Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PsdTTXU2tO8RWcwDBIP0g2V8RH8.roa
File:                     PsdTTXU2tO8RWcwDBIP0g2V8RH8.roa (raw, json)
Hash identifier:          dEun06Yhrk5pUI8XWGNYA+K+ZxIvX1jRpxVXh2L5xKM=
Subject key identifier:   3E:C7:53:4D:75:36:B4:EF:11:59:CC:03:04:83:F4:83:65:7C:44:7F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48B138D71C12E342F33DCCC5015368E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PsdTTXU2tO8RWcwDBIP0g2V8RH8.roa
Signing time:             Tue 24 Jan 2023 16:09:57 +0000
ROA not before:           Tue 24 Jan 2023 16:09:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400542
IP address blocks:        2a0e:97c0:a46::/48 maxlen: 48
                          2a0e:b107:b11::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8b:13:8d:71:c1:2e:34:2f:33:dc:cc:50:15:36:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3ec7534d7536b4ef1159cc030483f483657c447f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:c6:43:8c:da:70:d3:da:7f:ce:db:24:d8:
                    40:cc:44:a3:75:0d:fe:69:df:8a:e1:d6:f8:f7:9c:
                    be:fa:a8:80:aa:62:14:c8:89:f8:1c:3c:ad:31:16:
                    1c:33:3b:a6:e5:be:f4:b5:2a:2d:c9:c7:dc:51:df:
                    1e:a7:18:29:97:0a:84:1d:53:02:0f:26:fa:50:28:
                    7b:27:62:a5:86:dc:8d:b0:bd:c4:0a:3c:43:50:84:
                    18:99:26:c9:bf:3d:27:1a:b2:4d:ef:91:f6:fd:fa:
                    df:56:da:cd:23:a4:c8:d1:c3:49:73:3f:89:a0:31:
                    b6:a1:78:8d:fb:a1:3b:85:45:09:59:29:31:14:a0:
                    43:f7:f5:3e:81:2c:c6:c5:fb:e3:3f:7f:81:bb:ba:
                    f8:df:56:57:91:df:47:1b:2b:87:20:fc:ac:8d:a7:
                    55:49:62:1e:68:05:cf:67:91:73:d1:e7:85:86:ff:
                    cd:5a:cf:fc:c2:38:60:33:6b:55:40:a7:9b:a1:ce:
                    63:d5:ee:73:a6:58:23:d4:83:c2:b2:9c:0b:3f:89:
                    d3:fc:86:40:57:88:94:a8:ce:ed:b6:56:7a:be:94:
                    92:51:93:28:59:c6:38:46:62:74:32:3a:d3:3d:67:
                    d1:73:4b:1e:e5:74:32:83:8f:dc:56:61:6b:d6:0d:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C7:53:4D:75:36:B4:EF:11:59:CC:03:04:83:F4:83:65:7C:44:7F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PsdTTXU2tO8RWcwDBIP0g2V8RH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:a46::/48
                  2a0e:b107:b11::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:19:60:c4:48:64:a5:fe:4a:dd:b1:8d:cf:b9:86:c2:7a:c2:
         88:51:0c:72:48:9e:01:3f:94:62:fc:12:da:36:88:08:69:51:
         87:34:1c:d5:aa:39:13:2c:e0:71:b0:e0:65:cc:1c:fd:60:f8:
         ae:d3:85:75:ae:d7:ad:35:de:aa:7e:c9:ea:62:59:4c:3f:80:
         3f:62:1e:56:a3:f2:32:2a:d8:f9:28:95:48:ab:a4:d2:ca:21:
         a1:6c:fe:83:de:7f:0f:c6:30:b7:44:7e:82:0e:49:0b:f5:e4:
         41:d9:ee:59:5a:05:9b:83:7a:00:df:6d:a6:32:a2:4b:7e:bc:
         cd:da:bc:c3:d4:1c:67:0b:af:54:f2:21:19:12:94:98:b5:d9:
         8c:18:7d:d4:a5:a7:b7:18:ec:9e:01:22:00:cb:07:33:0f:f9:
         40:6b:fa:f6:d2:08:2d:47:f5:25:86:c7:ee:ea:06:1e:8f:89:
         08:9c:20:19:9a:36:fc:98:c2:5b:ee:94:3c:97:a3:52:37:70:
         c5:b2:7b:04:98:d1:41:6a:88:3c:1b:b2:9d:0d:cb:f2:22:8a:
         34:45:0d:fb:26:77:e1:08:d1:c6:6c:66:bb:0d:9a:0c:8e:b2:
         58:d4:ae:49:5b:cc:a1:59:83:9b:12:d9:73:33:ce:1c:cb:16:
         97:4f:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----