Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UwiGZU3vJOn02FUmjJlIEXAVXZ8.roa
File:                     UwiGZU3vJOn02FUmjJlIEXAVXZ8.roa (raw, json)
Hash identifier:          WY+JrvmvOCqbrLYrHJXfiRrADh1Ryy2cvGOAklUXIjQ=
Subject key identifier:   53:08:86:65:4D:EF:24:E9:F4:D8:55:26:8C:99:48:11:70:15:5D:9F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01869C3641B2824337FE2D77B898B4EB420E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UwiGZU3vJOn02FUmjJlIEXAVXZ8.roa
Signing time:             Wed 01 Mar 2023 08:07:26 +0000
ROA not before:           Wed 01 Mar 2023 08:07:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203442
IP address blocks:        2a0e:97c0:bc0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9c:36:41:b2:82:43:37:fe:2d:77:b8:98:b4:eb:42:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar  1 08:07:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=530886654def24e9f4d855268c99481170155d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:12:ea:08:f3:9d:8c:33:3f:ab:cf:8a:d5:51:
                    ca:52:81:34:6d:19:5e:65:86:b6:16:b3:9e:e0:f0:
                    7f:68:d0:3b:53:a4:1c:00:76:44:db:24:4b:a5:02:
                    d2:e4:04:e3:16:3a:ad:b1:13:b0:6d:66:20:51:17:
                    df:f4:3a:e9:73:2f:ba:0a:78:67:2a:5d:6e:5b:65:
                    f6:a1:9b:e9:bc:31:49:bd:a1:b3:ce:68:ab:f2:c7:
                    bf:de:46:01:40:ed:4e:f5:20:89:aa:e7:1e:82:3b:
                    09:57:b0:f8:46:cb:84:d9:f8:16:94:b5:f6:42:1d:
                    23:53:8c:cd:04:40:97:d5:e7:73:25:47:8e:bc:60:
                    c2:6e:03:24:5e:a3:3e:d5:2f:ae:9e:02:be:db:d1:
                    a8:fe:66:83:8f:49:8f:f3:b2:55:cc:63:72:f1:cf:
                    d4:12:89:b1:62:d2:50:f1:ba:cb:d4:3a:73:8f:e9:
                    3f:8d:3d:9a:3b:a9:15:d1:37:1d:e9:db:d9:e5:52:
                    33:d2:aa:04:7f:47:78:24:57:bc:fa:9f:05:94:2a:
                    d4:5f:b8:f5:68:04:25:46:7d:55:7e:f2:90:42:95:
                    e3:4b:94:92:f6:d8:9f:5e:ea:7f:3d:8e:9d:d0:b7:
                    d0:ad:88:cf:5a:fb:1c:fd:7b:af:2d:04:c6:95:d9:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:08:86:65:4D:EF:24:E9:F4:D8:55:26:8C:99:48:11:70:15:5D:9F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UwiGZU3vJOn02FUmjJlIEXAVXZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:bc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:a1:f4:1b:53:f1:62:82:3f:25:e6:2d:52:7e:63:b8:11:64:
         40:e2:5a:50:3d:bb:eb:75:7d:88:df:cc:17:0a:d2:d9:15:54:
         c9:55:1b:18:31:3f:cf:8c:cc:18:83:27:c6:71:64:8a:71:88:
         58:66:4a:8e:74:fb:92:8b:c8:19:b7:39:44:f5:62:bf:d8:4f:
         c0:2c:bd:15:8b:42:24:15:11:8d:3e:e3:02:4b:9b:99:6f:1b:
         d7:01:2b:cc:98:ce:0e:dc:47:d4:59:f5:eb:61:b7:9d:f6:bb:
         cf:75:3b:aa:57:fd:e6:b3:6c:95:45:2f:22:0f:f1:82:ff:4b:
         1f:ca:73:a4:54:37:1f:93:fe:74:79:c8:30:51:53:04:95:2e:
         fd:bc:d1:dd:1d:db:64:2b:c7:8a:e1:a7:b5:cc:a2:17:d1:59:
         8b:2a:bf:8a:05:9c:b9:9d:f1:79:46:29:19:35:90:7b:da:fb:
         30:18:13:bb:83:23:59:83:ff:a6:6c:5b:72:e4:5f:e2:d5:e8:
         b5:f6:2d:e4:a4:51:d5:3b:4a:2f:4a:7f:39:05:90:14:80:c2:
         53:a8:a0:e1:8d:c5:ad:1c:8a:97:3d:48:e6:26:f4:5f:8d:69:
         e9:46:df:31:a8:5e:1d:02:dd:b1:9a:eb:1a:47:3e:64:21:da:
         eb:17:30:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----