Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NhZQIqbG0gNrl-b5J0f5mwhvv3s.roa
File:                     NhZQIqbG0gNrl-b5J0f5mwhvv3s.roa (raw, json)
Hash identifier:          rWHw4DjWjsgRfXZc9oqKaDApB/XFVf2XQjO59q5B2tE=
Subject key identifier:   36:16:50:22:A6:C6:D2:03:6B:97:E6:F9:27:47:F9:9B:08:6F:BF:7B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7B7430D86A5D875050D1ADED5104A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NhZQIqbG0gNrl-b5J0f5mwhvv3s.roa
Signing time:             Mon 02 Jan 2023 05:15:11 +0000
ROA not before:           Mon 02 Jan 2023 05:15:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204115
IP address blocks:        2a0e:97c0:375::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:b7:43:0d:86:a5:d8:75:05:0d:1a:de:d5:10:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=36165022a6c6d2036b97e6f92747f99b086fbf7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:53:82:e4:a3:85:42:e9:3f:51:8f:bc:34:62:
                    c3:06:b2:c1:43:23:f4:92:a0:c7:22:f0:83:b0:59:
                    17:96:9c:6b:37:1e:43:cf:12:f7:e3:eb:64:1f:f9:
                    b0:c7:93:cc:61:04:ac:d6:88:24:a8:30:a0:33:2c:
                    da:95:09:28:4d:ad:93:bc:9c:0d:70:0f:a1:8c:a8:
                    65:02:b3:1c:7f:fe:55:e7:74:d2:fb:d6:f3:84:0f:
                    5b:f9:14:ec:a3:67:65:cd:c4:c0:d6:2c:d9:cf:ee:
                    58:c4:db:5d:77:38:93:8f:24:bb:0e:f4:4d:a7:67:
                    60:07:96:08:b4:c3:88:a9:58:bf:15:a0:5e:2c:61:
                    8e:5f:b8:db:b8:74:ed:72:76:80:6a:38:5c:fd:0e:
                    88:e4:a1:fa:38:0f:12:0f:4c:0a:87:6a:ba:14:d6:
                    79:ba:62:bf:b9:4c:6c:aa:6c:50:a8:20:95:f1:bc:
                    d1:b4:dd:f9:74:63:c9:40:32:5a:8a:b2:f0:1d:95:
                    fe:43:5d:9a:08:d3:22:b7:2d:b3:4e:0d:4f:d2:79:
                    e2:50:55:0f:11:4c:91:f3:6c:68:91:02:13:a2:52:
                    f1:45:f5:f6:7c:dd:c0:92:eb:6a:ff:5a:01:a3:8f:
                    db:87:9a:43:63:4d:e7:bb:8b:1d:04:4d:7c:b9:43:
                    ae:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:16:50:22:A6:C6:D2:03:6B:97:E6:F9:27:47:F9:9B:08:6F:BF:7B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NhZQIqbG0gNrl-b5J0f5mwhvv3s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:375::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:ce:53:7e:d1:6b:f3:3f:a7:8f:69:bd:b3:b2:79:a6:15:b6:
         50:00:c1:0f:0e:9d:5b:b9:39:f4:d0:d5:3d:65:82:28:d4:a2:
         c1:34:49:9c:a0:9c:40:e1:2e:2d:9a:a5:48:c5:05:e4:43:ad:
         21:ce:e1:f1:48:da:39:c4:a0:9f:c2:0b:c1:01:a0:d4:c6:9a:
         97:a9:56:e3:d0:d0:17:7d:53:6a:03:14:d8:a3:9d:36:9f:3d:
         9d:1c:f6:11:8c:93:f4:b4:ef:2e:b2:20:51:cd:36:15:87:f9:
         70:76:3f:bd:f9:5b:5a:60:9e:67:33:8c:8b:65:29:60:82:e0:
         7f:a4:d8:dd:a0:15:41:b2:98:ce:64:d5:4f:74:14:00:d4:59:
         f9:8f:ae:5c:9a:c5:aa:46:9e:f7:4f:e5:94:b1:e5:f8:c8:7e:
         fe:70:9e:ce:fa:36:f2:26:ea:53:8b:9a:a5:e4:8b:81:0d:d3:
         d2:a6:74:1d:8c:11:ce:d5:6e:cc:02:45:ed:50:1b:c1:29:5a:
         76:80:9d:ee:86:32:79:b8:de:c5:a7:ae:67:df:ae:59:f9:d8:
         20:26:f6:9f:e6:6a:a0:16:e8:42:9d:5d:d6:1d:45:64:a9:6c:
         f0:dd:7e:6f:e6:d6:78:66:04:84:10:90:4d:50:08:97:56:33:
         31:27:08:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----