Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TzD4q6MmBM657FRE5Av--g1H_Yw.roa
File:                     TzD4q6MmBM657FRE5Av--g1H_Yw.roa (raw, json)
Hash identifier:          Amr5hRLSw1APNM24orZom3/fQonDbwC4M0svU0krJPA=
Subject key identifier:   4F:30:F8:AB:A3:26:04:CE:B9:EC:54:44:E4:0B:FE:FA:0D:47:FD:8C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48B0C98A35324803CBF938FECB84533
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TzD4q6MmBM657FRE5Av--g1H_Yw.roa
Signing time:             Tue 24 Jan 2023 16:09:56 +0000
ROA not before:           Tue 24 Jan 2023 16:09:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212948
IP address blocks:        2a0e:b107:cb0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8b:0c:98:a3:53:24:80:3c:bf:93:8f:ec:b8:45:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f30f8aba32604ceb9ec5444e40bfefa0d47fd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1d:be:b3:e9:09:75:52:67:3b:71:74:73:53:
                    32:03:6b:23:85:14:57:50:f9:a6:4d:1f:61:46:ef:
                    5b:12:60:0d:89:07:13:e9:2a:5b:4f:37:a4:ba:ea:
                    af:11:3e:cd:e1:1a:c7:f2:05:a1:06:e4:a1:29:ae:
                    31:dc:bb:ed:d3:4c:93:83:9a:d9:c9:ef:dc:ab:02:
                    96:31:51:50:08:dd:6d:96:ff:3b:db:01:0b:bc:d3:
                    e2:26:0a:95:dd:85:7f:6e:15:c3:d8:3f:89:ac:e9:
                    18:55:27:09:1b:74:2e:8a:28:6c:22:d4:3f:62:0d:
                    e1:ad:0d:9e:30:6f:8d:50:3d:9c:9d:57:fe:10:5e:
                    b9:f7:15:1c:65:79:c4:22:26:7a:66:dd:cd:c7:6d:
                    43:be:69:3c:f7:01:a5:45:dd:5d:e9:4f:68:88:72:
                    a3:4d:e1:09:93:a1:1f:88:f3:5a:e2:32:68:42:1b:
                    c5:ee:b4:78:a9:d5:26:ed:8f:35:bb:32:54:38:9e:
                    c9:56:ed:9e:9f:83:1d:d3:2c:d2:39:1a:6b:df:85:
                    2f:fc:cc:95:bf:77:25:02:c8:6e:68:e3:bb:2e:68:
                    7d:51:d9:1e:07:81:90:18:92:0d:17:39:7e:6e:e8:
                    69:6d:bb:95:35:93:fe:6b:d0:e5:d9:02:2c:ae:d8:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:30:F8:AB:A3:26:04:CE:B9:EC:54:44:E4:0B:FE:FA:0D:47:FD:8C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TzD4q6MmBM657FRE5Av--g1H_Yw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:cb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5d:1d:17:99:3b:e4:e9:22:66:9b:e7:9b:42:fd:bf:04:bf:6b:
         85:80:99:e3:dd:26:91:4c:a4:ce:94:54:c5:04:51:3c:2a:37:
         f8:bd:c1:6e:ce:cd:21:8d:ba:1b:d6:6a:0c:d4:e6:eb:15:8d:
         47:0d:45:1b:20:8c:a0:59:32:86:bb:80:d7:83:10:d1:23:b4:
         5c:80:0d:8a:98:50:8e:68:5d:b0:1a:70:c8:2e:f9:e5:46:88:
         e8:17:1e:c1:56:df:92:51:c4:09:fa:c1:40:4d:44:5a:47:b2:
         04:84:6f:aa:68:3b:c6:70:22:5e:e8:34:ff:3f:66:86:84:7f:
         0e:be:c7:55:b3:bc:5b:5a:5d:82:99:01:46:98:76:51:72:bf:
         ee:e5:49:8a:09:b3:19:8d:99:51:e9:00:f2:87:bb:7a:2f:a1:
         75:44:0c:7e:c8:20:d1:f1:6d:15:26:38:58:23:f8:bc:ed:8c:
         28:fe:7a:92:bb:d5:cd:02:31:4b:f9:a9:31:75:b5:a0:76:a0:
         ec:d6:fa:4a:55:84:e8:90:bb:45:ae:2a:be:84:8c:70:35:16:
         26:0e:27:4c:6f:56:70:e3:e4:48:6a:24:58:64:b0:96:d9:73:
         37:f6:8b:0b:a7:40:7a:d7:ef:bc:ad:8b:d9:e8:76:50:0e:49:
         e4:b1:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----