Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RwqcMw0ODgcum0J6T83euIUjF_8.roa
File:                     RwqcMw0ODgcum0J6T83euIUjF_8.roa (raw, json)
Hash identifier:          GPDkMlbJAqK+7s/SiwezK3pA21mzDZLlLh20Wdv8DdY=
Subject key identifier:   47:0A:9C:33:0D:0E:0E:07:2E:9B:42:7A:4F:CD:DE:B8:85:23:17:FF
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AF3C30218F14FCAB4BA0EF5A51829
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RwqcMw0ODgcum0J6T83euIUjF_8.roa
Signing time:             Tue 24 Jan 2023 16:09:49 +0000
ROA not before:           Tue 24 Jan 2023 16:09:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211242
IP address blocks:        2a0e:b107:13c0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:f3:c3:02:18:f1:4f:ca:b4:ba:0e:f5:a5:18:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=470a9c330d0e0e072e9b427a4fcddeb8852317ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:18:8b:e1:2d:d2:75:74:bb:30:5e:f8:57:
                    47:7f:ed:21:58:b0:64:6b:d5:29:f2:96:fc:56:c8:
                    0e:ee:c7:34:2f:ee:c4:66:7f:59:25:42:7f:f2:1d:
                    27:29:46:00:e7:4a:70:c1:82:c2:76:07:b2:69:94:
                    95:a4:28:b7:0a:96:9e:91:63:6f:38:fe:ec:d3:22:
                    88:c0:7d:b7:f9:d1:1c:4b:56:f2:ea:4c:ca:50:02:
                    d9:40:b2:a3:fc:3f:4b:55:fd:7e:d2:01:33:c9:aa:
                    4a:41:56:b8:6d:38:31:10:c1:4b:b5:b7:3b:58:33:
                    20:c0:22:fc:97:d0:5f:39:c6:7b:74:40:4c:da:74:
                    67:0f:44:d5:68:c0:65:af:0e:19:e8:cd:a0:11:66:
                    6b:e2:ca:84:64:40:d0:0e:f2:d4:a3:5a:58:4a:13:
                    be:49:1e:b8:aa:5e:1e:c3:01:0e:14:a7:93:23:6e:
                    c5:cf:5a:3b:94:fa:5d:9e:68:79:03:65:83:0f:88:
                    e4:03:90:3c:59:0a:6d:cc:12:88:18:2a:25:7b:e0:
                    ed:eb:3a:58:90:46:47:12:a3:4d:5a:4c:cd:f5:45:
                    e3:fb:be:48:be:3d:49:2c:a7:04:e1:12:04:11:fc:
                    2d:23:ee:bd:5b:1e:c3:0e:f5:31:06:78:58:0e:b0:
                    6f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0A:9C:33:0D:0E:0E:07:2E:9B:42:7A:4F:CD:DE:B8:85:23:17:FF
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RwqcMw0ODgcum0J6T83euIUjF_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:13c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:f5:08:44:8f:ef:89:d0:89:3c:e6:2b:1d:2d:ea:a8:eb:8f:
         3e:c5:04:2a:9f:1a:50:50:5c:b8:a4:3a:3e:0c:7b:c7:73:b2:
         21:df:95:89:e2:cd:fa:19:14:23:02:81:4d:80:8d:7f:5e:62:
         21:06:eb:17:2e:8c:76:c9:7b:5c:c5:e9:79:35:90:d4:f7:1c:
         c0:59:d6:39:44:da:6d:48:fd:ff:e9:ed:c1:a8:03:89:99:a4:
         d1:3f:0d:62:81:1c:d9:1d:c0:e6:29:3e:5d:75:8c:f5:97:5b:
         d1:7a:14:94:1b:4f:43:76:7b:d9:ed:2d:77:ef:7e:12:28:9e:
         a6:36:09:41:60:c1:8a:4e:04:48:00:3f:0e:00:39:78:a8:72:
         b9:86:34:0a:0e:de:43:e9:64:90:37:03:c7:e2:59:3e:24:59:
         db:51:e5:9f:24:24:5c:81:00:fb:cf:8b:76:c8:39:83:59:43:
         2c:d9:c3:0b:36:55:76:50:37:64:1a:61:b8:9b:b1:c2:05:46:
         61:fe:73:af:f5:02:a8:a1:44:4f:8b:fb:70:9d:ab:9a:1c:bb:
         71:3e:44:32:e3:8a:aa:17:bf:36:03:41:33:a8:4c:57:07:d5:
         cb:af:99:05:26:71:37:8e:68:71:ac:27:f8:41:00:4c:b5:73:
         d0:79:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----