Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Up_IMkhpFOexMLevRqqxJRU6vZc.roa
File:                     Up_IMkhpFOexMLevRqqxJRU6vZc.roa (raw, json)
Hash identifier:          QXPl1ecLtT+djrFH0DCBKIeIIcf2MuFpT1j161wXsoc=
Subject key identifier:   52:9F:C8:32:48:69:14:E7:B1:30:B7:AF:46:AA:B1:25:15:3A:BD:97
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AEAF0E4B3C2CCE2E9CBED793AE674
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Up_IMkhpFOexMLevRqqxJRU6vZc.roa
Signing time:             Tue 24 Jan 2023 16:09:47 +0000
ROA not before:           Tue 24 Jan 2023 16:09:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210490
IP address blocks:        2a0e:b107:17b0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:ea:f0:e4:b3:c2:cc:e2:e9:cb:ed:79:3a:e6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=529fc832486914e7b130b7af46aab125153abd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bf:cd:2b:4a:de:d9:d8:50:d6:71:ad:a5:b0:
                    7c:d7:36:a1:d7:b9:9c:2d:6a:f6:79:12:c1:a4:40:
                    76:35:72:2c:0a:cb:0e:87:eb:02:52:71:e0:ee:ff:
                    52:07:00:3b:e3:f9:a8:c4:0c:69:db:f3:18:9d:a4:
                    24:74:a7:ba:7b:1b:4f:7a:dc:86:c5:33:dd:06:38:
                    7e:24:a3:b0:54:c5:17:81:44:a7:d0:a8:88:f2:26:
                    78:d7:68:c5:4d:b0:a9:49:69:3b:94:22:9d:59:91:
                    9d:a5:79:6f:c8:e6:db:c1:4b:1b:28:93:6f:f1:92:
                    90:de:bc:3d:53:05:8a:ea:65:76:2b:d8:b7:de:f1:
                    1b:07:06:10:18:98:17:5d:62:7f:7c:66:90:4c:20:
                    13:94:f1:f0:75:b8:98:1d:81:63:61:4a:63:f5:f5:
                    98:99:e5:40:9a:2e:f7:d4:6c:c9:ee:c9:7a:76:e6:
                    48:71:1e:d4:9b:71:6e:57:67:99:eb:cb:a9:ff:a0:
                    fd:42:8c:7f:37:f9:c4:9b:99:72:70:21:61:f6:c7:
                    dc:32:b0:95:f9:59:50:31:67:21:43:8e:5a:d9:3e:
                    ec:63:35:c5:12:d4:bd:3c:96:12:d7:8c:ef:67:f9:
                    29:4f:c2:89:64:1e:60:58:9e:bb:2b:84:b2:65:c4:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9F:C8:32:48:69:14:E7:B1:30:B7:AF:46:AA:B1:25:15:3A:BD:97
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Up_IMkhpFOexMLevRqqxJRU6vZc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:17b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:55:0b:45:11:ae:ca:6b:11:03:32:51:98:56:06:7f:ad:41:
         77:2e:d4:6e:c7:12:89:ef:f5:7e:14:dd:72:f1:e6:c1:73:12:
         95:55:2f:5d:3f:3b:8c:ef:92:6f:1c:70:f3:38:8d:67:ba:34:
         69:cd:9b:60:99:86:3d:c2:0c:7f:c8:73:47:1a:6e:b4:03:8c:
         f6:47:f7:f2:67:c6:67:ab:9e:15:3a:52:b7:4e:91:8a:cb:28:
         ba:6c:bc:a5:ca:cb:a1:20:26:b1:25:68:72:b5:40:5e:3a:d1:
         3d:a4:ab:11:6a:cf:52:8d:95:d7:27:b4:1b:88:67:d8:d6:3d:
         54:5b:21:b7:f5:9d:2d:55:a4:02:8b:12:24:b4:ff:3e:a5:14:
         ce:0e:26:15:50:6c:a0:bc:2c:08:79:c4:c0:57:e0:2d:d0:04:
         43:07:7b:81:6b:b8:ce:f5:8f:d4:21:d4:0f:5b:c1:75:bf:17:
         39:e3:56:2e:37:a6:8a:c2:b3:4e:a7:8d:96:48:11:f0:82:dd:
         d3:99:6b:e4:e0:f8:0e:15:f6:e8:94:91:0e:0a:d6:36:bc:90:
         ec:b7:8d:d8:67:ec:76:bb:5f:06:54:59:ee:d3:a7:c5:19:d4:
         0f:c0:61:13:8d:30:5f:da:34:f8:96:a6:fb:da:5b:43:07:a8:
         df:7e:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----