Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JGiEWQoaVrD4it7j4yVEpjPyUpM.roa
File:                     JGiEWQoaVrD4it7j4yVEpjPyUpM.roa (raw, json)
Hash identifier:          6UPOqzkHOZNAWh6soFQnAHE2RdAV0Cw0exfy6nel5Qc=
Subject key identifier:   24:68:84:59:0A:1A:56:B0:F8:8A:DE:E3:E3:25:44:A6:33:F2:52:93
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018730D88BBB2604868ECA2DBA50936975C6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JGiEWQoaVrD4it7j4yVEpjPyUpM.roa
Signing time:             Thu 30 Mar 2023 04:48:30 +0000
ROA not before:           Thu 30 Mar 2023 04:48:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142382
IP address blocks:        2a0e:b107:1790::/48 maxlen: 48
                          2a0e:b107:1795::/48 maxlen: 48
                          2a0e:b107:1792::/48 maxlen: 48
                          2a0e:b107:1794::/48 maxlen: 48
                          2a0e:b107:1791::/48 maxlen: 48
                          2a0e:b107:1793::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:30:d8:8b:bb:26:04:86:8e:ca:2d:ba:50:93:69:75:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar 30 04:48:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=246884590a1a56b0f88adee3e32544a633f25293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:14:bc:07:c7:cc:f8:df:29:7b:f8:8a:bb:75:
                    82:2e:0b:f7:6c:6a:3d:4f:0f:88:bb:d9:73:6a:dc:
                    38:67:a8:66:e4:56:a3:77:3a:07:81:1c:25:97:59:
                    2a:f5:67:e7:ed:a4:53:a3:78:42:9e:86:d9:77:d9:
                    f4:89:c7:0e:b0:49:30:94:1b:c0:65:a6:9d:4c:f5:
                    4d:c8:70:3f:65:90:1b:40:dd:5b:b0:f4:19:ba:53:
                    fb:d8:26:cf:08:d5:ff:bd:2e:9d:2a:9f:3d:4e:f4:
                    af:73:e5:51:15:a7:33:a2:5b:cf:b6:f8:54:1a:c1:
                    c2:b7:7b:f7:15:20:0a:9f:a0:c6:2f:63:ff:41:a1:
                    c1:42:37:dd:46:c6:d1:66:9f:01:c5:bd:3c:23:83:
                    e8:c8:d1:12:eb:1d:d1:26:9e:3c:c0:20:1e:d1:40:
                    6d:1e:ff:4a:9d:d1:a8:87:f1:03:a9:9a:ce:57:fe:
                    6d:56:23:44:37:f4:1f:f3:21:65:b2:b9:16:f6:a9:
                    af:d8:04:4f:34:80:66:ed:32:93:bc:00:1c:1c:58:
                    df:12:c5:4c:79:80:65:73:bf:b1:90:d6:93:af:a1:
                    b6:5f:c1:06:2c:82:24:83:dd:cb:9f:2b:ca:a1:5d:
                    2e:9e:c2:f0:d9:f2:a4:5f:b7:a4:a3:e5:bc:f8:73:
                    a2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:68:84:59:0A:1A:56:B0:F8:8A:DE:E3:E3:25:44:A6:33:F2:52:93
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JGiEWQoaVrD4it7j4yVEpjPyUpM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1790::-2a0e:b107:1795:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         79:f9:78:d7:bb:24:a5:1a:81:36:0d:5e:46:8a:d0:c1:47:7d:
         b3:a4:38:64:1b:ec:c3:27:60:04:4f:68:81:1b:22:5b:fd:3f:
         b3:bb:c0:f5:23:79:bf:85:7b:9b:98:86:6f:1c:85:13:84:d0:
         61:0a:a4:5f:f4:f0:90:7f:3f:5c:80:70:84:ff:e5:9e:96:50:
         3b:95:27:f2:ce:35:03:4d:a2:08:5d:b0:2b:42:f0:66:65:2f:
         36:49:37:eb:a5:dd:cd:42:57:9c:ed:09:aa:0c:bd:37:b0:e9:
         ce:39:fb:39:61:ac:e9:e5:72:cf:45:63:d5:1f:ca:da:23:db:
         aa:d0:3a:61:09:9d:08:db:6f:b0:23:74:d0:45:b5:ca:53:62:
         69:f9:8e:bc:1a:66:71:12:10:86:66:96:94:ff:14:86:92:93:
         63:69:26:7d:31:99:0d:4d:2b:8c:67:dc:81:ee:e7:c3:f3:85:
         d3:ea:f7:bc:6b:9e:d1:23:0b:ff:eb:c2:e8:85:98:80:88:43:
         c7:48:67:88:6a:64:a7:19:44:62:1c:e6:99:0b:88:55:79:8f:
         4a:6b:be:fa:d3:61:ea:59:53:35:3a:fa:ba:5f:0e:91:5e:43:
         22:88:62:46:d3:a7:7f:1e:d9:e0:b7:5c:66:5d:79:bc:0c:a9:
         c6:cb:dc:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----