Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jb_FrH4AeCs3iN61ez_bBtOvaP4.roa
File:                     Jb_FrH4AeCs3iN61ez_bBtOvaP4.roa (raw, json)
Hash identifier:          LK50/+5qL6pHYYcM/9Ftds/Wm0V5vAEO29qfNm9cUA0=
Subject key identifier:   25:BF:C5:AC:7E:00:78:2B:37:88:DE:B5:7B:3F:DB:06:D3:AF:68:FE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189B34CBA7C4D394E1CA668E8FBBA95F138
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jb_FrH4AeCs3iN61ez_bBtOvaP4.roa
Signing time:             Tue 01 Aug 2023 22:51:37 +0000
ROA not before:           Tue 01 Aug 2023 22:51:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202256
IP address blocks:        2a10:ccc7:9000::/40 maxlen: 48
                          2a10:ccc7:9200::/40 maxlen: 48
                          2a10:ccc7:9300::/40 maxlen: 48
                          2a0e:97c6:4000::/34 maxlen: 48
                          2a06:de01:800::/38 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b3:4c:ba:7c:4d:39:4e:1c:a6:68:e8:fb:ba:95:f1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  1 22:51:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=25bfc5ac7e00782b3788deb57b3fdb06d3af68fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f9:b3:0d:c7:1c:4c:05:c5:b2:94:05:2e:59:
                    21:b0:73:5a:21:69:85:28:ce:06:6c:28:57:ef:2d:
                    75:29:ba:b3:48:a8:e3:30:c9:b4:a9:3d:88:b4:23:
                    86:cf:25:0d:15:f9:be:27:24:6a:90:e2:7d:a2:be:
                    2f:84:9b:68:34:6e:22:f4:c3:0c:89:93:a8:66:5a:
                    01:28:57:df:fb:92:5f:a4:f6:4d:86:79:19:b6:4e:
                    74:cd:02:7b:c0:cc:b7:e6:d3:ea:7d:10:5d:f0:b1:
                    0b:0d:74:1a:07:93:dd:bd:b3:66:2f:87:d4:82:c4:
                    64:ec:15:2f:cb:3b:85:df:84:da:22:e5:e1:65:26:
                    3b:20:f6:70:2c:61:a9:a4:02:d7:e1:10:96:be:e0:
                    74:a0:49:43:d6:76:87:d3:a3:89:9e:58:aa:c6:e5:
                    6d:48:32:e0:ec:6c:38:92:b1:50:e6:18:b3:d2:40:
                    cf:5b:03:bd:1d:20:85:89:2f:8c:55:2a:b0:3a:91:
                    2d:08:88:09:e2:7a:e3:69:4e:7c:a0:a7:29:0a:f7:
                    3f:f7:9a:6a:75:42:16:e8:e1:36:5e:80:1a:b1:10:
                    80:09:08:07:2a:91:55:83:a7:a4:82:a8:bd:e5:26:
                    bc:ee:a8:99:22:c6:d9:9b:1a:39:7c:c1:83:2e:d0:
                    e4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BF:C5:AC:7E:00:78:2B:37:88:DE:B5:7B:3F:DB:06:D3:AF:68:FE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jb_FrH4AeCs3iN61ez_bBtOvaP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de01:800::/38
                  2a0e:97c6:4000::/34
                  2a10:ccc7:9000::/40
                  2a10:ccc7:9200::/39

    Signature Algorithm: sha256WithRSAEncryption
         bd:fe:d8:18:db:59:82:8e:28:dd:e3:12:9d:a6:14:7c:56:c4:
         e2:cd:1b:4a:e3:81:41:6f:8e:f0:b4:80:e4:bd:98:bb:f1:08:
         ac:0f:a6:56:5f:85:c4:82:54:5b:96:bc:4a:58:01:5f:d7:ee:
         a8:bb:d8:21:ae:22:76:78:ea:11:6c:c0:cd:a9:04:3b:72:81:
         4d:b0:c5:18:21:8f:8a:a8:2a:49:8e:58:27:ea:c8:aa:29:b7:
         f5:47:78:68:9b:93:25:8a:b3:03:e3:70:e4:9e:9c:0a:f2:2c:
         d8:8f:ee:8c:3a:d8:8f:11:6e:e2:ee:e7:44:78:00:24:50:7d:
         01:15:cb:7e:80:e9:75:2d:33:69:a7:57:36:70:a6:da:4a:72:
         66:64:94:09:81:f2:0a:1e:1b:79:45:8e:5e:05:33:23:5b:fe:
         72:0b:fb:70:5b:da:7d:02:c1:fb:a6:bd:fe:cb:1d:ba:1b:98:
         e9:5b:e0:3a:0e:5d:08:67:7c:e2:db:99:5b:b1:f2:32:43:f4:
         c5:be:ea:c5:7e:d4:14:dd:65:59:55:37:e4:e0:44:85:94:57:
         0f:eb:64:ca:5c:cd:05:70:a6:dd:b4:7b:da:41:fe:3e:1e:0a:
         24:4c:56:e4:a3:5b:1f:b0:fb:97:61:9f:b3:91:d8:d3:c2:90:
         80:63:47:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----