Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MJwoJMFqdAR0vMU1unue0FPBDC0.roa
File:                     MJwoJMFqdAR0vMU1unue0FPBDC0.roa (raw, json)
Hash identifier:          qDYFJTdZmJ7rV0KcruXhslxmjgQc+isPilLI0yCHFwY=
Subject key identifier:   30:9C:28:24:C1:6A:74:04:74:BC:C5:35:BA:7B:9E:D0:53:C1:0C:2D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A2394102795956CB547673C42D840300A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MJwoJMFqdAR0vMU1unue0FPBDC0.roa
Signing time:             Wed 23 Aug 2023 18:07:00 +0000
ROA not before:           Wed 23 Aug 2023 18:07:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     151633
IP address blocks:        2a06:de00:6b::/48 maxlen: 48
                          2a06:de00:66::/48 maxlen: 48
                          2a06:de00:61::/48 maxlen: 48
                          2a06:de00:6c::/48 maxlen: 48
                          2a06:de00:6f::/48 maxlen: 48
                          2a06:de00:6a::/48 maxlen: 48
                          2a06:de00:65::/48 maxlen: 48
                          2a06:de00:60::/48 maxlen: 48
                          2a06:de00:63::/48 maxlen: 48
                          2a06:de00:6e::/48 maxlen: 48
                          2a06:de00:69::/48 maxlen: 48
                          2a06:de00:64::/48 maxlen: 48
                          2a06:de00:67::/48 maxlen: 48
                          2a06:de00:62::/48 maxlen: 48
                          2a06:de00:6d::/48 maxlen: 48
                          2a06:de00:68::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:23:94:10:27:95:95:6c:b5:47:67:3c:42:d8:40:30:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 23 18:07:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=309c2824c16a740474bcc535ba7b9ed053c10c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:1f:4f:e3:0b:8e:b0:22:c3:36:e3:b3:41:
                    fe:c3:4c:c3:9c:cf:e2:fc:24:de:79:87:04:46:4d:
                    39:45:d1:de:8e:f8:70:9b:2c:a6:92:de:43:f7:e2:
                    2f:53:a4:ac:ab:b8:0e:78:e2:d7:11:72:28:13:25:
                    e0:e2:5f:b1:56:16:89:7a:6b:0d:c9:3c:7e:ee:d3:
                    d2:04:3d:db:20:68:90:93:52:8a:3e:05:03:6c:c7:
                    d2:7c:33:05:58:00:34:9a:28:72:4b:08:36:a0:3b:
                    7b:71:6f:ed:cc:de:bf:eb:52:21:2a:38:da:62:5b:
                    41:81:a8:43:2a:cc:70:ff:77:b4:21:00:a9:d5:0d:
                    29:2c:e4:07:4d:14:6c:18:ab:36:8a:85:5e:d3:7c:
                    0e:91:6f:d0:65:fc:2d:04:1d:86:77:ae:d4:da:5e:
                    0b:6e:e6:31:c2:b9:0c:c2:9f:a1:72:25:40:27:84:
                    fb:93:ef:d6:0e:83:2a:55:50:47:d8:10:cd:b8:b6:
                    50:13:bf:c2:4e:60:6c:06:59:d7:b7:28:a8:ce:f3:
                    16:2d:00:dd:8a:71:fe:ec:33:8b:1c:8e:7d:7b:8d:
                    0b:34:f8:6c:28:d4:63:d6:fd:c3:30:bf:84:bf:12:
                    26:d3:41:1d:f4:54:65:1d:23:c6:32:de:5a:30:11:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9C:28:24:C1:6A:74:04:74:BC:C5:35:BA:7B:9E:D0:53:C1:0C:2D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MJwoJMFqdAR0vMU1unue0FPBDC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de00:60::/44

    Signature Algorithm: sha256WithRSAEncryption
         30:73:12:7f:3f:84:99:5e:c1:34:e0:5a:96:6c:9d:12:fd:8c:
         78:d2:7e:f7:0a:b3:f7:90:1c:21:d6:1d:ba:da:28:a5:2f:b9:
         80:0a:d9:8c:ee:cb:55:ee:6d:c0:3d:09:26:7f:34:85:4c:66:
         19:d4:9f:87:b9:26:bb:fa:e9:b5:f4:b4:81:c0:a4:8b:4c:0c:
         46:47:9e:43:d0:8e:73:c2:e5:f1:25:79:99:9c:8b:9f:40:cb:
         40:af:b2:67:12:0f:68:20:d7:5a:af:09:a9:d4:48:30:d1:e2:
         cd:9b:8f:21:da:bd:4a:53:a2:03:0a:df:75:f2:fe:27:58:19:
         41:45:7c:dc:91:cd:f5:e8:03:27:d0:6a:78:ef:74:c2:f4:ea:
         51:fb:79:b1:6b:4b:9c:bd:86:73:67:77:fd:b7:3a:98:ad:42:
         be:12:c7:bb:db:15:18:1b:29:65:d5:0a:67:e6:91:d1:d0:9f:
         d8:2e:82:e9:0f:c3:c7:49:1c:9f:24:e0:ec:c4:4c:a2:ea:d4:
         0c:a5:2f:b5:47:7e:43:eb:d4:5d:99:62:21:6d:72:ae:ad:31:
         47:5e:ca:2e:47:4a:ff:df:3e:55:33:96:5e:d3:26:64:11:93:
         cd:7a:92:49:5c:68:23:22:87:4f:e6:95:0e:bd:34:d1:87:3e:
         f8:c2:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----