Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W1LjVqKoCPCUcYIq6Mi5WwVx1Fw.roa
File:                     W1LjVqKoCPCUcYIq6Mi5WwVx1Fw.roa (raw, json)
Hash identifier:          9BnRcxAYm2AkNxkgWMrSAfffgQHqNEdbttkL/R648QU=
Subject key identifier:   5B:52:E3:56:A2:A8:08:F0:94:71:82:2A:E8:C8:B9:5B:05:71:D4:5C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BED29330FB5CBAF2EF2F3E2D858A9DD71
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W1LjVqKoCPCUcYIq6Mi5WwVx1Fw.roa
Signing time:             Mon 20 Nov 2023 14:36:22 +0000
ROA not before:           Mon 20 Nov 2023 14:36:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61218
IP address blocks:        31.42.183.0/24 maxlen: 24
                          2a0e:97c0:4b00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ed:29:33:0f:b5:cb:af:2e:f2:f3:e2:d8:58:a9:dd:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 20 14:36:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b52e356a2a808f09471822ae8c8b95b0571d45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dd:0f:b7:8e:99:82:b0:76:34:c4:b8:b7:06:
                    28:69:7f:9c:75:f0:d3:a6:47:d6:1c:d7:6f:88:84:
                    07:52:67:2b:24:74:51:01:cf:17:cf:93:75:ab:cf:
                    24:b7:3e:bd:19:58:9d:6e:43:e2:e8:ad:4c:ca:7b:
                    a9:d3:b2:7b:1e:2b:ec:4a:ca:a7:72:ef:2b:71:e1:
                    ef:bf:9b:c3:d6:97:34:d3:dd:e2:e8:0b:65:1c:13:
                    ab:c1:8a:bb:84:c4:67:f1:62:71:fb:9d:29:d4:63:
                    1d:e6:c0:4e:14:a9:78:ae:2a:4b:17:a6:7e:f5:51:
                    88:49:a4:4a:45:31:42:a1:80:58:b2:df:f5:e6:8d:
                    41:af:8b:3a:b0:4b:54:18:57:81:89:18:95:7c:32:
                    70:25:dc:f7:3f:72:7f:c5:98:6a:98:ba:34:12:3a:
                    00:11:21:bb:8c:3f:56:85:8f:a7:01:18:c1:0f:6c:
                    85:ec:9c:18:e1:3a:f4:68:7d:b8:a1:56:7d:98:b3:
                    d8:d9:64:af:54:71:23:86:7d:68:59:cf:ab:07:08:
                    48:f1:13:5e:cf:1f:6a:47:b8:29:7d:08:eb:89:d6:
                    d6:31:b6:94:ea:d9:96:63:1a:f5:b7:be:79:3c:0a:
                    d7:81:8c:c2:ac:02:1a:7c:c0:0f:68:0c:a6:00:fc:
                    2e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:52:E3:56:A2:A8:08:F0:94:71:82:2A:E8:C8:B9:5B:05:71:D4:5C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W1LjVqKoCPCUcYIq6Mi5WwVx1Fw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.42.183.0/24
                IPv6:
                  2a0e:97c0:4b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:77:f1:8f:bb:b2:fe:64:f7:50:35:62:98:52:80:9d:ba:97:
         bc:18:21:5b:1f:2a:99:8e:cf:e0:4f:67:38:ee:55:95:7a:6a:
         96:13:01:70:ae:22:66:e5:fa:33:d8:38:14:44:d4:34:64:3b:
         e8:90:07:1a:40:1d:18:b4:b1:2a:f6:37:33:53:47:03:61:1f:
         67:00:96:44:83:bd:47:2c:ba:17:a1:2e:2d:71:8a:b1:58:a5:
         e6:cb:be:16:09:e2:c6:b2:a6:4a:d6:b3:31:5c:8c:90:ae:aa:
         12:18:53:e1:f3:29:6a:c9:4e:cf:d9:8d:90:f7:d3:34:82:dc:
         83:1d:84:4a:f4:02:67:68:fd:1d:f6:ee:05:ce:c1:89:b7:5f:
         6a:b1:06:eb:48:a1:09:2f:2e:e0:5b:a0:51:1e:d7:c6:c9:26:
         48:fa:c0:b9:82:b5:30:c7:94:cc:e7:39:71:21:bb:db:ff:ae:
         38:21:1b:dc:99:50:c0:c4:28:c8:c1:6f:2b:d8:60:35:63:5f:
         d8:4e:b7:d3:51:b3:e5:d5:7b:ee:c4:72:9e:ce:f9:f6:88:dc:
         0a:d3:c7:b2:65:be:d7:ee:95:55:b5:7d:29:f4:1a:2e:a1:76:
         4e:22:4f:76:96:6b:33:17:24:6c:01:4c:58:ba:11:a5:53:8c:
         8c:85:b1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----