Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NbTj5zhzLmVkYGTU5ojrsYyH4aQ.roa
File:                     NbTj5zhzLmVkYGTU5ojrsYyH4aQ.roa (raw, json)
Hash identifier:          ef7H3erPfHMVm1x+f30nNN7PXskp6M88gCuoVfx2AFs=
Subject key identifier:   35:B4:E3:E7:38:73:2E:65:64:60:64:D4:E6:88:EB:B1:8C:87:E1:A4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7F665676CE1AD1344D90423CB1EB1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NbTj5zhzLmVkYGTU5ojrsYyH4aQ.roa
Signing time:             Mon 02 Jan 2023 05:15:28 +0000
ROA not before:           Mon 02 Jan 2023 05:15:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210956
IP address blocks:        2a0e:b107:158f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:f6:65:67:6c:e1:ad:13:44:d9:04:23:cb:1e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=35b4e3e738732e65646064d4e688ebb18c87e1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:a7:c3:3b:d1:a9:2a:cc:06:37:02:24:32:
                    6e:1a:c3:b3:da:05:68:1f:e7:00:d2:84:67:58:a7:
                    36:fe:f0:ea:a8:5e:b0:31:cb:80:b3:00:f2:fd:d3:
                    65:08:ac:66:05:b2:db:d3:21:91:fc:4a:18:62:24:
                    85:88:9f:c0:f6:74:1c:fa:30:59:95:8e:37:4e:62:
                    2e:4d:15:c0:d5:e4:c6:9e:1f:bf:b6:09:10:d6:1d:
                    80:99:a2:02:3b:e0:17:f7:26:85:dd:3d:e1:cf:36:
                    cc:53:e6:83:bd:a0:cc:1f:33:d9:96:84:6f:df:8f:
                    8e:98:40:1e:f1:8c:10:de:a5:b9:22:81:75:0d:6d:
                    c8:8a:bb:b7:7f:54:6c:09:01:62:c8:3c:1e:15:38:
                    1f:26:46:2d:b4:77:33:28:96:43:51:19:1d:8c:be:
                    40:dd:6f:e6:c7:c8:f0:33:af:98:31:c5:f7:97:24:
                    9c:57:10:e1:58:f7:33:cf:d2:63:9c:49:5f:6e:f1:
                    6f:1f:48:eb:cf:76:53:43:60:c2:e2:1c:2b:f0:9f:
                    74:97:ca:05:1a:42:00:b5:a4:66:71:76:d8:d7:17:
                    12:1f:cd:44:09:80:ad:a3:36:ef:14:03:f0:24:ed:
                    6c:36:cd:1c:54:98:10:08:11:26:e6:0f:ce:3e:b9:
                    4a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B4:E3:E7:38:73:2E:65:64:60:64:D4:E6:88:EB:B1:8C:87:E1:A4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NbTj5zhzLmVkYGTU5ojrsYyH4aQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:158f::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:3f:0f:35:cb:61:04:ed:01:d6:8c:a7:ca:ba:e5:6c:4d:
         7c:7e:dc:c7:15:7a:1d:68:a3:92:f2:c9:98:17:71:c9:3d:d3:
         24:25:d2:b2:d4:83:88:df:72:76:de:7e:3c:94:3c:89:10:6b:
         b3:da:dc:15:d2:f3:50:2e:c8:03:50:1e:51:7d:52:45:60:3b:
         e6:e4:cd:a6:a8:20:a9:92:a9:6c:d8:16:51:7b:71:38:d6:7d:
         1a:5c:47:35:e7:5a:19:9c:f9:32:ca:db:42:47:55:ef:2e:d0:
         fe:89:8d:58:5b:80:d3:a9:c3:8f:3d:bf:da:25:90:b0:88:9a:
         c6:53:da:91:62:48:81:d5:a4:1c:01:69:21:66:22:01:84:0c:
         7b:af:89:71:96:6d:ab:fd:7f:9d:89:e5:1b:df:ab:c3:02:49:
         0a:85:96:15:3e:21:a5:d6:b8:07:57:95:3b:60:b6:4b:c4:da:
         f1:11:8c:af:ba:90:c8:f2:f6:5a:fd:24:57:30:d3:43:38:7f:
         45:4e:cb:b2:5a:0b:92:8d:f6:f0:b2:07:00:b0:24:fa:d7:1d:
         7b:2a:03:77:71:d2:06:e3:51:3c:12:7b:c6:f4:4f:ac:97:10:
         70:af:bd:f7:d6:6a:7c:d1:1d:c6:02:e8:d5:76:2a:ab:b7:06:
         47:b7:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----