Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HREQcseqBvdjR0jDV6cSMa3FhJo.roa
File:                     HREQcseqBvdjR0jDV6cSMa3FhJo.roa (raw, json)
Hash identifier:          25qjlRl7u89ikN5z9dTr7yP73kKEKrG7/YQDxDKUUYc=
Subject key identifier:   1D:11:10:72:C7:AA:06:F7:63:47:48:C3:57:A7:12:31:AD:C5:84:9A
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E791939FDBA63E69E7C8597941BC90
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HREQcseqBvdjR0jDV6cSMa3FhJo.roa
Signing time:             Mon 02 Jan 2023 05:15:02 +0000
ROA not before:           Mon 02 Jan 2023 05:15:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     138632
IP address blocks:        2a0e:b107:1f0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:91:93:9f:db:a6:3e:69:e7:c8:59:79:41:bc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1d111072c7aa06f7634748c357a71231adc5849a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:84:47:2f:85:57:e6:a1:55:62:64:0d:5b:
                    28:72:ba:88:63:51:23:6c:ce:7e:dc:7e:b0:89:71:
                    79:63:18:82:5b:87:53:04:49:d5:66:40:fa:50:c4:
                    6d:90:f0:ff:9f:fd:0f:de:2c:34:dc:df:8a:e1:73:
                    5e:72:97:eb:d1:27:ed:ca:3e:99:ad:fc:53:23:d4:
                    06:43:a9:93:2c:56:ce:43:99:f9:17:fc:d1:15:81:
                    a7:fd:31:83:f2:2c:86:63:9d:42:3f:c9:d7:cf:d4:
                    34:15:2f:36:d5:4b:94:1a:d7:38:67:8e:61:d4:66:
                    de:d8:c9:3b:f1:b1:ea:61:3b:f6:db:ec:b8:ae:47:
                    41:03:65:89:f5:b7:2a:95:08:9b:56:44:74:83:81:
                    7a:af:14:6b:ab:1f:42:57:b5:9f:f4:1a:bd:7a:06:
                    fe:a3:ee:9f:92:ff:a2:7c:7c:aa:9c:81:4a:d7:8e:
                    bb:2e:8f:5b:49:62:35:e0:67:34:99:d1:91:5c:95:
                    3a:4d:ee:b1:0d:6c:b6:ef:8d:49:37:2e:97:94:8a:
                    8f:21:63:9c:a8:70:c3:a3:33:9e:c0:42:60:05:6b:
                    ab:91:a4:bc:0f:11:5e:92:f6:bc:97:c8:bb:1f:fa:
                    fe:16:a5:93:5e:65:79:25:25:f4:08:47:94:f0:67:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:11:10:72:C7:AA:06:F7:63:47:48:C3:57:A7:12:31:AD:C5:84:9A
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HREQcseqBvdjR0jDV6cSMa3FhJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:91:f7:3a:ee:5a:1d:3b:bb:bb:db:d9:d1:b1:21:03:f3:5c:
         00:a4:ef:b1:66:6d:a9:07:9c:9c:38:55:e3:ed:93:dc:1d:07:
         92:de:eb:d5:4c:1e:91:ad:3d:18:c3:d9:e2:1a:5e:55:6c:02:
         d7:80:42:27:7d:9c:bd:27:75:45:8f:85:ac:a2:80:0f:70:00:
         90:f8:2b:c4:23:02:ff:25:8e:84:e9:2d:b2:b0:a8:7e:c6:51:
         e3:1a:52:b9:ee:c7:98:63:9f:05:cd:0d:bb:bf:10:42:1d:a2:
         39:2e:17:83:99:1e:d7:a4:26:74:db:e4:40:1d:8c:b3:19:4b:
         db:30:69:8b:bb:2a:96:98:a7:1b:09:3d:19:22:e7:54:99:74:
         15:15:80:80:11:f9:c8:aa:de:f5:f4:31:ed:96:ec:49:d1:e2:
         be:70:50:2a:4a:ef:b4:ab:e0:a5:d7:96:57:ef:1f:f6:1f:7a:
         fd:36:7b:5b:b0:2a:d6:ca:11:41:9a:12:c0:e9:fd:e8:cc:1d:
         39:77:ec:84:da:83:0e:3d:2e:24:4b:14:7e:89:0a:a4:0d:dc:
         2c:0b:e4:13:df:3d:95:6f:c9:74:15:2f:bc:bd:73:90:14:dd:
         c7:ed:01:47:22:51:26:c6:47:a5:7e:72:80:89:87:47:40:34:
         c6:00:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----