Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Mj11Dj1yqSKuO_wS_N8TYGKKP2w.roa
File:                     Mj11Dj1yqSKuO_wS_N8TYGKKP2w.roa (raw, json)
Hash identifier:          IPcYLEbMV4ERainHotTIoZX0VbYxiA+16bwuQcr1E8I=
Subject key identifier:   32:3D:75:0E:3D:72:A9:22:AE:3B:FC:12:FC:DF:13:60:62:8A:3F:6C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01871DA9EC7A67CA6322B1DFE4FABF889DB5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Mj11Dj1yqSKuO_wS_N8TYGKKP2w.roa
Signing time:             Sun 26 Mar 2023 11:24:47 +0000
ROA not before:           Sun 26 Mar 2023 11:24:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199310
IP address blocks:        2a0e:97c0:220::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:1d:a9:ec:7a:67:ca:63:22:b1:df:e4:fa:bf:88:9d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar 26 11:24:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=323d750e3d72a922ae3bfc12fcdf1360628a3f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:97:65:67:6b:1e:68:f7:07:c3:c7:55:0a:
                    0d:8e:4f:8b:76:62:b5:c3:2f:23:a2:b6:37:af:1c:
                    e6:0b:d3:fb:21:98:19:2f:87:9a:55:c7:57:6c:7f:
                    2c:cf:d8:e8:82:8f:fa:81:5f:99:3a:c5:83:e9:7b:
                    09:c6:14:63:c4:33:ce:a0:1d:f5:34:10:5f:c0:2e:
                    0f:00:54:34:27:61:d5:c4:aa:8a:f9:7d:4e:ce:94:
                    8f:30:e9:38:4c:a8:9f:34:7d:c8:93:ed:a2:28:ee:
                    4e:73:84:f7:e9:64:6c:fe:3d:d0:54:e3:fe:73:86:
                    95:73:25:b4:f1:f3:58:2c:ec:c5:0b:02:32:00:37:
                    03:77:86:bc:fa:46:e8:12:07:10:5b:cb:93:fc:5f:
                    00:4a:7d:6f:25:01:53:fb:38:f3:22:c3:e5:3c:06:
                    63:d3:a7:75:4d:0c:9a:89:e2:c8:e3:cb:92:33:e4:
                    01:21:18:c9:24:59:b6:5c:b1:cf:fd:d9:f6:e4:9b:
                    ec:94:1b:c1:30:53:48:75:6b:47:9a:4b:33:6e:86:
                    b1:a2:92:c1:23:f7:82:e7:bd:66:21:14:27:04:01:
                    0b:f0:45:5c:1d:a4:50:75:8f:c9:f8:50:e7:72:15:
                    b5:ab:88:8f:7e:51:9d:d9:85:16:29:b8:a6:ac:60:
                    26:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3D:75:0E:3D:72:A9:22:AE:3B:FC:12:FC:DF:13:60:62:8A:3F:6C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Mj11Dj1yqSKuO_wS_N8TYGKKP2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:220::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:b9:cb:6e:13:29:35:5a:44:11:fd:17:31:e3:e2:9b:4a:66:
         fe:3f:3a:10:1b:72:cc:12:8b:97:78:d4:bf:bb:cb:df:1e:a2:
         b0:54:6f:b3:de:1c:98:72:47:27:17:44:8c:7c:5d:ac:b1:18:
         57:93:d4:b4:14:7e:05:90:b8:ee:c3:8d:60:37:97:85:a2:ba:
         20:6d:19:d5:79:37:c4:73:7b:49:56:25:dd:ba:c4:02:72:7e:
         84:cc:53:15:4d:39:0b:8e:ad:1f:9b:51:22:45:98:b2:46:a1:
         b3:6d:a7:da:4d:d5:84:b6:a4:40:36:34:e2:f8:16:46:7a:fa:
         3a:1c:f6:e4:47:b8:43:ae:cb:0c:d2:09:ed:aa:d7:39:9c:65:
         f2:01:51:98:00:c4:2c:ef:36:90:74:d4:24:97:39:83:df:bc:
         a8:72:b7:70:93:9b:d5:c0:b8:12:54:3e:35:17:fc:37:7e:f1:
         c7:e7:aa:8e:86:1c:0a:0e:0e:97:f1:9e:af:e4:0a:1b:5b:96:
         98:a6:d3:a7:9b:23:2e:c6:b8:c8:a4:ce:85:41:67:08:5b:a6:
         62:aa:ca:2a:a6:78:05:b2:1d:9c:e3:5a:ae:fd:c7:4c:d2:ba:
         5c:f5:25:29:79:cb:70:c7:03:fd:82:3c:01:6c:d5:20:2e:2b:
         b4:2c:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----