Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UsLVhTYLpZthZXAnRVcysEfUVhQ.roa
File:                     UsLVhTYLpZthZXAnRVcysEfUVhQ.roa (raw, json)
Hash identifier:          swn9WxF1Kkw0yAKd/jcN5rhRLnFyoNbFmhjhlVATrww=
Subject key identifier:   52:C2:D5:85:36:0B:A5:9B:61:65:70:27:45:57:32:B0:47:D4:56:14
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018780A6B70726A0AE8A5A6813A798B52AE5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UsLVhTYLpZthZXAnRVcysEfUVhQ.roa
Signing time:             Fri 14 Apr 2023 16:43:42 +0000
ROA not before:           Fri 14 Apr 2023 16:43:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213327
IP address blocks:        2a0e:b107:20a0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:80:a6:b7:07:26:a0:ae:8a:5a:68:13:a7:98:b5:2a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 14 16:43:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=52c2d585360ba59b61657027455732b047d45614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:27:0b:44:29:2e:ec:e8:12:dd:0e:aa:44:
                    6e:ff:b3:a1:7d:39:4a:ff:2d:50:df:36:8b:55:27:
                    c3:21:98:98:c4:47:bf:ef:d6:09:4f:0d:fb:1a:23:
                    a0:09:0f:f3:1d:88:06:e9:56:0d:9d:52:9d:f6:b2:
                    b9:f7:50:d1:d6:9e:2e:8c:c9:19:02:6c:b6:a0:d6:
                    05:6d:0b:c2:d8:ce:80:e2:58:a0:71:91:9a:17:6b:
                    16:6c:e0:2c:a6:a9:cc:d4:88:8f:57:87:e0:05:ed:
                    2e:93:06:b2:04:3c:29:f8:ab:c0:dd:3c:58:a1:77:
                    16:48:ce:b8:b9:50:74:8a:c7:83:45:97:2f:ba:cd:
                    0f:13:b7:39:d6:a3:c8:07:ba:83:29:ae:49:50:8f:
                    96:55:b1:9c:e4:f3:5c:97:05:12:ff:41:1a:7e:b3:
                    49:1e:48:f4:91:1e:73:29:11:e7:60:61:01:36:8a:
                    40:48:44:43:d5:36:13:ac:00:a2:6d:19:bf:39:82:
                    77:e9:f0:06:49:05:50:0a:3a:72:9c:93:ed:f1:8c:
                    30:7b:1c:c1:eb:45:ea:34:d1:e2:c5:c2:d0:bb:a4:
                    23:bb:3e:43:b8:78:cc:85:e4:09:f2:66:bc:14:da:
                    d7:55:94:90:91:6a:64:4a:46:8b:89:bc:d3:fa:dd:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C2:D5:85:36:0B:A5:9B:61:65:70:27:45:57:32:B0:47:D4:56:14
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UsLVhTYLpZthZXAnRVcysEfUVhQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:20a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:e1:58:48:1a:40:a6:d6:ff:c3:ee:4d:ee:d8:52:39:c2:7f:
         62:98:31:8f:6a:33:3c:4d:34:71:b7:21:37:76:5c:1c:95:72:
         42:8c:f9:56:6d:88:1b:62:04:2b:dd:e5:32:4d:ae:41:12:e7:
         a3:37:c4:98:59:59:41:d9:09:f6:1d:ab:bd:71:5c:5d:0f:ef:
         d1:3a:af:47:80:3e:44:b8:06:74:ea:18:49:26:44:f6:fa:78:
         30:29:2d:1a:19:50:62:44:a0:c0:3d:1e:86:61:7d:f4:e4:86:
         c5:f4:d6:9f:e1:60:a7:78:92:4f:74:78:75:5f:d0:36:87:81:
         79:f4:f3:1d:7f:39:41:1f:59:e5:bd:58:0b:c7:4e:6e:ff:4e:
         c5:97:78:8b:77:4c:a1:dc:32:cb:34:5a:d0:81:af:e6:76:1f:
         51:95:b4:1f:ac:e3:f9:10:af:b8:60:19:3d:ec:37:8f:29:19:
         4f:49:86:95:cd:62:94:6a:3c:11:94:7f:e1:fc:5d:5f:fd:3a:
         8d:56:17:1b:1d:5f:4c:fe:e4:ae:93:c9:41:4f:25:c6:ee:46:
         f3:4c:71:ea:63:96:d9:21:cd:98:2b:f2:68:b0:13:58:cd:95:
         1f:3a:9b:62:a0:9b:d2:2b:32:81:76:dd:d2:9c:da:71:f8:96:
         53:0e:6a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----