Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TsP95RhuSaMQ34VwwdWPP3RXwes.roa
File:                     TsP95RhuSaMQ34VwwdWPP3RXwes.roa (raw, json)
Hash identifier:          oaZqkMowFs2dWVsg98H/+93AORlZRVhhfWP1mp7gxTk=
Subject key identifier:   4E:C3:FD:E5:18:6E:49:A3:10:DF:85:70:C1:D5:8F:3F:74:57:C1:EB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A2D707831C35241FF51EC71FBB58424F5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TsP95RhuSaMQ34VwwdWPP3RXwes.roa
Signing time:             Fri 25 Aug 2023 16:04:20 +0000
ROA not before:           Fri 25 Aug 2023 16:04:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203790
IP address blocks:        2a0e:97c0:460::/44 maxlen: 48
                          2a0e:b107:12a0::/44 maxlen: 48
                          2a0e:b101::/32 maxlen: 48
                          2a10:cc41:110::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2d:70:78:31:c3:52:41:ff:51:ec:71:fb:b5:84:24:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 25 16:04:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4ec3fde5186e49a310df8570c1d58f3f7457c1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:e4:93:c1:4b:68:07:54:cc:4b:1a:10:12:
                    55:e0:17:13:b2:f7:7d:c8:c2:48:af:b7:7f:1e:cb:
                    78:3f:90:a3:58:60:3f:57:17:84:35:c4:17:36:d6:
                    6a:93:86:47:6f:4a:91:ad:2e:80:45:e7:0b:63:02:
                    99:54:13:71:52:25:10:46:14:7e:b7:61:62:e5:14:
                    a8:46:54:72:c5:10:8c:03:55:85:31:20:3c:d1:ed:
                    19:c3:b6:e7:30:ae:f7:1e:61:7e:8a:b3:83:99:ce:
                    68:cd:3d:b1:ae:f7:1a:a8:9f:9f:2a:9c:94:53:7d:
                    2c:f1:ca:6f:f4:0b:2a:30:35:7f:ea:91:16:dc:3a:
                    08:dc:7d:0b:dc:a9:71:37:b6:08:dc:b0:04:d1:d9:
                    a4:4a:00:43:0d:7b:72:58:83:dd:46:8b:db:93:6e:
                    9d:aa:cf:39:8d:a6:cf:ab:0c:ae:89:52:28:d6:d5:
                    ad:0c:33:e7:fb:f7:b1:29:64:57:06:36:ee:b3:2b:
                    35:61:af:fc:09:e5:87:c6:1b:af:24:66:94:75:50:
                    79:04:5a:b4:9a:8b:c5:bd:ea:5e:03:69:8b:3d:93:
                    19:6e:ad:85:4d:ab:e3:9e:80:68:63:20:35:1b:88:
                    cb:7a:6f:da:2a:1d:40:00:14:cc:6b:aa:ab:32:4a:
                    2f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C3:FD:E5:18:6E:49:A3:10:DF:85:70:C1:D5:8F:3F:74:57:C1:EB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TsP95RhuSaMQ34VwwdWPP3RXwes.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:460::/44
                  2a0e:b101::/32
                  2a0e:b107:12a0::/44
                  2a10:cc41:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:67:ce:b2:c9:1d:d8:7b:ec:05:fb:a0:b6:34:20:67:47:
         e3:cc:04:ba:de:2e:65:ee:b1:c8:e6:3c:6b:35:c5:30:83:4f:
         a8:f5:06:ea:9e:74:b9:19:83:00:60:0e:13:aa:8f:fd:c2:87:
         a4:30:a5:86:2f:38:be:4d:1c:3f:7a:c9:d8:f6:6d:fd:49:c6:
         52:5c:88:3b:71:f6:5f:e9:70:0b:61:87:ae:d4:1b:ce:85:62:
         5b:69:18:62:1d:1b:6d:e5:39:0c:50:d9:58:e7:01:7f:83:ac:
         8d:79:de:42:74:b6:2e:32:57:2d:f3:b1:c4:ff:f0:19:3d:96:
         ea:5f:48:5a:64:b3:01:88:63:73:98:1f:3d:6a:45:5a:48:4b:
         09:f4:03:76:bc:75:13:9e:ac:d6:20:a6:58:46:e1:c2:0a:91:
         91:af:57:b9:41:16:78:64:86:ae:61:65:f8:fa:62:db:ff:d8:
         cb:3e:d9:cf:61:31:7c:be:19:c5:02:66:77:1f:62:be:a9:ed:
         ea:32:b9:6e:db:71:c2:1c:3f:f9:c8:13:2f:a3:1f:65:76:4a:
         19:83:31:dd:40:b1:9e:04:96:c2:5c:d0:db:ef:b4:8b:3b:53:
         dc:48:47:94:cf:ee:59:3c:25:49:bd:8f:1d:fb:c7:fe:38:f1:
         ca:77:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----