Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XZpAoZH0p0eI8axSgv-TogAgeeI.roa
File:                     XZpAoZH0p0eI8axSgv-TogAgeeI.roa (raw, json)
Hash identifier:          DYl6Vx/CXIPN7345GB8wl6jA1HtqL/r7ggoSNCTS1dk=
Subject key identifier:   5D:9A:40:A1:91:F4:A7:47:88:F1:AC:52:82:FF:93:A2:00:20:79:E2
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BF161BF9F986B9BE59DFE7AF96374251A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XZpAoZH0p0eI8axSgv-TogAgeeI.roa
Signing time:             Tue 21 Nov 2023 10:16:36 +0000
ROA not before:           Tue 21 Nov 2023 10:16:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215975
IP address blocks:        2a0e:97c0:e20::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:f1:61:bf:9f:98:6b:9b:e5:9d:fe:7a:f9:63:74:25:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 21 10:16:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5d9a40a191f4a74788f1ac5282ff93a2002079e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:40:9f:79:43:36:97:a9:ef:c6:37:fb:67:
                    a9:ed:16:76:6c:23:7c:d0:62:25:77:ac:af:71:9b:
                    2e:62:b9:65:bb:52:05:32:06:1c:31:16:5c:16:bc:
                    f8:0c:86:2e:c2:2d:90:b4:dc:a8:d5:a6:e5:25:18:
                    fd:50:37:2c:92:87:1c:e9:a4:ce:50:89:84:05:f5:
                    ca:90:c3:74:a2:41:d1:c0:c6:12:3e:2a:6b:90:1a:
                    65:71:13:4d:bd:7b:08:24:eb:74:74:fb:56:1b:e2:
                    f6:31:f2:f9:90:ef:a6:2a:57:5c:2b:1c:d9:56:e0:
                    bb:12:30:8d:dc:5a:75:0d:54:73:9f:a7:90:f5:7e:
                    85:47:f9:51:ac:fe:0e:b8:59:91:72:a3:3f:e9:a3:
                    8f:e7:62:0a:44:9f:99:f6:19:5e:13:21:15:1a:5c:
                    a6:6c:a2:53:90:68:18:7b:89:3b:c5:84:64:28:6b:
                    d2:75:30:9e:8e:d4:e3:aa:36:7e:e5:6b:96:9d:c8:
                    79:3b:e9:2a:8d:77:20:78:de:29:1a:3b:9b:c0:f6:
                    5e:e8:25:38:83:91:18:f5:0a:cd:8b:27:52:20:a1:
                    ad:ee:61:73:46:84:27:eb:11:05:69:7f:a2:b0:b6:
                    06:31:12:f1:cc:ef:93:aa:7f:92:be:7e:02:51:b5:
                    03:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9A:40:A1:91:F4:A7:47:88:F1:AC:52:82:FF:93:A2:00:20:79:E2
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XZpAoZH0p0eI8axSgv-TogAgeeI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:c3:1a:a5:c0:c5:21:39:47:2b:ea:35:61:8e:fc:4f:44:92:
         7a:d5:62:50:dc:f9:43:1e:e5:6a:18:b9:5d:e9:22:e5:f7:b3:
         54:52:62:c7:a7:1e:47:77:3f:4b:e8:e6:86:59:ba:b1:b6:f3:
         64:ef:47:12:bf:11:55:fe:ec:36:58:3b:b3:37:c2:a1:0e:07:
         14:4f:be:09:b6:89:e0:32:43:5f:ae:c8:88:36:36:d3:20:ea:
         2a:e1:06:f6:01:59:71:a6:f0:c6:1b:d2:c5:54:a5:80:86:30:
         42:90:8b:da:58:ee:cb:6b:fb:9c:95:08:67:81:6c:6c:1e:81:
         7b:d3:40:4b:6d:62:00:9d:57:ff:cf:ef:f8:b0:05:56:cd:d2:
         4c:f8:29:e3:49:9e:97:42:11:4f:49:b2:76:3d:a4:d5:d5:f7:
         4b:e1:0a:85:48:a0:33:28:6a:b1:65:42:1e:e4:75:96:b4:96:
         db:7e:a5:44:14:25:81:25:88:f2:6a:00:36:5f:8e:7d:7b:af:
         19:c5:a3:ee:b9:c4:0c:58:e9:fe:f6:8b:af:7c:de:77:60:27:
         4d:47:2b:a5:3e:ce:b0:3d:58:71:a8:01:0e:3b:c0:3f:af:6a:
         00:ed:6c:b5:2a:a5:90:b4:71:56:e7:55:2a:92:59:a6:c3:42:
         64:fe:29:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----