Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LycZ7AruvCuEHw_1SHLxRI-ZE90.roa
File:                     LycZ7AruvCuEHw_1SHLxRI-ZE90.roa (raw, json)
Hash identifier:          LCcBvkh4Z4m1CGIC7r1tUsUp2XsbsU86RO93DnNIadU=
Subject key identifier:   2F:27:19:EC:0A:EE:BC:2B:84:1F:0F:F5:48:72:F1:44:8F:99:13:DD
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AD0826E2F6624C88D856CEFA882F0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LycZ7AruvCuEHw_1SHLxRI-ZE90.roa
Signing time:             Tue 24 Jan 2023 16:09:40 +0000
ROA not before:           Tue 24 Jan 2023 16:09:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203423
IP address blocks:        2a0e:b107:1bc0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:d0:82:6e:2f:66:24:c8:8d:85:6c:ef:a8:82:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2f2719ec0aeebc2b841f0ff54872f1448f9913dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d6:58:ca:10:26:35:c3:d9:d5:a0:f9:04:79:
                    07:c5:73:ad:49:56:64:42:19:91:55:5e:ab:53:25:
                    de:6a:89:1a:17:8f:92:0a:a2:c7:98:75:18:66:02:
                    13:97:ca:0d:a2:48:45:30:f0:f2:17:ae:0d:7e:39:
                    80:22:67:b2:2e:e2:9e:06:b0:a6:48:8d:78:56:69:
                    85:e4:4c:de:4d:f3:84:f0:f8:cf:04:46:d5:38:d2:
                    26:d2:66:c9:1b:57:8a:35:81:37:b2:3c:9f:1e:ed:
                    5b:ff:8d:67:6a:8b:1c:a3:23:78:54:35:e7:1f:20:
                    ca:17:5c:85:8d:94:ed:57:f3:17:ef:b2:ad:98:c5:
                    44:59:69:87:0b:11:7b:da:61:a0:09:f3:de:1e:48:
                    41:29:8c:91:a1:b2:e0:82:73:33:a9:c2:22:a9:3f:
                    33:74:f3:8e:0a:29:3b:be:69:89:59:d6:f9:5c:15:
                    45:20:66:15:d1:9b:45:8f:af:13:6f:71:01:bd:b9:
                    58:6c:cb:a3:99:c5:85:87:da:a5:c0:5f:c2:aa:72:
                    a2:2d:63:fc:65:86:c6:51:bf:3e:b6:37:d8:de:bd:
                    05:a2:37:d8:12:1a:bf:f9:20:9b:7c:94:6c:ef:51:
                    bb:1c:c1:2a:4e:fc:0b:86:fd:d5:ea:b6:f9:00:9c:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:27:19:EC:0A:EE:BC:2B:84:1F:0F:F5:48:72:F1:44:8F:99:13:DD
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LycZ7AruvCuEHw_1SHLxRI-ZE90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1bc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:fe:7a:bf:ba:d4:db:99:d9:19:04:ec:18:a6:93:2a:90:
         4c:b0:99:45:a2:95:79:51:51:3c:98:00:88:86:42:51:b0:5e:
         9a:2a:14:20:6b:eb:31:d5:4a:b0:fc:d9:62:41:25:75:1e:64:
         1d:32:da:12:80:ae:78:e4:a6:d5:c3:8c:20:0e:ce:03:e6:ac:
         21:b8:c8:22:f9:c9:9b:73:53:4e:a9:85:e2:36:3d:c2:38:13:
         a2:15:6b:39:d7:63:68:39:25:12:37:3c:83:9a:ca:d1:1c:8a:
         2b:6c:f3:36:d7:8c:7c:cb:d5:7f:76:68:c0:73:6f:88:7b:9e:
         6e:e8:1b:c3:46:ba:1e:8e:81:70:13:93:07:af:7e:4e:f4:80:
         cd:81:a3:05:0e:4f:e7:bb:57:13:5b:74:ac:c2:bc:aa:61:53:
         11:d9:8b:61:85:53:94:99:32:29:dc:7c:40:30:d7:0a:2a:82:
         ad:b7:a4:37:c9:d2:0a:28:5c:4b:91:ec:38:b9:69:e2:ec:de:
         4a:e2:64:44:ae:18:9b:53:8c:ee:c6:66:40:28:ea:fb:9a:8c:
         67:85:21:c7:2a:9e:54:67:13:aa:1d:eb:c9:c3:39:d3:b2:2b:
         fd:b7:86:da:7c:ac:8f:0d:2d:5a:d3:85:78:03:14:9c:41:c4:
         de:94:46:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----