Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IF_5RB3Pd5dzI4feDG9NIR38gBs.roa
File:                     IF_5RB3Pd5dzI4feDG9NIR38gBs.roa (raw, json)
Hash identifier:          kgf4MjJrn6AeSiWU9h1EmbiuChfrU0B99ZLHND0wEYc=
Subject key identifier:   20:5F:F9:44:1D:CF:77:97:73:23:87:DE:0C:6F:4D:21:1D:FC:80:1B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7EE2022FA31B88BA2B732A9799697
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IF_5RB3Pd5dzI4feDG9NIR38gBs.roa
Signing time:             Mon 02 Jan 2023 05:15:25 +0000
ROA not before:           Mon 02 Jan 2023 05:15:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210619
IP address blocks:        2a0e:97c0:800::/39 maxlen: 48

Validation:               Failed, certificate revoked on Sun 22 Jan 2023 18:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:ee:20:22:fa:31:b8:8b:a2:b7:32:a9:79:96:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=205ff9441dcf7797732387de0c6f4d211dfc801b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:36:84:51:3e:4b:e0:45:85:58:78:d7:88:
                    ef:0f:2c:1e:11:f4:3d:19:51:b1:40:19:88:0a:e0:
                    c6:11:86:8c:ae:a7:14:c4:75:62:6c:09:a8:42:83:
                    56:ba:92:0c:4d:ce:43:4b:e1:33:7e:12:db:59:a0:
                    bb:fe:63:49:48:8a:9d:e9:f9:e2:a9:cd:25:61:68:
                    57:ca:5d:b1:23:62:10:5d:ca:68:af:ce:f1:89:1b:
                    45:37:b5:61:97:a6:fa:26:e8:a6:0c:02:a0:c3:8e:
                    76:41:bb:fb:ce:f6:8d:2b:6a:ca:6c:b1:80:d8:9c:
                    5b:b8:19:5b:78:08:f9:c2:d8:73:8a:49:ae:f5:1e:
                    b2:8b:26:2c:2e:5a:d0:e4:1d:17:1b:3b:d9:f6:1d:
                    da:24:5d:31:59:69:99:c7:23:e0:47:58:e0:fe:b7:
                    af:5f:a7:90:a4:e0:9d:df:78:07:b5:d2:e5:76:6a:
                    de:fb:78:6b:86:6e:45:04:f7:1d:21:a1:e2:b6:9d:
                    d4:77:76:8b:f5:c7:df:9c:2b:09:15:30:28:be:9c:
                    9a:41:e8:44:1f:13:9b:ae:7b:71:d8:23:3d:fa:5a:
                    8f:cf:97:f6:8a:67:13:0e:1e:8e:5b:a1:a9:c2:a0:
                    c6:4d:d6:79:42:ca:62:0d:79:e2:f5:26:29:24:75:
                    01:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5F:F9:44:1D:CF:77:97:73:23:87:DE:0C:6F:4D:21:1D:FC:80:1B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IF_5RB3Pd5dzI4feDG9NIR38gBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:800::/39

    Signature Algorithm: sha256WithRSAEncryption
         56:ad:f9:a0:60:30:82:f8:56:4b:69:87:65:33:f4:98:4d:17:
         74:74:ea:05:15:bb:dd:bc:e3:e5:df:da:78:c0:07:c5:25:d5:
         8b:d8:fa:54:92:e7:88:9c:58:bc:43:49:79:bc:34:4e:01:eb:
         f0:69:2d:8d:9f:8c:ce:0c:15:8e:57:04:fa:3f:71:f3:29:da:
         4c:6c:0d:c7:c4:28:c9:d3:ab:0d:67:58:c8:a6:f1:3a:ae:a1:
         0d:d2:37:06:8a:32:e3:3e:5e:ff:fc:74:bd:73:d4:8f:fc:c5:
         30:33:ac:dc:d1:4b:b1:49:48:08:7b:56:18:c0:54:2b:93:55:
         c4:3e:f3:4d:d7:b0:b8:ec:41:f4:d5:80:41:a8:de:0b:cb:bb:
         0f:15:58:89:7c:d7:4d:7a:5a:f3:90:02:6b:4b:71:01:d4:d6:
         bf:87:39:c2:eb:a2:04:72:7a:8b:54:5c:31:71:cb:ad:e4:46:
         94:4b:6d:9c:16:c8:0f:2b:20:d4:85:82:f5:53:f9:be:ec:44:
         cd:93:d9:b8:9c:ac:2a:1b:05:d3:b8:ba:de:1d:a0:68:5c:a1:
         60:98:87:4e:ef:07:bf:e7:e1:78:71:c3:89:0b:39:92:27:dd:
         70:65:bf:6e:e5:50:6f:14:e5:ae:2e:a5:68:f3:2f:d6:e8:76:
         e9:ea:12:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----