Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M1tFQNmu5rWD3-jsBD2ZZ1WMZpk.roa
File:                     M1tFQNmu5rWD3-jsBD2ZZ1WMZpk.roa (raw, json)
Hash identifier:          AJ/Erg1SHaDGPuc8ms5tEvwynpv5kyv/m29LzTGZRvQ=
Subject key identifier:   33:5B:45:40:D9:AE:E6:B5:83:DF:E8:EC:04:3D:99:67:55:8C:66:99
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A15255F66F5A1C2BE3516DCB5C25BD217
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M1tFQNmu5rWD3-jsBD2ZZ1WMZpk.roa
Signing time:             Sun 20 Aug 2023 22:51:25 +0000
ROA not before:           Sun 20 Aug 2023 22:51:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212516
IP address blocks:        2a0e:97c1:10c::/48 maxlen: 48
                          2a0e:97c1:104::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:15:25:5f:66:f5:a1:c2:be:35:16:dc:b5:c2:5b:d2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 20 22:51:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=335b4540d9aee6b583dfe8ec043d9967558c6699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:99:c1:28:f6:30:09:f4:1f:d9:68:08:78:
                    77:87:97:51:69:2a:d3:cf:fa:30:ca:53:22:aa:db:
                    c1:0e:df:7a:ef:23:50:b7:57:be:49:d6:43:8f:69:
                    4d:b8:2d:51:90:7f:67:4d:71:7f:02:c7:2d:54:94:
                    0f:42:3a:f9:61:82:57:70:04:55:5b:ed:79:64:5e:
                    b1:90:2e:19:8c:fe:5b:be:95:9b:04:f7:4a:6d:f2:
                    85:15:09:0e:82:17:fd:c9:97:0a:82:c1:fe:6e:bc:
                    2b:42:44:2e:26:51:56:d0:bc:91:47:78:a5:91:f7:
                    94:ce:cb:89:17:75:00:09:29:cb:b0:52:83:71:33:
                    33:4d:5e:8b:f0:67:3f:99:65:a9:7d:ab:9a:60:0a:
                    fe:e1:23:2d:6f:6d:4a:eb:ad:dd:dd:2d:9f:fd:8e:
                    7b:3c:a5:40:06:0e:45:af:cd:52:5c:08:f2:90:7d:
                    2a:2b:8d:76:60:ce:fa:bb:f9:29:07:64:66:fd:66:
                    86:03:63:9f:e5:e6:de:c8:8a:b2:8b:f8:bb:d9:5c:
                    7b:24:14:80:db:8e:14:ff:42:52:63:6f:e7:f8:49:
                    a8:62:aa:ab:92:32:d2:26:9b:e6:b6:cf:bb:db:fa:
                    b7:89:8b:14:59:be:f3:2e:9e:a4:df:94:8c:ba:37:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5B:45:40:D9:AE:E6:B5:83:DF:E8:EC:04:3D:99:67:55:8C:66:99
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M1tFQNmu5rWD3-jsBD2ZZ1WMZpk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c1:104::/48
                  2a0e:97c1:10c::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:98:35:30:e5:ac:fe:ed:d6:54:9a:81:5e:20:b7:94:39:8d:
         07:9f:a6:6e:53:d0:bc:d6:72:e9:88:cf:25:3b:46:15:2d:72:
         68:3d:0c:2f:d4:cb:e0:c4:2a:c1:e1:3f:10:22:93:4f:d9:df:
         66:98:d1:eb:5c:39:16:b3:18:7f:47:4a:d9:43:1d:21:37:87:
         de:a2:7b:2e:b9:66:4a:3b:a4:fb:3a:fd:de:97:e0:35:7b:ef:
         ed:79:31:28:c4:08:7e:02:57:f1:64:0b:5d:ce:16:9a:77:4e:
         92:1d:6c:52:e5:b8:3a:4d:b4:4b:b2:4b:0e:ab:67:9a:0b:3a:
         6b:8c:db:1f:4c:77:91:5b:a8:0f:fd:02:91:39:63:58:cb:92:
         79:27:1e:5f:76:07:2c:63:f5:25:0f:32:ad:b4:20:ea:1f:20:
         84:17:a2:cd:ff:e3:b1:9d:fc:bb:d5:e5:c9:65:b6:03:f3:03:
         14:04:15:8e:0b:0c:5b:f3:fa:1e:aa:27:a1:22:6d:2a:92:b0:
         57:f1:5c:9c:12:a3:79:aa:12:ae:b1:9f:25:73:90:29:ba:8f:
         2e:23:88:0d:a1:f8:17:44:4b:48:5c:e7:50:a8:9f:40:29:c8:
         11:30:4c:55:19:40:0b:b9:a8:11:c9:ff:ab:cc:27:8f:ed:63:
         52:21:0a:8f
-----BEGIN CERTIFICATE-----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