Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XPV5TE6jdkEKhM-jUgttSxyyGe8.roa
File:                     XPV5TE6jdkEKhM-jUgttSxyyGe8.roa (raw, json)
Hash identifier:          yXAV0LgdgxFVun61Kj3M0yodVWuBu/Vfgbz5nx5J6Js=
Subject key identifier:   5C:F5:79:4C:4E:A3:76:41:0A:84:CF:A3:52:0B:6D:4B:1C:B2:19:EF
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018ADD1560B2E37AA1BB306B265E6BE92393
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XPV5TE6jdkEKhM-jUgttSxyyGe8.roa
Signing time:             Thu 28 Sep 2023 18:38:00 +0000
ROA not before:           Thu 28 Sep 2023 18:38:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203493
IP address blocks:        2a0e:b107:2792::/48 maxlen: 48
                          2a0e:b107:2791::/48 maxlen: 48
                          2a0e:b107:2796::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:dd:15:60:b2:e3:7a:a1:bb:30:6b:26:5e:6b:e9:23:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 28 18:38:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5cf5794c4ea376410a84cfa3520b6d4b1cb219ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b7:89:5c:79:5c:35:f9:03:70:60:b2:da:d6:
                    3c:ff:54:b0:3c:18:58:5b:d0:64:a8:ff:08:ae:99:
                    81:ca:ab:e8:bb:bd:8e:74:f1:8a:a4:43:51:65:25:
                    88:8e:c9:14:1a:fd:b8:14:b9:ed:ba:3b:da:ee:98:
                    24:8d:d3:03:39:d3:f3:56:44:f9:b0:11:b2:ea:c0:
                    21:0f:83:d2:8a:37:13:bf:af:6f:a0:98:dd:af:16:
                    4f:72:51:76:dd:24:89:b9:c8:7b:31:ba:05:3c:fe:
                    5c:0d:24:fc:9a:2e:46:3f:29:c9:0b:0b:88:3e:b0:
                    8c:8e:1a:ed:f1:e8:b1:25:68:00:4a:5f:2f:f9:35:
                    9e:6a:45:a2:fb:91:b9:b5:a3:a6:be:ff:61:3b:b6:
                    2d:19:f9:dc:4e:42:49:aa:4a:cb:71:c6:cd:fd:76:
                    50:d5:e3:9c:0e:b1:0d:8e:73:8b:d8:0a:18:57:d6:
                    f1:ab:c3:2a:73:84:42:b9:db:d6:0e:84:13:85:75:
                    6e:a2:8c:03:57:79:5a:48:ea:34:6b:53:d1:10:3e:
                    55:b8:f6:05:99:2e:6f:42:45:97:31:47:fb:19:1b:
                    0f:1e:97:fe:59:3c:0b:e8:1f:9f:86:92:a6:2f:fe:
                    59:3a:53:a5:e8:ed:88:e9:ac:6a:fe:c5:21:e1:a5:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F5:79:4C:4E:A3:76:41:0A:84:CF:A3:52:0B:6D:4B:1C:B2:19:EF
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XPV5TE6jdkEKhM-jUgttSxyyGe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:2791::-2a0e:b107:2792:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:2796::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:66:98:da:8d:21:64:9c:58:bf:9e:1e:4a:88:f1:cc:24:6a:
         7f:80:44:38:c7:82:a4:36:26:8d:43:e9:bf:2a:df:b3:f9:52:
         f2:ba:e9:82:09:eb:cc:49:9d:2a:45:81:a2:ca:d0:59:88:ae:
         1b:18:18:d7:89:9c:72:9e:ca:5c:d9:01:6f:d3:34:4c:11:ba:
         a0:6a:f5:b9:4d:3e:93:43:94:8b:8a:87:a0:cb:79:76:3f:c0:
         fd:a9:72:b6:19:fa:89:ca:80:cf:d5:36:d7:a9:34:56:25:d1:
         38:d1:77:87:6f:68:9e:6c:e9:02:22:0e:2b:4e:83:e2:a4:9e:
         18:39:c2:52:8b:37:7d:1a:8d:10:a3:84:75:ef:3f:90:9b:59:
         87:ac:7c:bb:d9:4a:bd:23:78:51:4f:d0:bc:3d:86:a4:8b:82:
         83:13:c0:f4:9d:0c:73:17:cb:43:6e:7d:21:ce:d4:45:55:c6:
         de:b9:22:8e:8a:2d:71:22:f9:23:00:8c:44:c6:85:5b:2e:2e:
         87:21:4e:15:f8:2b:53:b8:d5:fa:8f:d1:38:65:6b:f2:51:a4:
         eb:98:c4:7a:c3:e0:12:d6:46:d0:5a:8b:b5:5a:51:d5:c6:8e:
         de:73:c8:df:a1:14:b9:7e:02:56:31:fb:91:47:af:1c:7e:28:
         c1:8f:e7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----