Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KEFgWicCvcwV46xIlFxNjuWi1OM.roa
File:                     KEFgWicCvcwV46xIlFxNjuWi1OM.roa (raw, json)
Hash identifier:          hWJXf4ulGPAya43F600bX14mII47atxcmayYyE3/HmI=
Subject key identifier:   28:41:60:5A:27:02:BD:CC:15:E3:AC:48:94:5C:4D:8E:E5:A2:D4:E3
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01898D7ADE430FCA2083A9F7D877CBD76C76
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KEFgWicCvcwV46xIlFxNjuWi1OM.roa
Signing time:             Tue 25 Jul 2023 14:36:27 +0000
ROA not before:           Tue 25 Jul 2023 14:36:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49581
IP address blocks:        2a06:de02:6020::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:8d:7a:de:43:0f:ca:20:83:a9:f7:d8:77:cb:d7:6c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul 25 14:36:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2841605a2702bdcc15e3ac48945c4d8ee5a2d4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:67:47:55:ed:84:9f:46:3f:18:c8:41:c8:
                    ae:29:c3:2b:42:2f:b3:ec:97:5f:3c:d6:d1:61:39:
                    61:d4:f5:a0:95:77:c1:bd:5e:c7:d3:47:f2:02:52:
                    af:3e:e9:17:a7:33:3d:3a:90:04:ba:e0:11:e9:4e:
                    c8:6a:0c:2f:20:03:24:1d:75:b7:48:56:f4:c5:46:
                    54:b4:e2:86:0b:8b:44:cd:20:8f:d0:4f:5a:08:39:
                    dc:9f:03:80:04:d8:0c:8f:6e:90:69:76:9d:fe:ca:
                    02:59:d3:1c:67:7f:96:b0:09:fe:92:cd:fe:c0:1e:
                    06:55:a2:97:05:c8:ff:d7:53:5e:b2:27:24:40:f6:
                    66:ae:6f:4d:6b:b7:cd:15:69:20:20:db:78:f9:f2:
                    be:32:6a:a1:cb:10:4b:2a:27:30:22:e1:ec:15:76:
                    45:2b:00:7c:18:cf:3a:fd:b8:69:25:3a:1a:02:02:
                    ba:21:05:44:eb:05:80:cb:34:6b:09:ec:70:13:11:
                    a0:08:b4:c1:1e:93:92:3a:a0:5b:34:10:07:f0:1c:
                    98:2f:d6:3c:c7:4b:ea:ef:f0:d8:0c:9a:20:4d:40:
                    fa:24:42:a1:7e:bd:c6:92:de:34:73:1e:da:a1:45:
                    ed:d3:62:be:e0:8b:4d:e0:20:39:8b:a5:b5:eb:4b:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:41:60:5A:27:02:BD:CC:15:E3:AC:48:94:5C:4D:8E:E5:A2:D4:E3
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KEFgWicCvcwV46xIlFxNjuWi1OM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de02:6020::/44

    Signature Algorithm: sha256WithRSAEncryption
         36:7d:f8:b9:35:2f:a0:f6:38:29:95:50:30:05:ad:6a:f4:4d:
         42:c2:6c:cf:33:32:f2:e0:31:23:16:8f:b5:da:b5:8f:c6:12:
         f0:25:0f:30:82:0a:50:f9:8e:61:f8:37:b3:7d:67:68:2d:50:
         e0:06:93:b9:39:4d:ae:2c:db:31:26:df:d9:47:c7:56:d6:ee:
         40:1e:20:10:ef:40:ec:98:42:95:57:be:a3:ba:2f:f0:fe:0f:
         03:1e:84:7e:6e:56:ba:3b:2b:f6:15:0c:af:48:e4:6c:4f:84:
         98:e0:f7:5b:73:67:01:6c:64:d5:78:24:a7:c8:35:07:22:31:
         39:c2:95:29:ac:34:e9:d4:bf:a9:e4:8f:75:e6:56:51:ee:c3:
         7b:c4:41:51:68:52:21:02:12:49:e5:a6:59:7e:3e:45:35:21:
         49:41:8e:da:17:07:d7:49:88:8d:b0:0b:31:8d:92:61:92:3b:
         04:3d:31:db:90:65:9f:09:31:18:0f:da:ba:4b:0e:27:d2:8f:
         eb:b6:c1:0b:1a:21:f4:a6:d5:ba:3e:d0:20:d6:74:2e:f5:4f:
         3c:ec:76:6d:3f:8c:ee:91:ea:df:74:78:7b:06:7a:44:0d:e8:
         11:92:47:7a:e6:75:15:5a:71:92:60:01:82:86:b2:e2:85:f7:
         32:a9:a2:73
-----BEGIN CERTIFICATE-----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