Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vxho6EkANVXNCzdxFByD2_xmbvQ.roa
File:                     Vxho6EkANVXNCzdxFByD2_xmbvQ.roa (raw, json)
Hash identifier:          XDfSX/ZSRxczuRnol7LkbO8bE8FvOfg8sqmFPT1wBx4=
Subject key identifier:   57:18:68:E8:49:00:35:55:CD:0B:37:71:14:1C:83:DB:FC:66:6E:F4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7B5B8BBA4BA6E99CFE0B6462CF10A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vxho6EkANVXNCzdxFByD2_xmbvQ.roa
Signing time:             Mon 02 Jan 2023 05:15:11 +0000
ROA not before:           Mon 02 Jan 2023 05:15:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203943
IP address blocks:        2a0e:b107:5a2::/48 maxlen: 48
                          2a0e:b107:5a1::/48 maxlen: 48
                          2a0e:b107:5a3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:b5:b8:bb:a4:ba:6e:99:cf:e0:b6:46:2c:f1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=571868e849003555cd0b3771141c83dbfc666ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:e0:51:af:2a:df:53:1c:34:d5:10:7e:6d:
                    50:73:2d:c4:c4:18:f9:d7:42:ab:5b:49:89:7d:a0:
                    e2:26:90:e3:44:10:f8:79:cb:de:74:86:53:34:83:
                    53:48:59:5c:6c:0c:5e:ea:5a:f4:1f:cc:1b:b9:cb:
                    a8:01:6b:e8:db:52:b7:d5:8c:44:02:cb:d5:99:62:
                    74:a1:0a:c3:8f:2b:b0:56:c0:fd:69:45:15:26:9f:
                    a9:c7:e8:11:0e:34:51:39:bb:d9:6f:6d:4a:9e:7d:
                    12:b0:3c:b1:c7:d1:bd:8f:42:a0:53:04:a4:a2:b1:
                    8a:52:8a:dc:ad:bf:a7:d0:62:69:8f:be:88:5d:e8:
                    83:80:51:60:ea:9d:f9:72:c5:33:ca:11:1e:17:bc:
                    35:e6:47:25:ca:06:48:c8:13:ac:3b:f9:cd:af:7c:
                    b3:cc:ff:f5:71:ee:29:91:9f:8f:62:7d:3a:34:24:
                    03:c9:ad:df:28:9a:78:92:8b:f9:b0:5e:86:a6:e2:
                    a8:96:2d:a7:18:31:9b:19:4b:cb:a7:6a:57:2e:57:
                    7d:57:a4:b7:22:5a:f0:17:c4:38:84:43:de:b6:55:
                    9b:19:4e:ea:ee:fb:af:51:f5:d1:20:ec:e9:65:7a:
                    7b:56:e0:06:52:cb:42:ed:53:b9:c8:56:68:64:7a:
                    f2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:18:68:E8:49:00:35:55:CD:0B:37:71:14:1C:83:DB:FC:66:6E:F4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vxho6EkANVXNCzdxFByD2_xmbvQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:5a1::-2a0e:b107:5a3:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         a5:42:40:a5:eb:8a:e7:24:b5:b6:ef:6f:8b:c8:81:cb:6a:8e:
         38:79:de:ca:09:7d:c9:d5:16:43:61:f8:d0:7e:a5:28:b7:08:
         18:53:e2:e1:6b:02:90:e9:37:19:bc:62:41:8f:19:a5:6b:f5:
         30:c1:60:45:8d:b7:be:20:b2:b8:e9:7a:65:5c:b5:1b:1e:22:
         f2:1a:9f:61:74:d7:de:14:5b:98:43:e0:f6:e5:e2:f7:2f:7a:
         1d:05:34:f2:40:83:65:12:d4:e0:a9:80:d7:0c:04:84:75:e5:
         4d:78:2a:11:2c:da:85:b6:55:04:f2:ab:b1:3a:cb:8f:e0:97:
         bb:71:d2:78:8a:16:65:87:e9:53:74:01:08:b7:c1:d9:ec:01:
         65:94:86:f8:5c:48:80:6a:66:d0:3b:74:5d:91:32:66:53:78:
         4b:dd:5b:c0:7d:b4:f1:23:b7:3f:ee:a6:43:67:61:f9:e4:ed:
         fd:e6:47:a4:77:ae:d4:e0:16:af:a4:a7:03:8f:7e:23:32:b0:
         9b:39:ec:84:46:2a:73:86:48:37:ac:f4:cf:17:f5:4f:46:b8:
         3f:c2:78:fa:f5:ef:30:49:61:66:47:9b:f8:68:b9:7e:1f:82:
         99:7e:af:06:87:da:2a:9c:a1:e6:67:a8:c7:5d:6c:2b:a8:03:
         dd:53:c5:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----