Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VnFH7OsEbpAet1sqdZ0gWZdH_fk.roa
File:                     VnFH7OsEbpAet1sqdZ0gWZdH_fk.roa (raw, json)
Hash identifier:          m559lK/eO7J/67yg2YyvvUmRkQamKGYXh2viNNl/7Wc=
Subject key identifier:   56:71:47:EC:EB:04:6E:90:1E:B7:5B:2A:75:9D:20:59:97:47:FD:F9
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7ADCFC9619AE1427AF89617F7C117
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VnFH7OsEbpAet1sqdZ0gWZdH_fk.roa
Signing time:             Mon 02 Jan 2023 05:15:09 +0000
ROA not before:           Mon 02 Jan 2023 05:15:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203074
IP address blocks:        2a0e:97c0:4b0::/48 maxlen: 48
                          2a0e:97c0:4b3::/48 maxlen: 48
                          2a0e:97c0:4b1::/48 maxlen: 48
                          2a0e:97c0:4b2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:ad:cf:c9:61:9a:e1:42:7a:f8:96:17:f7:c1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=567147eceb046e901eb75b2a759d20599747fdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b7:10:73:89:81:6b:3a:5d:3c:cb:72:89:fd:
                    b4:59:9d:df:83:31:3c:41:da:f6:98:5b:21:47:23:
                    f9:ce:6b:64:2e:da:10:d5:45:09:bb:e2:b8:4c:7d:
                    0a:74:2b:4f:53:df:79:81:da:64:13:91:79:0c:64:
                    b0:61:2f:3d:12:8d:a0:58:de:df:51:64:01:1c:74:
                    68:8e:8e:c0:5d:c3:33:f5:87:b7:2d:83:9b:60:8b:
                    b6:98:2d:63:27:56:95:bf:0a:5f:da:97:7f:3e:c4:
                    e5:91:3d:84:c7:39:0c:08:5c:83:29:0b:45:09:74:
                    0f:6c:a4:af:ae:ea:4f:f6:13:bb:fe:13:c8:aa:92:
                    56:3a:2b:71:66:1d:5a:53:44:9d:c9:d2:3d:93:e2:
                    74:01:28:8b:54:83:15:67:75:cc:44:a0:de:81:08:
                    05:d8:48:54:a5:e4:46:16:bd:1e:a6:7b:fe:5f:de:
                    f7:8b:cc:cc:4e:04:ea:93:87:f4:02:43:77:b3:f5:
                    d6:fc:f0:af:54:c0:d8:b5:de:57:bf:b2:95:95:25:
                    94:51:bd:45:36:bf:41:d0:16:9c:02:f4:17:56:27:
                    56:5e:15:d6:20:38:e9:13:3c:67:24:57:c4:56:c0:
                    37:f5:fa:a5:9d:00:d9:d5:a2:44:ec:27:ea:92:16:
                    09:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:71:47:EC:EB:04:6E:90:1E:B7:5B:2A:75:9D:20:59:97:47:FD:F9
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VnFH7OsEbpAet1sqdZ0gWZdH_fk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:4b0::/46

    Signature Algorithm: sha256WithRSAEncryption
         3e:c6:d3:15:87:4b:86:9f:23:3b:26:71:b3:e9:25:da:d7:04:
         d8:ef:96:1a:f4:e8:f3:19:9c:49:06:a2:72:4b:37:08:73:3a:
         9a:30:ab:2a:af:b5:da:75:d9:ac:7e:21:b5:50:3b:34:62:5d:
         57:ab:88:79:6b:94:43:47:e2:63:a7:32:f8:ba:0e:55:c3:e6:
         e5:30:c5:a9:6e:32:28:74:44:cf:58:ee:aa:f0:8e:ec:41:5c:
         40:93:75:38:84:2a:ee:bb:d7:5a:20:41:89:c3:4a:ae:9b:ae:
         d2:a2:4a:47:01:73:9c:d8:f1:b5:9a:2a:ba:78:cd:67:05:f5:
         73:b7:35:9f:41:23:3b:80:ed:25:e9:2b:de:0e:ca:c2:f2:65:
         d7:e6:e6:a3:c5:48:f1:17:4b:8a:5b:68:3b:d2:03:3b:80:fb:
         75:52:1b:b8:a1:44:be:5f:79:95:b2:62:3e:1a:a8:9c:bb:42:
         c4:39:2b:ff:7a:fe:63:49:b6:c1:80:2a:4a:83:26:43:90:7f:
         cf:5c:42:18:36:51:57:8e:b8:99:8d:b4:11:8c:de:4d:f2:4c:
         34:d6:72:40:21:f6:e4:04:e6:f3:c1:0a:98:37:4a:f0:8c:3c:
         17:7b:d8:8d:f1:03:41:93:d5:7d:2f:99:94:b4:eb:33:99:3d:
         e5:c4:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----