Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LoiflaUGYyyJ5-N7jjLfDs7wgEE.roa
File:                     LoiflaUGYyyJ5-N7jjLfDs7wgEE.roa (raw, json)
Hash identifier:          buJlu11Gg3QSMJhxjDLzK5vJyqu10U0b9B/TkpNHq9I=
Subject key identifier:   2E:88:9F:95:A5:06:63:2C:89:E7:E3:7B:8E:32:DF:0E:CE:F0:80:41
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0188EEBFA662C89C1AD9031D857B95C987D7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LoiflaUGYyyJ5-N7jjLfDs7wgEE.roa
Signing time:             Sat 24 Jun 2023 18:51:57 +0000
ROA not before:           Sat 24 Jun 2023 18:51:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212516
IP address blocks:        2a0e:97c1:104::/48 maxlen: 48
                          2a0e:97c1:108::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:ee:bf:a6:62:c8:9c:1a:d9:03:1d:85:7b:95:c9:87:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun 24 18:51:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e889f95a506632c89e7e37b8e32df0ecef08041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:2f:19:6e:10:ec:00:38:a1:e6:84:67:bc:
                    b7:e6:6c:8e:20:81:70:9f:84:d4:d9:f9:29:55:52:
                    90:a1:80:31:8a:5e:ff:3f:cc:3d:c4:7e:f5:53:20:
                    73:89:09:2d:5c:1f:27:b3:74:f9:74:98:62:23:7a:
                    ff:bf:da:f7:a5:43:05:b9:1e:16:73:09:38:ea:c5:
                    9a:e0:c6:7b:72:cd:d4:be:f2:af:2d:ce:92:fb:73:
                    53:c0:cd:c5:53:44:db:6d:ac:69:96:9d:c1:ab:f2:
                    99:c7:44:45:18:1c:e7:07:17:98:d6:6e:3d:6e:db:
                    77:2e:6b:f5:a2:6a:69:d7:db:9e:9c:a9:68:09:a2:
                    6f:6e:6d:4e:1e:a6:e3:f4:b0:4f:64:4e:3d:9d:76:
                    9f:78:ad:34:40:f6:1a:38:1c:74:f0:24:5b:3a:af:
                    8f:33:02:17:5d:d7:7e:bd:55:5d:57:e6:00:92:c5:
                    99:09:a9:e9:bb:eb:33:ce:cf:7c:0d:c1:63:5e:45:
                    99:73:4e:05:5a:da:11:62:88:18:78:ea:5b:50:29:
                    9e:d4:1c:e8:1f:da:ba:86:6c:73:ab:33:b7:66:00:
                    ec:fc:1a:91:2b:c6:77:fd:ef:ff:f7:17:49:a7:00:
                    5a:8a:4a:db:2f:2c:de:cc:74:57:13:fe:ae:e9:34:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:88:9F:95:A5:06:63:2C:89:E7:E3:7B:8E:32:DF:0E:CE:F0:80:41
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LoiflaUGYyyJ5-N7jjLfDs7wgEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c1:104::/48
                  2a0e:97c1:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:43:2e:a6:e3:90:72:bd:3f:b6:a6:32:b1:59:34:88:04:6f:
         b5:d0:87:c3:b2:1b:b3:e0:d1:0c:cd:75:20:57:61:74:0a:7e:
         26:f2:c1:3c:0b:ee:03:d6:f9:16:0e:ac:0e:99:bd:94:24:c3:
         f3:0e:be:40:98:fb:9b:cb:93:ae:75:e1:4d:47:31:80:c9:85:
         ab:4e:44:2c:86:ad:6b:12:60:6b:4c:61:c6:ed:1e:4e:3d:e2:
         94:b1:ec:3f:60:cf:fd:09:b3:65:c9:7f:ac:15:3f:f1:45:85:
         80:63:f0:8f:5d:29:e4:45:39:ec:6f:ca:d6:2d:54:c8:09:9f:
         ca:14:94:fc:76:16:7f:d0:80:2a:56:c5:41:86:ac:ee:92:c1:
         1c:aa:af:59:b5:7d:8b:e6:fa:41:c3:0a:22:1c:5f:79:4a:c7:
         67:09:69:c3:66:be:23:c6:22:d8:68:09:68:21:39:29:ac:06:
         4f:65:c0:77:9c:de:5f:c7:3b:1b:d6:3c:7a:cc:d6:35:b5:a2:
         41:d7:70:e6:c3:cc:8d:da:9f:6c:b1:bb:94:1f:b8:28:1e:ca:
         00:04:35:f8:de:25:71:bd:52:ae:4e:a5:04:b8:a0:20:91:00:
         d2:4e:ce:c5:42:d8:03:29:e7:a9:d7:77:78:c5:ff:58:cf:3d:
         07:81:78:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----