Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GMZweTFbAw9D8Vzj5KPZmvZQ3Ps.roa
File:                     GMZweTFbAw9D8Vzj5KPZmvZQ3Ps.roa (raw, json)
Hash identifier:          KKGwTOsp5DqrNEtiC/9yej6Tcp1MCB0QTCxPXp7AYns=
Subject key identifier:   18:C6:70:79:31:5B:03:0F:43:F1:5C:E3:E4:A3:D9:9A:F6:50:DC:FB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E799CC830AD6BD6B41681F1BE0072C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GMZweTFbAw9D8Vzj5KPZmvZQ3Ps.roa
Signing time:             Mon 02 Jan 2023 05:15:04 +0000
ROA not before:           Mon 02 Jan 2023 05:15:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142588
IP address blocks:        2a0e:b107:1991::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:99:cc:83:0a:d6:bd:6b:41:68:1f:1b:e0:07:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=18c67079315b030f43f15ce3e4a3d99af650dcfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:14:d7:86:e8:a9:88:a6:84:15:53:aa:25:
                    cf:3e:53:40:ba:ba:cf:08:57:f1:73:95:10:1c:6e:
                    11:e3:10:48:67:cc:cf:a3:48:a4:4c:81:7e:ef:28:
                    63:fe:c2:39:59:a0:52:16:fa:06:86:c0:f4:ab:9e:
                    b3:4a:97:3e:f9:ec:05:02:78:27:56:c7:09:4d:7f:
                    32:ee:e6:c6:9a:81:7f:7b:17:09:b3:77:e2:24:8e:
                    9e:b7:21:b3:18:97:c9:7c:0b:88:11:fd:fd:8d:e3:
                    e3:80:b0:4b:56:8f:0b:1d:63:7d:79:e0:4a:38:40:
                    9b:34:d3:37:b4:33:30:74:41:af:88:da:18:44:e1:
                    46:99:a5:09:48:f5:94:4f:19:e4:d4:ad:a4:b9:51:
                    73:12:d5:54:08:f6:d0:13:16:d5:10:bc:57:13:58:
                    91:60:61:ed:83:67:d5:86:00:d2:74:83:f3:43:ef:
                    f6:b8:04:f0:37:e6:3a:90:be:aa:12:32:ad:99:cd:
                    52:2d:66:71:95:3f:d7:00:b3:1d:9f:ab:8b:02:16:
                    81:5f:2d:0c:68:45:6f:48:56:d1:e3:da:d3:f9:85:
                    cb:9f:0e:ae:d5:76:cd:36:0f:12:22:ab:e9:9c:e7:
                    04:72:2f:29:cf:8e:9d:16:be:a4:96:14:1d:19:42:
                    6a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C6:70:79:31:5B:03:0F:43:F1:5C:E3:E4:A3:D9:9A:F6:50:DC:FB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GMZweTFbAw9D8Vzj5KPZmvZQ3Ps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1991::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:69:85:ca:24:d4:95:ef:3c:c5:38:68:1f:3a:81:8d:5b:55:
         e7:f2:3c:77:51:99:57:e9:03:2f:40:43:d7:76:bb:fa:7b:5f:
         28:35:e7:46:39:7e:85:68:b2:73:3b:e6:01:9b:18:96:84:b9:
         80:a1:71:4d:5b:b4:ee:ea:01:cb:bd:f0:42:f0:fb:ec:7b:51:
         80:fb:b2:06:39:15:e1:e5:a8:eb:67:64:89:64:a9:e1:c3:30:
         83:e3:2e:88:70:85:78:96:0b:07:ff:24:64:08:7a:23:d9:a0:
         b0:41:84:22:00:49:30:84:a9:10:89:08:f7:7f:2c:47:25:47:
         d4:86:bf:28:d5:77:4b:11:d2:f0:d1:f9:71:8c:c5:5b:f6:2c:
         91:63:a1:65:e9:95:4b:68:53:31:6a:d5:c8:c0:cf:9a:a5:ce:
         84:62:26:27:f5:5e:3b:ad:52:09:4d:5b:dd:db:7a:ff:15:72:
         b8:75:c3:18:c1:85:dc:19:3f:cf:34:e0:35:fe:bc:77:d9:dc:
         fd:f6:37:f2:fd:17:1e:12:8c:0c:78:fe:34:93:59:f7:f7:92:
         34:8d:7b:fb:24:71:75:00:9a:17:a3:80:cb:65:56:aa:10:41:
         d9:8d:92:c6:8a:34:f1:2b:67:bc:ce:a2:a4:a5:2b:29:b1:bd:
         c4:98:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----