Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LmBtAsr_p_Q6ID8UcvlFxHtuxoc.roa
File:                     LmBtAsr_p_Q6ID8UcvlFxHtuxoc.roa (raw, json)
Hash identifier:          7GNdVRVqAdGj88PRNtugEPyV7qPlpe2ox4DcTDts2WE=
Subject key identifier:   2E:60:6D:02:CA:FF:A7:F4:3A:20:3F:14:72:F9:45:C4:7B:6E:C6:87
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BDD96FCFFC89C1A6D256E81205F6F4D68
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LmBtAsr_p_Q6ID8UcvlFxHtuxoc.roa
Signing time:             Fri 17 Nov 2023 14:02:21 +0000
ROA not before:           Fri 17 Nov 2023 14:02:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a0e:b107:19a0::/48 maxlen: 48
                          2a10:ccc0:3000::/48 maxlen: 48
                          2a06:de00:10::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dd:96:fc:ff:c8:9c:1a:6d:25:6e:81:20:5f:6f:4d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 17 14:02:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e606d02caffa7f43a203f1472f945c47b6ec687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:ef:12:2a:a0:e5:6c:a4:d8:9f:e6:60:5d:
                    7b:d8:b2:05:cf:e8:66:ca:d0:b9:89:0c:f9:9f:e9:
                    51:65:fa:b8:dc:ad:81:36:0e:03:18:74:cf:0d:09:
                    db:85:af:63:6e:07:f3:91:f6:b0:b5:3f:d5:ea:8b:
                    83:7b:df:9c:96:f8:e7:fb:fb:73:0a:4c:68:a2:c2:
                    2d:c6:8f:88:c3:c1:05:dd:bc:d4:3e:c7:18:cd:45:
                    ae:54:92:7a:26:c7:9a:69:ab:40:92:89:5a:64:4e:
                    aa:ab:f5:bb:7c:60:a9:fc:23:7c:fe:4b:54:eb:be:
                    f6:e3:61:d9:73:05:fe:e0:2e:77:43:6b:34:fe:a0:
                    ba:f4:59:8a:c2:2a:7a:0d:e5:6c:8d:a5:7f:40:c2:
                    a9:2a:b8:0c:12:3f:99:f6:9a:82:08:f0:1b:f5:96:
                    ed:c7:15:2e:de:d4:b6:6e:e7:97:75:c9:0f:7d:06:
                    2c:10:90:6a:71:8b:d1:2b:d6:ba:7e:53:6d:93:cc:
                    aa:c2:4e:ec:37:2c:da:b1:92:c3:4a:3d:00:a8:a7:
                    04:27:12:27:42:f1:54:de:ae:1d:3a:5d:8f:5e:6e:
                    9d:73:7d:c2:5e:f9:67:05:6a:47:25:c2:6d:0e:c0:
                    f1:65:37:96:e9:5a:88:d0:75:35:10:b6:fb:8f:55:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:60:6D:02:CA:FF:A7:F4:3A:20:3F:14:72:F9:45:C4:7B:6E:C6:87
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LmBtAsr_p_Q6ID8UcvlFxHtuxoc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de00:10::/48
                  2a0e:b107:19a0::/48
                  2a10:ccc0:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:48:71:98:a1:7e:8c:8b:62:dc:44:37:dd:8f:d9:f7:26:30:
         0a:1b:7f:51:63:cd:dc:1b:58:2b:c4:ba:2d:ab:31:da:2b:35:
         f3:d1:ed:45:92:b9:d5:87:ed:e7:d0:2b:94:eb:fa:e5:51:a3:
         1b:3e:23:27:2b:4e:db:85:f2:b1:cf:b0:e1:ec:90:ce:76:8b:
         b0:43:9a:53:f7:f8:56:14:e4:94:73:8e:16:59:cf:d2:56:ea:
         0c:32:39:22:c4:fe:0e:30:a6:71:b5:36:8c:c0:ad:55:36:44:
         40:f1:79:b9:e4:2e:25:a5:a1:3b:7a:8a:96:da:26:c8:2b:04:
         af:f4:94:80:a5:4a:cc:50:8f:00:b7:19:18:d9:7a:83:08:13:
         33:95:ab:43:13:4f:66:09:42:43:18:0e:30:9f:29:65:3e:91:
         bf:c5:9c:50:1c:f8:d6:5e:b5:b0:33:d5:3c:e4:65:08:82:9a:
         c8:6d:18:f4:b5:fb:c1:cf:c2:8f:af:e6:cd:77:b5:f0:86:45:
         77:89:5c:a3:05:b5:c3:0f:c9:f7:3b:0a:ef:87:2e:39:23:5e:
         3b:26:8c:db:be:1c:a9:d6:41:fd:46:93:74:40:a3:cd:d0:4c:
         88:8a:e6:8b:2a:d8:81:c9:e4:95:49:95:40:45:2f:99:3b:c1:
         89:ac:27:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----