Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W28aqi-GNkPOCIcWG3bsG5Xe56o.roa
File:                     W28aqi-GNkPOCIcWG3bsG5Xe56o.roa (raw, json)
Hash identifier:          tstwMqZlYnDfb64yT+W0eXb8P98okx3+3nXA95D2QGo=
Subject key identifier:   5B:6F:1A:AA:2F:86:36:43:CE:08:87:16:1B:76:EC:1B:95:DE:E7:AA
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7C88D68ECBC8D6FB5EB2829E236A2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W28aqi-GNkPOCIcWG3bsG5Xe56o.roa
Signing time:             Mon 02 Jan 2023 05:15:16 +0000
ROA not before:           Mon 02 Jan 2023 05:15:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206569
IP address blocks:        2a0e:b107:19b0::/48 maxlen: 48
                          2a0e:b107:19b1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:c8:8d:68:ec:bc:8d:6f:b5:eb:28:29:e2:36:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b6f1aaa2f863643ce0887161b76ec1b95dee7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:01:c3:7b:52:17:c4:8c:9e:99:91:e7:aa:
                    58:ef:10:7b:67:ca:e1:76:82:1f:7a:74:e5:85:80:
                    80:99:6e:b2:a3:f7:17:24:85:e3:69:0b:6c:96:db:
                    26:23:30:e0:10:fe:ed:36:11:a2:d5:a5:a5:96:b3:
                    c3:63:d6:60:1d:d5:34:93:33:94:f0:be:0c:79:30:
                    fe:f3:13:fd:53:71:39:55:2d:32:c5:c9:a0:d9:e9:
                    2a:38:6e:3e:ba:cd:8b:e2:22:fc:23:36:56:34:dc:
                    9d:94:b0:f4:5c:c8:eb:50:d3:f2:12:59:56:82:c2:
                    cb:56:c1:44:e7:88:ac:48:19:a7:bc:2d:38:61:79:
                    ff:a9:a4:7a:10:00:be:94:d9:d2:f2:5b:87:6c:f4:
                    de:9b:94:eb:9f:d9:6e:f9:a0:f8:90:e5:52:3f:22:
                    bc:8a:6b:5e:04:25:db:c3:d1:d6:d0:22:22:cb:92:
                    2a:a5:e0:da:ff:c1:66:d9:bc:64:30:aa:85:07:01:
                    a9:b7:3d:97:81:08:db:b1:4c:8f:b1:d7:61:41:a7:
                    83:52:b2:7b:ae:c6:1c:9e:2c:cc:f2:67:d2:92:de:
                    72:1b:b5:9a:78:52:dc:a7:45:a2:87:78:68:30:44:
                    b2:da:92:a9:ce:1c:b9:3e:07:ac:ac:8d:ec:d1:a9:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6F:1A:AA:2F:86:36:43:CE:08:87:16:1B:76:EC:1B:95:DE:E7:AA
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W28aqi-GNkPOCIcWG3bsG5Xe56o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:19b0::/47

    Signature Algorithm: sha256WithRSAEncryption
         9c:78:d1:a2:e1:c2:cf:ce:c6:d1:0d:c7:ae:ff:e0:3c:13:32:
         24:74:0c:19:fe:76:35:7e:09:e9:cd:68:11:4d:36:9d:a3:35:
         fb:05:01:97:b6:9d:59:d9:b2:61:a4:2e:44:3a:11:83:0c:ef:
         1b:55:d7:48:56:c9:40:e9:bc:c9:f9:48:b2:b2:ce:e8:22:3f:
         78:ee:ad:ee:45:59:c4:c3:7e:b0:aa:85:f4:57:df:4c:4d:49:
         59:d8:9b:55:35:db:da:99:34:b5:41:fc:8f:b0:d4:fc:53:c3:
         f3:44:4a:ef:bf:9e:04:ce:34:fc:fa:cc:e7:16:ab:8c:2e:f1:
         c7:26:d4:90:c8:21:8b:dc:97:02:a3:f6:b1:07:c2:27:ed:69:
         a1:e6:76:a6:f0:d9:54:d4:03:c8:61:35:55:eb:14:07:b1:b7:
         e9:d8:86:58:4e:d2:7a:b7:6d:90:2f:55:5a:75:58:a8:c8:e7:
         ed:9e:16:82:d6:55:6b:db:e0:ae:d0:3d:e4:ac:01:15:d4:98:
         34:f2:8d:63:fd:7d:cb:08:e0:3e:56:45:e1:c4:41:0e:d9:98:
         b4:5e:52:04:f8:6e:0a:33:f2:bf:d2:10:5a:61:ee:41:a7:9b:
         6c:b4:25:c5:02:ba:53:bf:f7:0c:d0:a6:d5:ea:4f:6f:3c:21:
         9b:f6:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----