Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GWtl-o18AirzAyVaa5vwTOKdFdc.roa
File:                     GWtl-o18AirzAyVaa5vwTOKdFdc.roa (raw, json)
Hash identifier:          P4etHjLTLZ3AI8gP0yToGVMFENY4m8nNJ50dtsDHhw4=
Subject key identifier:   19:6B:65:FA:8D:7C:02:2A:F3:03:25:5A:6B:9B:F0:4C:E2:9D:15:D7
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A3D8598F0AC9DD62024C3832B7EA330F9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GWtl-o18AirzAyVaa5vwTOKdFdc.roa
Signing time:             Mon 28 Aug 2023 19:01:20 +0000
ROA not before:           Mon 28 Aug 2023 19:01:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8075
IP address blocks:        2a0e:b107:27c7::/48 maxlen: 48
                          2a0e:b107:27ac::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3d:85:98:f0:ac:9d:d6:20:24:c3:83:2b:7e:a3:30:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 28 19:01:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=196b65fa8d7c022af303255a6b9bf04ce29d15d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ea:35:84:12:26:76:c8:21:82:05:0a:03:52:
                    73:57:5a:c0:67:16:d2:a6:7e:cf:bb:2f:df:26:89:
                    6a:ad:98:44:d9:e6:0e:b3:bd:eb:e2:08:46:38:f9:
                    5e:32:45:05:9e:18:2e:d0:de:c7:b9:1c:41:3a:05:
                    ed:f7:94:38:d6:a7:47:57:05:7d:35:a4:2b:72:2a:
                    86:01:df:7f:7e:cf:cf:ea:e5:fe:41:65:7b:67:90:
                    b5:f6:8a:72:8c:54:6b:ac:2f:f3:4c:a3:41:a3:35:
                    d6:5d:fe:67:93:60:c1:a2:40:dd:49:c7:2a:98:b5:
                    98:02:88:1c:7a:cd:c4:c4:75:fe:32:8d:15:af:05:
                    b1:6f:67:df:37:28:60:08:12:35:7f:1e:5c:66:94:
                    34:0d:04:d9:d2:3e:ea:07:81:4b:2d:80:5a:ea:4a:
                    cd:ff:99:c7:6c:af:c3:6b:3e:0e:39:d1:9e:fc:11:
                    e7:21:a4:f4:af:b8:fa:52:cb:38:6d:26:8a:9e:84:
                    a5:6d:d7:74:67:c6:95:c1:bd:30:6b:6d:85:b0:5c:
                    28:81:06:8e:21:79:2f:df:5d:47:4e:df:a8:4c:1b:
                    f9:9a:c3:73:33:34:de:35:7b:cb:c4:be:94:ec:99:
                    c8:73:d7:81:9c:3e:5a:3b:fb:15:c5:93:65:7a:f7:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6B:65:FA:8D:7C:02:2A:F3:03:25:5A:6B:9B:F0:4C:E2:9D:15:D7
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GWtl-o18AirzAyVaa5vwTOKdFdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27ac::/48
                  2a0e:b107:27c7::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:58:d4:92:c6:69:7a:b9:bc:2c:2c:11:ab:78:b4:af:0b:8e:
         ae:b1:ed:03:91:96:a0:66:3d:51:5b:ed:61:49:30:ab:2a:a4:
         10:41:92:e9:42:6c:54:bd:15:51:08:b4:2f:04:68:b9:7e:13:
         45:0b:43:f1:46:6e:e8:d1:6a:0b:1b:bd:67:b4:10:ab:c9:8d:
         15:6b:c9:1c:a6:92:0e:c3:b2:7b:a3:87:69:ce:1e:6e:4a:01:
         2c:1a:a0:1e:0a:2e:8f:b6:3b:0b:aa:2c:ff:d2:b1:aa:fa:84:
         09:cc:ee:20:dc:63:db:fb:e7:10:09:a1:61:a0:31:05:89:0b:
         33:9b:d5:4c:4d:35:9a:9b:24:31:d4:91:0d:96:1e:8c:5c:4a:
         43:1a:6e:b5:23:39:91:bd:3d:92:b2:4b:66:41:18:82:30:49:
         6f:49:63:74:34:83:e4:cc:e8:d5:4f:4d:e2:06:11:d4:7e:15:
         6c:25:1d:12:f9:ab:e6:20:c6:1b:48:2f:74:02:8d:4c:eb:5d:
         69:1f:6e:10:8b:f6:96:4b:ef:02:df:76:61:0d:a0:17:bf:e4:
         82:8f:19:ed:2b:f6:22:4e:67:f8:49:a9:b0:86:c4:a8:e4:40:
         ca:a8:38:5e:29:ef:91:86:c4:3c:2f:b5:b5:31:b1:0c:fc:89:
         29:72:82:de
-----BEGIN CERTIFICATE-----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