Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RtY5xgGeLBfhgwY8z3uhi3TMQYA.roa
File:                     RtY5xgGeLBfhgwY8z3uhi3TMQYA.roa (raw, json)
Hash identifier:          po+zMCLqr3iUpy7HO5jYFx5M0MrWYU1WMWQiJVmyqqM=
Subject key identifier:   46:D6:39:C6:01:9E:2C:17:E1:83:06:3C:CF:7B:A1:8B:74:CC:41:80
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7CDC4BC3C52B556BA523C91B57541
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RtY5xgGeLBfhgwY8z3uhi3TMQYA.roa
Signing time:             Mon 02 Jan 2023 05:15:17 +0000
ROA not before:           Mon 02 Jan 2023 05:15:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207556
IP address blocks:        2a0e:b100:100::/48 maxlen: 48
                          2a10:2f00:181::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:cd:c4:bc:3c:52:b5:56:ba:52:3c:91:b5:75:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46d639c6019e2c17e183063ccf7ba18b74cc4180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:eb:14:74:af:4c:a5:9d:66:47:8c:20:42:
                    1e:cd:df:95:9e:3c:25:7a:e3:ce:d1:c5:e6:cc:a8:
                    37:5f:91:8e:39:d5:4d:9e:f5:06:ce:6b:ff:39:0b:
                    9c:ca:8f:f0:6c:02:0d:ee:1d:7d:72:42:8f:6a:85:
                    e5:d7:73:a1:60:56:60:5d:ea:2a:17:3f:20:1c:72:
                    d5:63:ed:70:3b:f2:ba:b2:8b:26:c4:5e:ba:15:b0:
                    73:15:07:f0:e6:85:a0:7e:48:cc:56:8c:d7:1d:8c:
                    3d:c3:66:13:26:cf:c5:ed:19:84:c8:3d:e5:9e:79:
                    00:5e:3a:92:5d:cd:75:75:a0:62:5c:a5:2b:c0:c6:
                    a9:63:94:1e:87:14:fa:a6:a4:ba:54:c3:27:0c:84:
                    da:52:70:fc:9c:d1:21:23:a5:c8:45:b9:d5:f8:2a:
                    57:13:13:66:e6:76:62:53:88:1f:5d:ac:87:2f:c0:
                    13:ae:1b:2d:20:3f:40:c2:90:ec:65:f6:e0:a5:2f:
                    13:be:ba:ea:aa:36:1e:1a:b6:3f:92:b8:83:02:e9:
                    5c:b5:3f:7b:7d:75:5e:fd:3b:89:34:34:76:92:8a:
                    dc:7e:68:9c:a0:89:5f:24:4c:ea:b4:4e:b2:22:43:
                    9d:d9:23:88:31:48:fc:9c:3f:5a:c1:34:74:cb:49:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D6:39:C6:01:9E:2C:17:E1:83:06:3C:CF:7B:A1:8B:74:CC:41:80
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RtY5xgGeLBfhgwY8z3uhi3TMQYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b100:100::/48
                  2a10:2f00:181::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:00:c1:f1:40:f5:0d:5e:5b:26:e2:1f:e1:64:5a:ae:9c:2d:
         7d:45:3f:dd:09:86:e7:64:19:ae:16:1b:3d:4b:7e:95:29:66:
         71:bf:94:08:4c:34:c5:9b:15:ae:16:28:68:56:8c:32:09:61:
         78:1b:32:d2:f7:5a:9e:2a:ef:2d:c0:2f:8e:16:d9:e9:3a:91:
         f8:d5:7c:63:88:55:f1:93:00:9f:95:ac:34:ca:88:4a:0d:bd:
         f8:49:47:8a:9a:29:a7:2f:32:75:be:8b:6c:e5:86:66:4a:dc:
         ba:fb:7e:fa:26:fd:5f:ae:22:cf:da:9c:58:0a:3d:66:ca:3e:
         1e:18:3f:eb:33:4d:68:c4:43:01:b5:f8:66:73:dc:8b:02:08:
         89:0e:6a:3a:73:a1:b5:6b:ba:01:f8:46:c3:51:c5:15:5e:ef:
         8c:b0:70:a1:f7:0b:79:06:eb:7a:45:53:0b:91:80:d6:91:35:
         a2:4a:54:96:9d:d1:f5:08:9d:03:75:f9:da:9c:43:ec:c8:ea:
         82:b5:ec:a3:bf:8b:8f:d9:b9:89:b3:e9:b6:e1:3a:64:b6:12:
         af:e8:9a:e4:7e:dc:ce:6a:49:45:87:14:b5:45:54:e0:b4:a8:
         d0:dd:cd:2b:1b:93:61:1a:59:c9:61:e1:44:f3:80:92:09:70:
         b8:d6:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----