Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VCOMPWr0GqAwh26tJfd94hk4OIA.roa
File:                     VCOMPWr0GqAwh26tJfd94hk4OIA.roa (raw, json)
Hash identifier:          dAoywlbXf2+YQ3vwvhaitpDs/ZnFw5thZf8q/ZumaUA=
Subject key identifier:   54:23:8C:3D:6A:F4:1A:A0:30:87:6E:AD:25:F7:7D:E2:19:38:38:80
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A9AA0E72CB7B46B43DAA5D6C9FF3AC88D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VCOMPWr0GqAwh26tJfd94hk4OIA.roa
Signing time:             Fri 15 Sep 2023 20:55:50 +0000
ROA not before:           Fri 15 Sep 2023 20:55:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49581
IP address blocks:        2a0e:b107:27d0::/48 maxlen: 48
                          2a0e:b107:27d5::/48 maxlen: 48
                          2a0e:b107:27f5::/48 maxlen: 48
                          2a0e:b107:27d4::/48 maxlen: 48
                          2a0e:b107:27f4::/48 maxlen: 48
                          2a0e:b107:27f3::/48 maxlen: 48
                          2a0e:b107:27d3::/48 maxlen: 48
                          2a0e:b107:27f2::/48 maxlen: 48
                          2a0e:b107:27d2::/48 maxlen: 48
                          2a0e:b107:27f7::/48 maxlen: 48
                          2a0e:b107:27d7::/48 maxlen: 48
                          2a0e:b107:27d1::/48 maxlen: 48
                          2a0e:b107:27f6::/48 maxlen: 48
                          2a0e:b107:27d6::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9a:a0:e7:2c:b7:b4:6b:43:da:a5:d6:c9:ff:3a:c8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 15 20:55:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=54238c3d6af41aa030876ead25f77de219383880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:24:39:a4:db:0e:bf:34:22:36:88:5c:f9:ff:
                    b2:6b:18:ba:65:91:48:8d:4e:73:d9:c2:53:6d:69:
                    71:01:58:ca:af:1f:6c:5f:31:52:22:07:dd:78:4c:
                    a8:d3:86:28:50:a1:fa:4c:ad:a4:4a:0a:b6:a9:3c:
                    d5:8d:b5:54:81:a3:9d:b2:e1:2a:e2:d2:93:b8:ce:
                    c6:8e:9d:d5:64:28:7f:f5:0e:89:c2:50:d2:68:5e:
                    b2:0d:a5:c3:cd:a0:6a:04:bf:0d:86:66:ae:a2:af:
                    d5:95:e2:e8:d0:4e:61:0e:b3:ed:f6:70:6d:04:f2:
                    98:b8:2c:be:c6:08:07:fe:0f:13:0b:84:2e:86:0d:
                    15:24:82:11:52:ca:e6:58:f2:cd:5e:2c:6b:24:e0:
                    d2:5d:ce:e4:2c:7c:f7:72:ab:6b:8a:6f:e2:b7:6f:
                    d8:fc:f6:90:59:2e:50:b8:2d:65:17:19:36:fc:e9:
                    56:23:00:76:7c:ad:d2:c7:0b:2e:6a:9e:3f:22:6b:
                    8d:e5:e7:34:16:77:64:56:62:06:42:6b:4a:19:94:
                    d9:45:d2:1e:07:d2:49:d5:48:93:7e:3f:59:1a:03:
                    81:25:57:e5:21:02:3c:f9:85:e0:a4:99:b6:53:4b:
                    e5:b4:8c:83:53:93:4d:2e:af:19:5a:cd:68:5e:9e:
                    41:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:23:8C:3D:6A:F4:1A:A0:30:87:6E:AD:25:F7:7D:E2:19:38:38:80
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VCOMPWr0GqAwh26tJfd94hk4OIA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27d0::/45
                  2a0e:b107:27f2::-2a0e:b107:27f7:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9a:3f:e7:d2:20:87:ad:6b:c2:8c:ee:e4:76:d0:2b:80:0c:e3:
         08:51:c8:c7:70:25:13:8a:9f:4c:2e:3c:71:c3:4d:ad:4d:ad:
         6b:e5:e0:a3:41:3c:96:bc:a3:83:40:7c:bd:15:52:4d:1f:17:
         5d:95:f8:4d:01:6d:da:9b:94:0c:ee:09:99:b0:03:e7:ce:d9:
         8f:1c:cc:8e:85:8a:e3:2c:35:8a:15:6f:85:13:4a:f0:ae:26:
         7a:0b:2c:4a:d6:a1:55:4f:dd:9c:75:26:b2:93:4c:4b:fc:aa:
         6b:48:15:3d:27:8d:ea:2d:e4:3b:65:f2:e8:c7:30:02:f3:9b:
         7e:0d:35:e7:10:3d:1c:f3:d5:89:7c:1b:5f:e4:27:5d:ef:25:
         eb:1f:43:08:c0:6b:eb:66:ec:b0:21:29:62:2c:c6:15:a6:51:
         0f:43:02:8b:79:09:9b:25:e3:89:96:fe:2d:83:72:f1:d8:c1:
         7b:33:bd:3c:e2:d4:43:3a:5c:b1:ba:08:02:0e:db:44:ad:d1:
         ed:dd:e6:fe:1a:6f:ab:c6:fa:04:e6:b2:af:0b:a7:7c:32:91:
         9b:11:c9:ca:41:39:32:a3:0f:ef:75:28:5e:a6:d8:0f:ae:c8:
         9e:70:e7:24:f7:5a:73:fe:88:51:83:c3:7f:6e:d0:8b:9d:57:
         6e:cd:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----