Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JfZOGgakcFpzt9E-KuFRiNNESBk.roa
File:                     JfZOGgakcFpzt9E-KuFRiNNESBk.roa (raw, json)
Hash identifier:          bY4lzgBEdhUgoFsKMTGTigVlF7I8K8jDPPJ38DuzziM=
Subject key identifier:   25:F6:4E:1A:06:A4:70:5A:73:B7:D1:3E:2A:E1:51:88:D3:44:48:19
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7D2D651975B2D4A78A4661AC84A50
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JfZOGgakcFpzt9E-KuFRiNNESBk.roa
Signing time:             Mon 02 Jan 2023 05:15:19 +0000
ROA not before:           Mon 02 Jan 2023 05:15:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208191
IP address blocks:        2a0e:b107:16::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:d2:d6:51:97:5b:2d:4a:78:a4:66:1a:c8:4a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=25f64e1a06a4705a73b7d13e2ae15188d3444819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:da:18:90:d3:3e:53:f2:8a:0b:2d:91:6e:b8:
                    17:47:25:8a:e2:d3:08:0e:6f:ed:54:3c:1d:ee:d0:
                    aa:c7:df:93:cc:22:a1:c3:0a:e1:24:f5:7d:d1:dc:
                    bc:17:fa:d7:de:c7:cd:2b:e3:dd:8b:79:42:e1:32:
                    58:0b:cc:fb:de:14:c6:31:38:df:95:bf:fd:d7:2e:
                    57:2d:fc:3f:07:95:ae:a7:c9:12:45:78:33:4c:1c:
                    ec:a9:c8:aa:2b:93:a5:57:9d:5e:49:a0:16:9e:43:
                    0a:fa:7b:f0:dd:22:b2:80:7f:cb:16:57:d9:85:9c:
                    89:e1:a8:a0:80:c0:ec:d5:85:eb:46:6a:94:88:ca:
                    f9:ae:aa:c7:da:a1:ee:1d:77:a1:6e:37:0c:02:39:
                    1d:2d:ce:95:e6:5c:3a:e1:f3:64:03:bc:f6:37:55:
                    5a:11:31:90:83:2f:b4:e5:c5:91:ab:97:9b:3a:bc:
                    44:71:3f:3b:6d:66:51:31:c1:34:be:54:46:27:d4:
                    82:15:67:79:40:fb:1d:86:50:b8:a9:9c:bc:a3:a0:
                    ec:43:db:fa:73:fb:67:88:55:99:58:ec:fb:46:1d:
                    0f:9c:c6:a4:dc:10:27:65:a2:76:1e:96:53:ba:4d:
                    c3:a0:4b:41:c1:93:7a:a7:02:33:4c:48:cc:df:f4:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F6:4E:1A:06:A4:70:5A:73:B7:D1:3E:2A:E1:51:88:D3:44:48:19
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JfZOGgakcFpzt9E-KuFRiNNESBk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:56:27:34:52:41:58:c6:d9:75:4b:70:31:c7:16:55:67:3f:
         af:fc:76:ac:fa:cc:1c:90:70:6e:5c:30:45:fb:42:2f:a8:b4:
         db:bb:58:b5:ed:71:f8:27:16:f3:57:b6:38:d7:82:e8:33:ce:
         be:49:ac:52:4d:7e:c5:7e:97:36:98:40:71:0e:6a:00:66:ae:
         62:16:a3:86:d3:0d:7e:fd:df:e3:9f:04:bb:00:bf:6d:d2:24:
         7b:6d:72:ca:78:b8:f8:53:f4:7b:60:21:57:d0:97:33:4b:7d:
         61:e9:e9:59:88:36:88:e3:6d:1b:34:90:8e:d7:6b:3b:c1:52:
         19:03:2f:9b:61:53:d9:f8:ae:af:88:2c:60:c6:0b:72:24:85:
         81:0c:31:16:85:c2:2d:3e:a0:66:5b:1f:c8:0e:ad:e1:77:25:
         5d:f8:10:d8:a5:8c:d7:69:1d:31:ef:9d:ca:1e:2a:90:46:27:
         9b:09:94:a6:9c:55:39:d8:0c:fe:e5:bb:a8:ef:33:46:b1:59:
         78:44:c0:74:1c:73:6c:e7:c2:7f:36:c5:7f:60:1b:db:ee:d7:
         d9:82:ad:ca:41:55:0a:d2:61:5c:6b:f2:9c:c3:f2:a0:15:09:
         ac:93:42:c0:dd:ec:8b:91:27:d1:04:8d:3f:92:8a:53:19:31:
         17:a7:a7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----