Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GddGspxSI-3SGHJLp0gVHPM_56Q.roa
File:                     GddGspxSI-3SGHJLp0gVHPM_56Q.roa (raw, json)
Hash identifier:          aDJ++Uf65GizqDGxOX6ngQqZrvAxMu6QaQ6ZEJV+5X0=
Subject key identifier:   19:D7:46:B2:9C:52:23:ED:D2:18:72:4B:A7:48:15:1C:F3:3F:E7:A4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E82B6A0863A482130BDF964D3E733B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GddGspxSI-3SGHJLp0gVHPM_56Q.roa
Signing time:             Mon 02 Jan 2023 05:15:41 +0000
ROA not before:           Mon 02 Jan 2023 05:15:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213366
IP address blocks:        2a0e:b107:5c0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:2b:6a:08:63:a4:82:13:0b:df:96:4d:3e:73:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19d746b29c5223edd218724ba748151cf33fe7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:bc:69:54:85:f3:a0:83:33:38:58:8d:02:
                    1f:ba:3c:4b:d5:95:58:b5:e6:76:99:0a:92:b6:e9:
                    4e:30:10:a1:56:98:9e:af:90:21:f5:e1:ab:93:51:
                    05:b7:b9:13:45:ce:a4:1a:1f:13:1f:c6:76:b8:ae:
                    d3:96:54:c4:e1:e3:a0:64:53:b1:95:c4:e9:c0:c4:
                    7b:37:96:49:d0:60:01:e9:00:02:9b:65:ab:30:d8:
                    6c:76:c8:b7:0d:35:0c:ad:91:c4:eb:4a:ea:10:06:
                    b7:15:d6:44:c2:38:09:99:60:32:b6:67:87:c7:3c:
                    05:d2:cd:f0:7d:9d:60:29:9e:98:5d:e2:83:bf:d9:
                    7a:93:7c:f7:47:bb:38:fb:81:00:53:75:3e:ea:62:
                    bb:aa:c1:1e:c4:80:a3:c3:cd:2a:fb:d5:2b:2b:a2:
                    7e:4c:35:d5:86:c2:99:db:e8:01:77:05:11:46:5f:
                    ac:9b:67:88:cf:87:bc:2d:17:37:6b:d0:2f:cf:ff:
                    b2:14:a1:af:50:7e:bf:12:93:fd:e2:71:43:d1:e4:
                    cc:d2:ef:02:4f:d6:c9:af:4f:9f:95:c3:8e:e2:77:
                    14:c5:16:7e:55:10:d0:e6:69:53:82:3f:76:f6:17:
                    60:b8:7c:12:b3:d9:8f:ec:b2:57:0e:29:66:3c:d2:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D7:46:B2:9C:52:23:ED:D2:18:72:4B:A7:48:15:1C:F3:3F:E7:A4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GddGspxSI-3SGHJLp0gVHPM_56Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:73:f2:32:27:78:99:90:9d:76:bd:39:dd:8c:af:a1:ba:ed:
         ec:99:4e:52:7c:5f:bc:54:6e:51:07:fd:12:4d:41:ea:ed:3d:
         eb:9a:65:4a:24:e4:3d:61:76:e0:98:7a:73:f2:b7:18:1b:55:
         da:3d:11:63:8f:43:87:f1:70:f5:4b:72:4a:86:36:5a:69:99:
         80:6a:cc:c2:ca:a0:18:e0:ec:da:5b:09:19:9a:f4:9e:a2:4c:
         7f:9a:7c:67:ec:53:81:b8:d4:b4:4e:92:12:96:0e:01:cb:85:
         d5:0f:8b:77:46:8b:b5:96:86:74:5b:18:ee:ee:81:40:f0:f8:
         a7:ef:95:c0:f1:00:ae:4b:9e:72:a1:c5:f3:d6:98:b3:37:c8:
         cb:ab:f6:51:05:5c:ab:b7:9a:68:d2:8b:e0:5e:53:a6:1d:e1:
         a4:c0:7c:11:93:80:fc:40:90:b1:94:bf:75:ad:01:61:cf:68:
         9b:02:7d:e3:e4:62:8b:c9:50:53:44:32:c9:73:03:0d:58:aa:
         3a:69:90:be:60:9f:d0:5b:cb:66:19:6d:7e:f0:25:aa:5c:32:
         f9:18:80:ec:af:e9:f1:5b:fd:d3:a9:e4:77:66:cb:d7:f1:36:
         df:1e:12:8f:98:b9:7a:31:e7:f3:5a:b7:14:1e:0f:a3:2d:af:
         30:02:3d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----