Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/REzVBF5xLNwYr-5SdlqSlV_XfZk.roa
File:                     REzVBF5xLNwYr-5SdlqSlV_XfZk.roa (raw, json)
Hash identifier:          gbR8GGqydwBCOSH8BQIhYyT0t7nWQ0tMMnOJZP+L1ow=
Subject key identifier:   44:4C:D5:04:5E:71:2C:DC:18:AF:EE:52:76:5A:92:95:5F:D7:7D:99
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018AE67B627C8473B4E8D326276B872956B1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/REzVBF5xLNwYr-5SdlqSlV_XfZk.roa
Signing time:             Sat 30 Sep 2023 14:26:00 +0000
ROA not before:           Sat 30 Sep 2023 14:26:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49581
IP address blocks:        2a0e:b107:27f5::/48 maxlen: 48
                          2a0e:b107:27f2::/48 maxlen: 48
                          2a0e:b107:27f7::/48 maxlen: 48
                          2a0e:b107:27f4::/48 maxlen: 48
                          2a0e:b107:27f6::/48 maxlen: 48
                          2a0e:b107:27f3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:e6:7b:62:7c:84:73:b4:e8:d3:26:27:6b:87:29:56:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 30 14:26:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=444cd5045e712cdc18afee52765a92955fd77d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:3b:4e:40:c3:76:00:4b:c5:29:ce:41:87:
                    8f:d9:7d:7b:6e:2e:95:64:a0:21:e7:f7:5c:b6:d5:
                    2d:64:c4:54:05:5a:9a:ca:08:81:5d:9d:a7:d7:8e:
                    01:a1:22:00:b3:b8:6d:26:67:91:13:1f:fd:fb:61:
                    39:80:cf:d9:da:d2:08:2e:fa:b8:51:e0:48:10:7f:
                    63:16:6e:08:d8:fe:65:eb:ec:19:d6:46:e0:99:03:
                    b3:c7:f1:30:80:ff:21:ec:bd:4b:0e:8f:c4:ea:7a:
                    4b:4f:cf:26:2d:6a:f1:75:ea:b6:65:9b:2a:49:df:
                    4d:d7:f5:3a:c9:83:4d:81:8d:54:8f:c1:62:0e:54:
                    e1:1c:24:11:e5:0c:bb:26:bd:64:55:a6:98:f3:55:
                    6b:7c:43:e1:da:be:43:dc:f1:03:92:da:fc:b8:a0:
                    5a:73:99:3e:77:26:54:41:65:d5:5c:8f:3b:42:13:
                    f8:ab:ae:65:4f:12:aa:95:32:8d:2b:c6:d3:1c:25:
                    07:da:6f:b7:9d:41:8f:53:d1:7d:57:e5:e1:89:4f:
                    58:f4:49:40:9c:2e:54:57:ec:b4:1f:72:10:c7:c1:
                    64:8f:69:a6:83:2c:c5:3b:b2:f0:0b:14:f8:7b:b3:
                    6c:30:c2:fe:74:e0:72:c3:b7:11:3a:fb:1f:25:d1:
                    6f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4C:D5:04:5E:71:2C:DC:18:AF:EE:52:76:5A:92:95:5F:D7:7D:99
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/REzVBF5xLNwYr-5SdlqSlV_XfZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27f2::-2a0e:b107:27f7:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         c9:0e:88:19:11:d3:92:03:bd:67:76:ef:82:49:95:66:4c:23:
         2b:e7:02:18:d5:81:b3:c5:32:44:f5:ea:f9:62:48:71:7b:2e:
         9a:31:46:aa:9e:17:c9:61:65:dd:21:c3:69:94:15:9d:ae:66:
         50:04:09:2f:a9:a1:8c:5b:11:10:56:69:cb:33:1b:08:f3:e2:
         6e:29:63:e4:5c:4a:24:b2:96:b3:77:43:5f:41:44:d8:01:bd:
         08:fc:aa:d3:66:6f:60:f9:ac:66:d7:4d:cf:35:f5:e7:76:b9:
         60:c3:66:91:fd:36:44:25:84:12:bf:82:6d:97:ea:7e:2e:24:
         fa:48:8c:64:72:ed:73:69:26:97:fa:33:66:8d:c5:58:39:97:
         41:92:26:30:f4:34:ab:f8:f5:5b:8e:c5:81:16:a9:fc:03:73:
         56:dd:ae:6b:a4:f6:dc:42:8d:60:a4:d8:a7:c8:5a:46:20:93:
         d8:8c:3a:92:c7:f3:73:d5:c0:05:06:08:30:e1:96:60:3c:13:
         41:0c:4d:70:9d:cf:fe:f7:18:d0:7e:dc:22:a2:ce:49:a2:b1:
         6c:d5:ef:35:c0:b3:8a:c4:ab:78:f8:e0:36:cf:c9:53:8f:49:
         b6:54:cf:de:5c:1f:62:60:67:39:fa:cd:3e:fc:71:d0:b3:98:
         d0:b4:ff:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----