Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_5xkTa5P9zSxBe2qXFwnLsf9Uf0.roa
File:                     _5xkTa5P9zSxBe2qXFwnLsf9Uf0.roa (raw, json)
Hash identifier:          9IJXMMwNu4Xc00vkc4me9N3Mj7Y/CBxLbYXFyCEuBt8=
Subject key identifier:   FF:9C:64:4D:AE:4F:F7:34:B1:05:ED:AA:5C:5C:27:2E:C7:FD:51:FD
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018671D9B3AAE4311F53D56EF6CFD0048028
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_5xkTa5P9zSxBe2qXFwnLsf9Uf0.roa
Signing time:             Tue 21 Feb 2023 02:42:18 +0000
ROA not before:           Tue 21 Feb 2023 02:42:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210738
IP address blocks:        2a0e:b107:1e7c::/46 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:71:d9:b3:aa:e4:31:1f:53:d5:6e:f6:cf:d0:04:80:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 21 02:42:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff9c644dae4ff734b105edaa5c5c272ec7fd51fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f9:4f:e3:c5:da:29:01:76:bd:67:0f:d8:cc:
                    ad:56:df:bd:33:b2:b6:30:ad:71:8c:a3:71:23:a9:
                    36:b1:ef:81:01:fc:5b:0c:8f:46:d5:64:f5:84:59:
                    2d:48:72:c8:49:49:4a:9d:a6:89:9c:30:53:92:1c:
                    d2:9f:81:eb:3d:4c:e4:7e:6f:86:b7:a9:cf:f6:67:
                    9b:b2:1a:da:92:a2:87:8a:f0:f3:a8:47:70:fb:84:
                    49:b0:d4:dd:15:e1:4a:bb:2f:b7:d6:19:c1:25:21:
                    28:3a:87:e7:78:90:15:22:4a:5b:29:e8:34:09:cf:
                    90:35:82:3c:d1:a7:73:47:dc:5d:41:61:93:d8:59:
                    d6:b6:f1:97:ab:c5:96:c3:6b:e8:1c:93:ad:b9:97:
                    14:9a:56:82:11:7b:04:50:12:24:e0:e2:e4:cb:01:
                    d7:ff:b3:cf:ef:20:c3:87:76:ca:28:8a:d6:2e:03:
                    66:0a:78:c0:61:91:88:f7:00:c5:19:28:3e:44:5e:
                    9b:bc:52:ae:4b:b3:0f:37:a2:0c:08:f4:a5:88:7d:
                    08:c6:f5:34:3f:f3:30:80:5f:4e:10:67:4a:f5:f3:
                    06:20:ab:9f:c3:a1:fc:5d:e1:b1:77:51:cb:b2:fe:
                    17:fc:50:b3:8e:13:2d:9f:b3:a9:88:17:26:46:44:
                    68:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9C:64:4D:AE:4F:F7:34:B1:05:ED:AA:5C:5C:27:2E:C7:FD:51:FD
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_5xkTa5P9zSxBe2qXFwnLsf9Uf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1e7c::/46

    Signature Algorithm: sha256WithRSAEncryption
         2d:39:db:5a:ba:b1:5a:0a:59:1d:eb:35:09:a5:34:44:df:54:
         5b:bd:18:25:30:e6:2e:16:7d:36:42:3b:cb:9d:b1:b0:07:85:
         85:17:44:49:6f:c6:ba:22:3d:2f:c8:ce:6e:26:3b:cd:c2:9f:
         6e:38:e0:5c:ae:51:23:b8:e0:5d:76:2e:21:c4:fc:f1:30:0a:
         8f:bc:bc:31:9e:75:55:72:dc:6e:ee:82:76:e5:f0:5e:6a:79:
         f3:6e:88:31:d9:fa:88:2a:99:4c:42:70:f3:2d:dd:31:3e:fe:
         74:b6:03:6f:6f:2d:a7:a0:5b:4f:07:c4:04:7c:03:e3:1d:21:
         98:6c:d2:88:ea:7d:73:6a:9d:1f:7a:b5:f9:d3:7d:c2:fc:2f:
         84:18:86:d4:49:49:3f:5e:e9:13:e4:2c:68:56:88:03:83:53:
         39:52:de:97:68:ca:95:35:42:02:f1:be:7d:60:54:8e:48:53:
         d6:6b:e0:d0:03:e7:3b:bc:67:27:bf:53:3b:ed:a7:02:4f:d7:
         1d:cb:b1:ef:58:fe:80:62:b9:cf:ac:ff:c9:81:e4:50:94:60:
         8b:db:e7:23:d0:cb:7c:6b:b5:7f:22:de:f9:cc:59:4f:ba:16:
         44:68:ff:e0:14:1c:e0:23:2e:b1:60:01:5b:e0:5b:ec:d5:f8:
         ca:79:c0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----