Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YtTzT_BFivbsp3LKpYHGLBobvLw.roa
File:                     YtTzT_BFivbsp3LKpYHGLBobvLw.roa (raw, json)
Hash identifier:          Wcqd5sWnfbnguB6WrOEdNQeXIBc8dRk2mMCJfm0Di88=
Subject key identifier:   62:D4:F3:4F:F0:45:8A:F6:EC:A7:72:CA:A5:81:C6:2C:1A:1B:BC:BC
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48B0D90A81A3FEAE83E58CF5EECBA9A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YtTzT_BFivbsp3LKpYHGLBobvLw.roa
Signing time:             Tue 24 Jan 2023 16:09:56 +0000
ROA not before:           Tue 24 Jan 2023 16:09:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213045
IP address blocks:        2a0e:b107:1030::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8b:0d:90:a8:1a:3f:ea:e8:3e:58:cf:5e:ec:ba:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=62d4f34ff0458af6eca772caa581c62c1a1bbcbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:29:62:60:4b:81:3a:fe:2f:7e:7b:6b:82:
                    28:5f:da:1d:7a:fc:a0:6b:d1:72:5a:d4:a7:ab:c0:
                    46:c6:55:7e:93:34:28:ee:54:6a:44:84:cb:37:91:
                    a7:a4:9c:81:e7:b0:dc:98:6f:a1:ec:55:ea:ba:2a:
                    51:f2:d7:41:df:bb:9d:54:b5:da:bf:ef:3d:b7:b0:
                    3c:46:b7:4e:1b:5d:6f:fa:74:04:1f:31:b1:44:ca:
                    6a:a6:34:84:71:d0:a2:1d:a2:7f:94:8e:1b:c2:97:
                    cf:7b:44:31:84:06:9d:3b:14:f4:bf:17:bd:6d:8c:
                    5c:72:e3:ce:d7:c8:ce:60:29:85:a0:d5:3e:44:a9:
                    50:c7:46:59:84:49:c0:1e:7c:07:4e:ad:d2:86:35:
                    41:11:39:18:07:2c:fb:7a:34:b9:a8:d9:ef:1b:85:
                    4a:4c:c4:58:ac:ce:2a:91:b5:c3:b5:65:28:cb:b0:
                    a2:a3:2d:43:d6:22:32:bc:87:bf:33:7a:60:16:ec:
                    7e:5d:a7:61:5c:b1:d5:af:1d:b7:d5:e6:5a:1a:33:
                    77:68:1c:c6:02:36:90:57:bc:b1:b1:ff:2f:87:72:
                    8a:37:a5:d4:28:b2:2d:25:87:f3:ac:ff:d8:71:03:
                    e9:04:0a:73:b6:d2:09:36:8c:84:f5:8c:f2:09:1b:
                    f7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D4:F3:4F:F0:45:8A:F6:EC:A7:72:CA:A5:81:C6:2C:1A:1B:BC:BC
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YtTzT_BFivbsp3LKpYHGLBobvLw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1030::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:0b:51:15:0a:78:d8:47:44:58:6e:f7:51:86:68:87:13:3a:
         1c:6a:ee:b9:fe:ab:ed:cb:34:77:90:c5:8d:06:ce:aa:d4:c1:
         07:0a:0e:15:33:12:6a:ba:a1:3f:39:c1:74:93:93:19:60:71:
         e8:9e:b5:9d:60:4c:c1:e0:db:42:a6:6e:0a:2d:c8:82:8e:7e:
         c8:67:10:3a:d0:30:34:b0:15:56:e4:64:91:0d:cc:a3:3c:e6:
         e6:4a:91:c1:ca:96:3f:da:49:7f:07:08:79:d5:ff:ef:fa:1f:
         f8:30:d7:5d:a9:9b:a7:be:39:2d:68:42:1c:6f:2b:ab:02:bb:
         01:1c:0d:d6:05:9e:be:f5:a0:03:4e:82:25:f4:c9:b4:2e:96:
         30:26:f8:3c:a3:9e:ce:fd:78:dc:b1:9f:32:22:6f:1e:2e:9d:
         0a:2b:bc:d8:e2:a3:48:c2:f6:6b:83:fa:2b:6f:0a:4d:42:31:
         c1:e3:20:92:40:1a:b1:42:b9:02:e8:a0:94:b3:a4:09:3a:5c:
         10:1c:95:1e:bf:e3:d1:a1:6b:ec:42:58:b0:4b:04:83:04:13:
         d5:ee:e4:4a:26:86:75:d9:30:e6:8d:22:13:7f:b6:72:54:17:
         6c:05:4f:1f:bb:c5:41:c3:fb:92:d0:cd:29:da:f8:27:a7:80:
         5a:24:55:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----