Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Reejny_j9eLrbpev61iYyf3-rXc.roa
File:                     Reejny_j9eLrbpev61iYyf3-rXc.roa (raw, json)
Hash identifier:          Eum1GjObySb7LvOinyv20yMvOtYo39M7Ylf823HST64=
Subject key identifier:   45:E7:A3:9F:2F:E3:F5:E2:EB:6E:97:AF:EB:58:98:C9:FD:FE:AD:77
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E794FE5AA2A6D28E2F976459C69A8D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Reejny_j9eLrbpev61iYyf3-rXc.roa
Signing time:             Mon 02 Jan 2023 05:15:03 +0000
ROA not before:           Mon 02 Jan 2023 05:15:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141237
IP address blocks:        2a0e:b107:df4::/48 maxlen: 48
                          2a0e:b107:9dc::/48 maxlen: 48
                          2a0e:b107:df1::/48 maxlen: 48
                          2a0e:b107:df3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:94:fe:5a:a2:a6:d2:8e:2f:97:64:59:c6:9a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=45e7a39f2fe3f5e2eb6e97afeb5898c9fdfead77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e1:9e:22:ac:09:3b:30:a9:db:16:73:34:f3:
                    52:59:84:5d:2c:6d:4e:2d:37:37:d3:b9:60:c7:8a:
                    df:e2:b2:f5:db:d2:5e:5c:07:5e:66:71:8d:9c:a8:
                    cf:49:cb:9b:13:06:ad:f5:7e:67:b6:d8:46:27:68:
                    0c:8f:20:d3:ae:1b:bc:35:cf:31:72:46:b4:22:45:
                    b3:d4:bc:75:be:91:bc:b9:1d:c6:04:7a:65:7c:28:
                    6d:7f:b2:59:3a:71:c6:90:c3:34:e8:8c:1a:39:59:
                    c3:e1:e9:e5:39:cc:5e:0d:db:38:18:49:62:b2:45:
                    4c:3c:ff:94:4e:8d:f9:59:45:be:f3:83:4a:ac:79:
                    a8:41:6d:bd:36:f9:bb:66:c4:91:a2:57:97:ea:b2:
                    e8:2d:fe:e4:c6:c5:6c:1d:b1:53:3f:92:16:8a:df:
                    d8:88:f5:99:60:bd:c5:2b:20:f3:b3:62:42:7b:7a:
                    d3:bc:00:80:04:1c:c2:cd:48:44:5d:5e:2c:67:13:
                    25:0c:a8:c1:a8:87:9e:16:8c:e8:37:b3:13:c5:8b:
                    76:a5:c5:ed:92:e2:bb:ef:e3:83:01:7a:75:2b:32:
                    72:68:0f:3f:1f:d2:56:d3:6a:e3:58:35:dd:2d:f1:
                    2b:1a:47:56:39:94:c6:db:66:f4:9a:df:68:43:b9:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E7:A3:9F:2F:E3:F5:E2:EB:6E:97:AF:EB:58:98:C9:FD:FE:AD:77
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Reejny_j9eLrbpev61iYyf3-rXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:9dc::/48
                  2a0e:b107:df1::/48
                  2a0e:b107:df3::-2a0e:b107:df4:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         44:e6:cf:b9:6a:ef:1e:8b:7f:15:15:6c:70:ec:57:66:54:3b:
         db:ea:ed:ee:fd:c7:bd:46:69:ed:3e:52:64:7c:11:46:85:e9:
         9e:1e:d4:a7:a0:f9:66:9d:c5:0e:cd:da:5d:3a:7c:ff:f0:50:
         f8:d4:8c:39:d0:00:89:0f:5d:96:4b:f1:a5:43:d5:60:da:4d:
         3e:c2:cc:13:e2:2d:34:7e:5d:41:46:f5:7d:b0:10:ee:fe:5f:
         0c:fa:bb:bc:a5:53:c8:51:5b:5f:6c:ec:b9:5b:9b:bf:d4:e1:
         b8:8d:9a:12:58:3e:11:d6:69:c9:dd:0c:79:c6:d6:89:18:9d:
         a4:1b:80:12:80:75:92:5e:7b:ed:16:ab:9c:63:fc:29:db:98:
         14:62:42:3d:5c:be:03:e8:cb:65:c7:c3:6b:e6:ad:39:07:8d:
         d0:44:01:98:10:b8:8c:ee:a5:b2:9c:7a:45:a3:c2:47:9c:23:
         40:5f:2f:e7:19:1e:d8:43:53:3f:8a:36:02:49:6d:c7:b8:7f:
         cc:07:a7:a4:64:79:b9:a1:d7:c1:cc:93:16:d8:6f:d5:11:73:
         9b:6d:52:10:27:e6:67:c6:60:c9:bb:fb:4c:17:ad:a0:01:2c:
         2f:16:00:6d:3b:7d:cb:dd:84:03:19:a9:0b:83:1f:63:4e:bc:
         58:73:e2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----