Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JZsNQJyNQ3tLdorlMCom0xLiO5c.roa
File:                     JZsNQJyNQ3tLdorlMCom0xLiO5c.roa (raw, json)
Hash identifier:          gZVOjR/O2yCbzIe6Ih/EULmGQv5UbOX9zveCbpS1L6E=
Subject key identifier:   25:9B:0D:40:9C:8D:43:7B:4B:76:8A:E5:30:2A:26:D3:12:E2:3B:97
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E811FC5CDD7B00D33CDD1243FF2EF6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JZsNQJyNQ3tLdorlMCom0xLiO5c.roa
Signing time:             Mon 02 Jan 2023 05:15:35 +0000
ROA not before:           Mon 02 Jan 2023 05:15:35 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212121
IP address blocks:        2a0e:b107:1130::/48 maxlen: 48
                          2a0e:b107:1130::/44 maxlen: 48
                          2a0e:b107:1132::/48 maxlen: 48
                          2a0e:b107:1131::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:11:fc:5c:dd:7b:00:d3:3c:dd:12:43:ff:2e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=259b0d409c8d437b4b768ae5302a26d312e23b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b1:13:2d:d9:b3:b3:84:84:3a:87:71:38:d9:
                    e1:11:79:03:8e:6f:a8:0e:75:f7:73:48:42:29:4b:
                    06:19:bc:d1:da:38:60:1d:ed:d2:54:9f:d8:11:50:
                    9d:e8:2d:93:6c:64:05:6a:87:db:c1:a9:e8:1f:99:
                    9e:3a:27:06:81:57:9f:b0:99:a2:64:bc:c8:98:fb:
                    3b:7b:85:c1:e2:fa:b7:5d:ff:08:e0:b9:cf:84:61:
                    2a:06:40:1f:62:f0:4f:87:44:5a:64:d9:f2:0a:f5:
                    c3:bc:7b:7e:4b:fd:50:1f:ef:f9:08:b0:1d:0a:a5:
                    41:05:b6:84:39:7e:41:b5:09:fb:c3:8e:17:3a:6e:
                    c7:48:bf:61:7b:42:b9:be:15:a4:6b:b9:eb:09:62:
                    ef:3e:97:ab:98:f9:b6:b2:21:83:28:66:38:d4:a8:
                    79:40:6a:99:03:78:2a:13:72:87:16:7f:ae:44:56:
                    97:a5:9e:08:72:6e:ba:7f:bb:7e:37:bc:7f:f4:24:
                    27:95:68:4d:b0:3b:20:05:f0:dc:79:25:94:11:6d:
                    12:4f:50:4f:77:59:95:19:4c:17:87:53:2c:55:02:
                    89:fc:f1:a6:17:86:47:c0:ee:48:93:ba:84:13:a0:
                    51:7a:af:61:73:50:5b:4f:a5:90:cc:58:64:e9:9a:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9B:0D:40:9C:8D:43:7B:4B:76:8A:E5:30:2A:26:D3:12:E2:3B:97
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JZsNQJyNQ3tLdorlMCom0xLiO5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1130::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:c1:73:ed:13:c3:df:42:a9:ab:29:a5:f6:4b:ee:11:d2:66:
         85:09:ad:6d:78:1d:8e:a6:e6:f4:2c:e3:d8:95:9a:1e:89:f6:
         e0:86:2a:79:7b:c0:3d:3e:a5:2c:8b:0d:1a:4c:9a:4d:19:7f:
         e9:9b:a0:f3:31:86:f6:ac:08:52:a9:b7:6b:ec:17:41:65:7d:
         1f:63:40:7b:1d:f8:62:4c:55:c0:d3:09:a4:d0:ad:da:f1:b4:
         d9:54:da:89:11:49:97:d5:38:9a:77:79:b0:9b:df:e8:6b:a9:
         b3:c7:e0:7b:1c:1b:f4:16:bd:40:58:71:7b:f3:fd:b3:60:d7:
         7f:cf:e2:7d:9b:14:14:8c:aa:6c:59:04:a6:6a:21:b4:40:ea:
         41:a7:11:f5:da:00:5c:7e:bc:e6:06:95:cd:6d:34:b9:d9:9b:
         7d:a0:4e:18:02:b7:b7:c9:75:fe:40:23:f8:ce:ec:a4:5b:5f:
         34:6a:59:fd:15:df:05:5c:e8:8e:9d:c6:7f:86:aa:94:53:14:
         b9:97:09:b4:b8:79:3e:63:d3:b7:02:f1:55:bd:1a:e0:cc:ae:
         2e:22:42:bf:4e:c0:eb:0e:15:e5:2d:65:70:cf:67:1b:20:36:
         2a:08:cd:a1:c6:8c:46:dd:a4:2c:2b:48:85:3f:be:d5:4d:e5:
         49:b0:1b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----