Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GjtS7ti0s99Bm646sOhqlebDrOA.roa
File:                     GjtS7ti0s99Bm646sOhqlebDrOA.roa (raw, json)
Hash identifier:          zaUdBp8X3PtvbSqLVZmriXLXCScIHUGTBmgDSx1b6Nw=
Subject key identifier:   1A:3B:52:EE:D8:B4:B3:DF:41:9B:AE:3A:B0:E8:6A:95:E6:C3:AC:E0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BCF24CE73933C3F2F7BF5549478B54358
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GjtS7ti0s99Bm646sOhqlebDrOA.roa
Signing time:             Tue 14 Nov 2023 18:42:57 +0000
ROA not before:           Tue 14 Nov 2023 18:42:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49581
IP address blocks:        2a0e:b107:27d0::/48 maxlen: 48
                          2a0e:b107:27d1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:cf:24:ce:73:93:3c:3f:2f:7b:f5:54:94:78:b5:43:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 14 18:42:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a3b52eed8b4b3df419bae3ab0e86a95e6c3ace0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:17:00:9b:3e:3f:a5:ec:9f:46:0c:3f:4a:a2:
                    7c:09:be:62:8f:68:05:b5:cf:f4:48:c4:79:f7:6b:
                    f5:fe:86:ab:45:fe:b2:47:7b:2e:88:01:70:21:76:
                    7a:fd:fe:92:d1:f3:7a:7a:8c:bf:be:cc:0a:a5:22:
                    25:b9:b3:1e:e7:e8:a9:d5:95:30:ee:68:de:28:a4:
                    53:9d:0d:89:4f:72:2c:19:56:cf:db:ac:6d:31:3c:
                    21:20:19:55:c1:01:1d:05:f4:26:37:25:fc:42:a4:
                    da:65:64:51:fc:a8:49:ed:f5:a9:3d:8c:19:a7:ed:
                    f8:29:b1:83:40:0a:c9:e7:54:25:e7:da:af:fc:ec:
                    7d:bb:21:54:ab:27:04:c6:c5:72:e6:75:99:dc:cc:
                    67:7a:a8:4e:8e:4e:80:f3:59:2a:7e:1f:c4:3f:2f:
                    5d:7b:41:c7:aa:39:7e:6f:1b:c2:b2:45:7d:4a:f8:
                    d8:55:f2:19:38:9c:03:99:25:e4:18:17:2d:ba:0d:
                    bf:aa:38:c2:03:89:70:92:19:d6:08:16:9a:51:36:
                    71:52:ef:ad:3e:29:5e:aa:ab:61:79:e8:9a:26:90:
                    45:9a:22:b9:27:04:62:fe:6e:9f:cd:e6:a2:8d:f6:
                    16:42:47:3c:a4:c9:ed:17:12:b3:fe:00:1f:fb:bc:
                    7d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3B:52:EE:D8:B4:B3:DF:41:9B:AE:3A:B0:E8:6A:95:E6:C3:AC:E0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GjtS7ti0s99Bm646sOhqlebDrOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27d0::/47

    Signature Algorithm: sha256WithRSAEncryption
         0e:d7:18:0b:5c:7b:2b:0b:d9:18:c4:6d:f8:83:7f:88:ec:e3:
         75:b9:83:4c:71:5a:eb:43:a0:36:be:39:c6:31:88:a6:08:14:
         46:11:25:04:a4:42:9f:a7:d8:82:50:03:bb:57:34:46:da:2d:
         29:8f:cf:99:03:39:75:d2:e4:13:6d:31:f2:24:e5:d1:0b:fa:
         27:96:55:b3:c3:39:da:4c:11:b2:d2:3c:01:bc:f7:a6:4e:30:
         77:4e:b7:8a:15:ab:a4:3b:bd:ed:bd:0c:d9:e8:d2:e8:cb:5c:
         c3:42:96:99:9b:d9:dd:09:29:24:a6:df:ef:2f:96:5b:5c:1d:
         83:a8:f7:5c:b4:6c:61:06:f3:71:20:05:e8:ab:e0:f3:49:fc:
         b2:b7:9e:69:8a:4d:81:76:83:4a:bb:e1:14:d0:b9:8c:8a:77:
         95:21:bb:75:77:aa:76:2d:23:02:b7:ea:30:e1:8f:db:6d:96:
         f2:5e:64:8f:6e:7a:08:43:5d:97:c6:1e:cc:a1:a3:f3:7e:32:
         57:34:5d:fb:4c:e3:44:8d:79:98:bc:54:3f:e5:ec:54:12:58:
         6c:49:38:38:c0:8d:59:fa:d4:61:b8:7f:31:c3:75:57:8a:08:
         a1:1c:e8:49:0c:ab:ec:b8:54:06:85:d8:4b:23:68:bc:7d:e8:
         e3:0e:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----