e2:d2:90:6a:21:bc:d0:7d:26:d2:
         8d:78:41:bc:40:84:61:88:ba:ab:5e:46:d8:36:02:55:52:2a:
         bd:ae:d5:a6:2f:de:a3:ec:a3:1a:9e:13:05:92:ba:85:73:11:
         f0:de:ff:61:2d:f1:f1:1a:94:6f:6c:cd:0e:6a:89:b5:4b:74:
         91:3e:4b:0e:e8:9a:1d:63:6a:4e:a7:df:5e:c8:db:04:64:c4:
         31:ea:63:64:48:30:b0:18:a0:43:52:0a:78:0f:fa:71:f8:6c:
         42:e2:86:de:af:2e:54:a0:85:86:fd:5c:0f:ec:87:16:cc:0e:
         20:06:c4:33:34:87:ff:fb:32:2c:0b:5b:fd:7c:eb:d7:11:d7:
         04:ca:b2:84:d5:ae:2f:c7:9b:6f:c3:c8:bd:92:cc:90:4a:20:
         25:62:0e:01:12:1a:e9:f2:ba:f5:ba:8b:3d:e1:c2:5f:52:cb:
         28:1e:a1:77:60:7a:ab:bf:d2:f9:67:70:0d:9e:1e:7a:4a:79:
         d1:2c:27:4e:b0:94:0e:99:47:68:c6:4a:9d:fc:d5:69:25:55:
         ec:e7:e9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----