Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WhX8quZYDPPOGm15fthu4NrAySM.roa
File:                     WhX8quZYDPPOGm15fthu4NrAySM.roa (raw, json)
Hash identifier:          yvsKCtUEgcNLpSJ5+qtuViVVx6Q7/XSdNfuXcbgD1Aw=
Subject key identifier:   5A:15:FC:AA:E6:58:0C:F3:CE:1A:6D:79:7E:D8:6E:E0:DA:C0:C9:23
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E9C7F70B38F28010B4A3919733FDAEF5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WhX8quZYDPPOGm15fthu4NrAySM.roa
Signing time:             Wed 25 Jan 2023 16:34:34 +0000
ROA not before:           Wed 25 Jan 2023 16:34:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49716
IP address blocks:        2a0e:97c0:670::/44 maxlen: 48
                          2a10:cc45:110::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e9:c7:f7:0b:38:f2:80:10:b4:a3:91:97:33:fd:ae:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 25 16:34:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a15fcaae6580cf3ce1a6d797ed86ee0dac0c923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:65:70:10:6e:c8:85:3d:3e:55:25:39:95:
                    fa:6c:e0:e2:1c:10:35:aa:7a:0b:7e:3c:7a:e3:9e:
                    7a:d9:69:b0:7d:43:ed:bf:7c:d3:ae:32:9e:3e:2d:
                    86:fb:54:1c:35:de:02:24:6a:24:87:d9:bf:b7:4b:
                    c0:2d:da:c7:c3:bf:47:70:a7:c2:1f:21:d8:51:d8:
                    f2:07:a0:14:19:c3:03:0a:bc:a9:2b:9a:56:82:59:
                    38:bf:bf:b0:37:ab:39:d8:f4:cc:b0:f4:99:da:3b:
                    33:bd:c3:f5:0b:e7:f3:37:25:8a:43:c1:27:1e:d6:
                    44:9a:47:48:9d:2e:01:0d:9c:00:40:45:48:12:36:
                    45:e4:34:9a:8b:2e:a8:96:2e:ec:0c:85:f4:36:73:
                    56:8b:04:a5:d7:3e:a6:7e:ed:22:b2:a6:dd:7a:24:
                    da:98:9e:2a:00:54:55:08:c6:12:70:1d:27:79:d3:
                    48:27:ca:7f:e5:96:df:c2:dd:b1:c1:c7:cc:5b:8d:
                    f0:be:7e:a7:27:58:8b:2e:a7:dc:a2:81:39:10:cc:
                    d3:42:cf:f6:1d:a4:64:a2:bf:cb:68:c7:a9:44:99:
                    09:90:8d:03:1f:86:8c:8f:18:e1:41:94:38:d3:68:
                    38:f1:68:41:a9:40:96:b8:f0:46:0d:81:2c:42:bd:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:15:FC:AA:E6:58:0C:F3:CE:1A:6D:79:7E:D8:6E:E0:DA:C0:C9:23
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WhX8quZYDPPOGm15fthu4NrAySM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:670::/44
                  2a10:cc45:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:fc:fa:51:c5:c5:52:ae:a6:6c:0d:f1:42:e4:d2:56:e3:de:
         cb:4f:95:b9:61:6c:c6:2d:fe:8b:82:15:d3:31:ba:28:9b:d0:
         ab:3b:1d:f9:b1:c8:36:10:92:19:ff:b5:04:ba:f9:dc:93:ed:
         d1:8c:00:2e:e3:2a:53:1f:0c:0f:d4:bd:2b:a5:83:d2:4e:b5:
         dd:69:e1:4f:69:cb:11:96:b8:49:bb:36:88:6e:a3:fa:9e:5b:
         31:c5:d5:26:9c:36:f2:75:4a:3e:29:ac:7b:4d:1b:82:ee:8b:
         d1:9f:98:f2:1b:90:4d:b8:ae:9c:8b:86:e3:d6:e5:1b:5c:8c:
         8a:f3:ed:e3:65:db:9c:7a:ab:82:66:6a:08:8c:16:e3:a8:d2:
         10:60:0c:5c:dd:10:62:c6:76:ca:ce:18:78:5a:58:68:a6:d2:
         2b:82:af:51:21:a8:38:b0:e1:a6:65:f6:dc:7f:72:2f:2d:3f:
         76:87:42:36:87:e4:7b:7f:50:c7:59:ac:85:1d:e6:7a:3a:d3:
         24:0e:63:2c:b9:02:5a:75:f5:d8:c6:c3:54:00:2a:3c:a8:18:
         83:3a:1c:87:28:cb:5d:ba:88:32:81:0d:fe:2e:eb:df:40:1d:
         e6:f4:c0:d0:c3:8f:08:c0:dc:66:5d:a4:85:dd:53:ca:f8:f5:
         e8:bf:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----