Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MRsN_MkUWOPc3Brla3VyYiu8Zno.roa
File:                     MRsN_MkUWOPc3Brla3VyYiu8Zno.roa (raw, json)
Hash identifier:          YUOffO9KdNPuimF0B0DygPAUkE+bBIcUtcmm56S4QrI=
Subject key identifier:   31:1B:0D:FC:C9:14:58:E3:DC:DC:1A:E5:6B:75:72:62:2B:BC:66:7A
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018C21C005D46A1E934EF6252904D90AEDE3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MRsN_MkUWOPc3Brla3VyYiu8Zno.roa
Signing time:             Thu 30 Nov 2023 19:41:21 +0000
ROA not before:           Thu 30 Nov 2023 19:41:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47157
IP address blocks:        2a0e:b107:19f2::/48 maxlen: 48
                          2a0e:b107:19f1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:21:c0:05:d4:6a:1e:93:4e:f6:25:29:04:d9:0a:ed:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 30 19:41:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=311b0dfcc91458e3dcdc1ae56b7572622bbc667a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:cb:60:78:99:8b:dd:87:a7:36:a5:e8:b0:
                    d3:31:00:78:87:11:0a:3a:99:9a:17:6e:82:27:c2:
                    30:ef:91:1a:e3:65:b6:f6:9e:0f:45:e6:a1:d4:9b:
                    b1:e8:d9:c0:c1:d2:84:93:31:e7:c2:a9:85:89:55:
                    59:5e:21:9e:b8:9c:23:ea:ed:89:4e:e0:c9:eb:69:
                    db:6a:d4:74:06:71:34:44:24:ae:35:73:d4:8b:80:
                    bc:d3:38:7c:2d:03:79:ea:f0:9b:ab:bf:58:60:13:
                    9c:4b:bd:c4:c8:ca:14:f9:b0:30:f3:e8:89:17:e2:
                    8d:48:73:b5:11:f2:5a:35:27:3b:1b:17:d5:8b:15:
                    45:8b:1f:6a:3a:98:fb:f6:37:bc:b5:7a:be:01:a0:
                    57:79:ad:6f:bd:87:23:c6:2e:ff:7d:37:80:ff:61:
                    39:62:76:38:9f:29:28:22:83:41:91:16:eb:79:41:
                    56:03:ae:2f:ce:e5:0c:1f:27:c9:17:27:a7:68:e4:
                    87:3d:1d:f9:9b:ce:0f:65:01:c2:3b:84:b6:1d:8b:
                    16:33:11:6a:9b:b1:17:f2:f7:8e:e3:3c:42:3a:0b:
                    e5:4f:f3:4c:3a:05:d7:d5:58:05:59:5a:c5:f9:e5:
                    53:61:24:bd:34:ab:3d:1a:4b:89:63:3a:71:72:86:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1B:0D:FC:C9:14:58:E3:DC:DC:1A:E5:6B:75:72:62:2B:BC:66:7A
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MRsN_MkUWOPc3Brla3VyYiu8Zno.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:19f1::-2a0e:b107:19f2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         ab:cc:4b:11:09:41:c2:83:45:1c:df:cf:a0:d9:23:9e:54:40:
         f9:1f:98:22:c1:86:d7:f9:6c:8b:5b:4d:c2:7d:6e:19:79:f7:
         e7:3a:5e:60:df:73:74:2e:1a:ca:1c:a1:7d:67:47:51:7b:0f:
         93:cf:a3:ba:c4:8f:f9:21:30:28:62:7a:2d:99:4f:fe:ca:20:
         91:4e:5d:a6:12:79:17:96:07:b2:c1:b9:dc:71:0c:26:1e:51:
         9a:75:a5:27:8e:57:28:dd:ca:ac:d9:b9:4b:08:85:0c:79:90:
         a7:b3:53:64:99:12:99:cc:e8:0c:27:59:f6:4f:70:06:db:0c:
         9c:04:9e:f6:77:aa:66:83:2b:af:07:b5:0a:d0:00:5b:92:63:
         57:ce:0b:73:12:9a:46:72:ac:1e:ce:14:e6:26:e1:80:ca:1c:
         e7:99:07:c8:fd:14:d3:4d:85:aa:54:ec:e8:66:17:7f:8a:bb:
         b5:82:0b:80:b9:b4:0e:50:79:55:c6:59:49:7c:fc:12:4d:0e:
         6c:57:43:81:ed:96:cb:79:f0:db:4b:16:23:1a:9f:2a:5b:67:
         cf:fe:15:e7:5c:82:8e:1f:c0:69:d0:94:b2:d7:85:2a:7f:61:
         bd:96:bb:3c:06:fa:38:14:79:93:ef:f5:1f:d5:9a:c3:73:b6:
         79:43:06:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----