Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PxCBlMwJLJkZYE8-nOf8ZaXWV5E.roa
File:                     PxCBlMwJLJkZYE8-nOf8ZaXWV5E.roa (raw, json)
Hash identifier:          ZbcueyJsvaq2GEgWYVt0fhaNtrZAif5Q1tkSvLcC57A=
Subject key identifier:   3F:10:81:94:CC:09:2C:99:19:60:4F:3E:9C:E7:FC:65:A5:D6:57:91
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7C44165545A5A9B27FFBCB52A8C78
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PxCBlMwJLJkZYE8-nOf8ZaXWV5E.roa
Signing time:             Mon 02 Jan 2023 05:15:15 +0000
ROA not before:           Mon 02 Jan 2023 05:15:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205398
IP address blocks:        2a0e:b107:19c8::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:c4:41:65:54:5a:5a:9b:27:ff:bc:b5:2a:8c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3f108194cc092c9919604f3e9ce7fc65a5d65791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:ef:c2:55:b9:f8:5b:1d:eb:9e:b6:9f:b1:
                    0e:ff:7b:a9:d6:e5:b4:4d:71:ff:01:4b:a6:37:76:
                    22:c2:42:e4:3c:c5:ff:b5:00:17:5d:0f:44:18:45:
                    78:45:4d:6b:80:a3:0a:ab:32:1a:a2:57:f0:b9:8f:
                    a4:e9:ba:5a:29:00:3b:93:2b:62:79:dd:8d:cc:7b:
                    e1:e1:2e:35:9a:69:65:14:f2:c3:96:56:b2:10:2c:
                    d0:39:bd:f9:03:50:35:bc:65:ac:71:cb:4b:0a:0c:
                    bf:b1:29:5f:fa:e0:c4:57:60:0f:c7:d3:af:05:1b:
                    62:b7:a3:dd:4f:73:88:e1:a0:b3:88:c1:d8:80:06:
                    a8:e9:e9:71:cc:11:cd:76:f0:ac:eb:41:d2:ec:bc:
                    00:37:8d:10:44:7c:cc:da:84:cb:7e:33:e1:ef:42:
                    3e:1d:23:17:1a:45:de:bb:8f:5b:b7:d0:97:9c:80:
                    6d:ed:2b:31:d2:6a:96:17:07:19:04:ef:59:9d:5a:
                    ba:93:01:42:57:04:5c:b5:4f:65:60:97:d7:87:bb:
                    ff:90:88:15:79:e3:1d:21:5d:36:2c:10:ad:80:7c:
                    65:7c:ee:80:a7:a6:cc:8a:8f:94:50:68:27:1b:64:
                    ce:18:29:c9:97:f4:26:1b:48:b9:b6:bb:57:db:cc:
                    32:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:10:81:94:CC:09:2C:99:19:60:4F:3E:9C:E7:FC:65:A5:D6:57:91
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PxCBlMwJLJkZYE8-nOf8ZaXWV5E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:19c8::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:d1:7a:73:b3:7c:a1:7a:68:15:8d:ec:88:d0:3b:5c:ae:68:
         78:0a:be:d8:e8:0f:2a:da:08:a3:3a:53:3c:6e:ff:2e:f1:5a:
         0e:45:95:c3:f0:80:10:91:86:5c:c5:50:42:33:de:26:33:1e:
         01:58:1e:e5:e0:be:59:2e:fb:9b:1c:f4:6c:7e:5f:26:cd:75:
         56:b7:9f:cb:22:1c:49:08:09:18:df:1f:7b:1d:4b:6a:76:28:
         98:66:f1:6c:8b:ec:bf:a9:a0:cb:63:f9:f5:85:be:43:6e:8e:
         1c:99:7e:1f:91:74:d0:a1:4f:d9:6d:88:1d:a8:9d:74:3d:04:
         80:85:82:80:ff:01:ee:f5:e9:bc:bf:91:11:2c:95:05:d1:6b:
         a8:36:2d:74:e0:fe:a8:4d:ac:71:99:c9:4a:09:7d:51:ff:13:
         32:60:87:94:60:13:c7:58:f9:6f:c3:f6:61:83:d6:62:fb:3f:
         95:a7:9f:f6:73:a0:e0:34:6d:55:c8:c4:92:2b:3f:b2:25:ad:
         51:2b:6b:40:77:08:f0:20:c9:35:53:1c:05:01:03:54:10:38:
         9d:c2:56:4f:41:f4:35:46:de:c9:a1:75:d0:a8:3d:76:af:98:
         f8:69:c7:37:d8:4f:e2:69:ed:a3:a2:fe:6b:5d:5f:e4:fd:f9:
         25:c2:5b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----