Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LkvUg0Ld5tzZKnHr_Og4h4MLs-c.roa
File:                     LkvUg0Ld5tzZKnHr_Og4h4MLs-c.roa (raw, json)
Hash identifier:          jOKqaGfC9gzXA1XDHFYO1RAAL4+/aOyXEukGXaJ0m+U=
Subject key identifier:   2E:4B:D4:83:42:DD:E6:DC:D9:2A:71:EB:FC:E8:38:87:83:0B:B3:E7
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189C1C80517A09776FA4F29B191C031DF8D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LkvUg0Ld5tzZKnHr_Og4h4MLs-c.roa
Signing time:             Fri 04 Aug 2023 18:20:58 +0000
ROA not before:           Fri 04 Aug 2023 18:20:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48002
IP address blocks:        2a0e:b107:1450::/48 maxlen: 48
                          2a0e:b107:1452::/48 maxlen: 48
                          2a0e:b107:1454::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:c1:c8:05:17:a0:97:76:fa:4f:29:b1:91:c0:31:df:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  4 18:20:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e4bd48342dde6dcd92a71ebfce83887830bb3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a9:7d:8e:3c:19:d0:9b:35:a9:8d:32:bf:28:
                    f7:69:df:30:d1:20:45:04:09:11:b0:92:7e:40:ee:
                    ed:f8:03:e3:4a:92:36:59:8e:9a:27:d8:0f:d4:be:
                    97:d4:f9:01:ee:3a:56:e6:64:9b:4e:c6:02:ee:20:
                    51:8a:ed:26:d7:3a:65:35:18:2b:76:aa:6d:cb:af:
                    16:45:2b:58:5a:03:6f:51:e1:6d:36:8d:f9:27:72:
                    61:6a:c8:d2:76:24:8a:e8:72:d2:fb:e4:64:f6:4e:
                    a0:16:1f:c1:73:4b:9d:78:67:27:5a:b8:88:c1:64:
                    8c:d5:06:03:92:23:ed:a4:29:7a:0e:0c:a6:91:17:
                    24:66:32:85:23:08:a6:51:41:17:35:f8:47:c2:25:
                    6f:43:0f:e6:d2:29:0a:25:81:8a:4f:d3:8f:a6:d2:
                    d7:45:15:24:51:cf:96:7b:56:4e:6d:83:92:8a:3e:
                    f6:c8:c8:10:a3:65:0e:4f:02:a5:99:f2:e6:89:fa:
                    f7:9a:f4:76:b9:26:4b:9d:71:9a:5e:ce:2a:5d:59:
                    02:e9:a8:e4:6c:11:10:91:cd:f3:02:af:6e:0d:39:
                    6e:b2:a5:c3:e8:1a:9f:f3:d0:c1:a9:99:df:dd:3d:
                    29:08:9b:67:71:63:83:59:3a:f3:92:d3:7a:2b:55:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4B:D4:83:42:DD:E6:DC:D9:2A:71:EB:FC:E8:38:87:83:0B:B3:E7
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LkvUg0Ld5tzZKnHr_Og4h4MLs-c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1450::/48
                  2a0e:b107:1452::/48
                  2a0e:b107:1454::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:fc:5d:d8:52:63:44:51:0d:d1:27:4c:9e:c1:92:f5:39:41:
         25:8b:0f:3f:b7:cd:b7:8b:d3:00:30:9d:7c:db:b1:dc:d6:ad:
         fe:9e:1f:52:b2:fd:f1:0d:2f:b5:ae:01:ef:d8:70:d8:fe:ae:
         b3:e1:78:d5:35:1e:e7:5f:f3:31:aa:84:3c:5e:bb:ae:56:e6:
         31:9f:a0:bf:c6:73:6c:25:c6:64:3a:41:d9:ae:f0:13:e5:60:
         e4:bb:b1:67:df:dc:f2:4f:a5:27:b6:a5:8e:da:28:14:52:bb:
         dd:07:c9:9a:a9:27:d6:aa:9d:79:99:2f:39:94:16:9f:f7:fc:
         43:5f:d7:1f:c5:80:39:b8:dd:38:a4:ed:11:84:be:c4:0c:fc:
         76:87:1a:02:d0:bd:1d:ea:89:cc:19:2e:71:12:73:7c:29:35:
         22:b1:2f:4d:87:85:4f:50:ba:74:60:3f:82:c8:d1:8d:c6:cf:
         25:03:3d:fe:46:1a:54:b4:fb:97:2d:98:ca:24:dd:e1:0a:ca:
         1d:84:fa:0e:86:40:11:cf:3e:eb:af:c1:82:9b:04:27:ab:5b:
         7a:68:86:0c:94:0b:2b:39:c1:ef:12:0a:7f:8f:9f:85:f6:49:
         74:61:11:ad:ed:a9:b6:48:1d:5c:40:fa:c4:d4:84:78:35:a7:
         ff:ea:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----