Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RaOrMCiTy_8GxuIda9FOYfJ13WE.roa
File:                     RaOrMCiTy_8GxuIda9FOYfJ13WE.roa (raw, json)
Hash identifier:          uMGRz7ENPVYqhm4OcVt/j2BOIoDPGRCIZmnaeKNEy4Q=
Subject key identifier:   45:A3:AB:30:28:93:CB:FF:06:C6:E2:1D:6B:D1:4E:61:F2:75:DD:61
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A56B39805943DF1B23B3974B4B262DC3C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RaOrMCiTy_8GxuIda9FOYfJ13WE.roa
Signing time:             Sat 02 Sep 2023 16:22:05 +0000
ROA not before:           Sat 02 Sep 2023 16:22:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43607
IP address blocks:        2a0e:b107:27d0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:56:b3:98:05:94:3d:f1:b2:3b:39:74:b4:b2:62:dc:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep  2 16:22:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=45a3ab302893cbff06c6e21d6bd14e61f275dd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:2e:7c:0a:ba:a7:7d:d7:1b:f1:a0:75:aa:
                    6e:c6:bb:22:c5:7d:e6:e0:6f:73:a5:c4:cc:1d:5a:
                    47:9d:a1:ea:31:48:66:97:2e:d5:e3:bb:80:30:79:
                    81:25:f2:c3:67:1b:ae:80:30:a2:2e:cc:64:03:38:
                    e0:a8:50:d6:42:35:42:68:79:d0:25:2c:e7:13:ea:
                    c9:d4:65:40:5d:20:78:24:79:c2:97:ce:9d:eb:98:
                    93:ef:bb:ad:b4:6f:62:0c:f9:0c:59:f6:91:d2:b5:
                    67:a6:6b:31:f5:34:43:bc:a8:65:2a:7e:2a:39:4e:
                    e0:e0:c8:56:3f:9a:0b:b1:4e:26:8d:47:0d:f7:bf:
                    ea:0e:2f:dd:f0:01:ab:fe:b5:c9:26:75:f0:8f:e3:
                    d6:15:e8:17:41:4b:df:70:90:f2:c8:7d:dd:4b:18:
                    3e:fe:70:db:ba:f6:d8:b9:f1:2e:e4:b5:bc:d7:9e:
                    89:4a:2d:6c:32:55:e5:8a:64:b2:78:08:cc:4e:01:
                    ff:18:d6:0e:9d:11:40:f1:4c:30:49:bf:06:7e:90:
                    97:f2:32:d4:d6:22:7a:85:d4:a6:c8:c3:b7:e7:0b:
                    21:67:33:80:90:7b:7e:de:f4:ad:e1:46:b7:bb:1c:
                    45:54:51:60:7a:d5:55:89:1e:54:a3:a7:ef:28:22:
                    0e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A3:AB:30:28:93:CB:FF:06:C6:E2:1D:6B:D1:4E:61:F2:75:DD:61
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RaOrMCiTy_8GxuIda9FOYfJ13WE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:45:e6:83:b7:b9:93:03:67:e2:a0:7d:75:e5:c6:38:db:6e:
         c9:66:d3:8b:61:f5:0d:52:14:21:c5:fe:e1:2a:24:7b:8b:86:
         1e:87:cf:74:ab:60:c4:b0:e3:69:a3:c9:e6:8d:c5:cb:70:7d:
         86:a4:d6:f8:ba:e0:07:06:03:05:06:7f:f1:8b:5c:71:75:55:
         ff:64:68:e3:ab:a5:e5:60:bf:0b:bb:f7:a3:c7:e7:2b:8f:8a:
         6e:cc:4d:46:8d:79:61:77:ec:d6:ce:70:e5:c2:16:ba:68:39:
         63:db:14:e7:31:0b:6a:19:cd:53:72:e8:90:a3:e2:14:77:82:
         74:82:ab:13:82:eb:03:ac:20:6f:81:4a:95:eb:be:d0:94:60:
         e8:1d:64:c3:ba:69:20:d1:74:5d:7f:f6:45:54:da:f6:3e:2d:
         4a:89:8e:5d:5a:39:c8:e8:3c:4f:7a:6b:e5:c3:ce:67:49:22:
         4e:a6:d7:89:82:3f:e8:13:c8:2a:7a:13:8a:f5:51:46:19:31:
         eb:69:c8:9e:93:6a:d2:fd:ff:9b:8b:b8:04:bd:f3:1a:79:4c:
         13:9a:f7:6b:e0:11:4c:c0:67:90:4f:7c:9d:4a:f0:bc:e3:a5:
         be:d3:12:13:ea:2f:0a:68:c0:17:cd:42:fd:c4:60:2a:06:1f:
         40:7e:f4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----