Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_JzzWhfI-k6BHjy-n49-iYSwpuY.roa
File:                     _JzzWhfI-k6BHjy-n49-iYSwpuY.roa (raw, json)
Hash identifier:          Ko9UL2p1ml3SMGRPG/Za4L4YBYFp/nbddvf8HnHWkgo=
Subject key identifier:   FC:9C:F3:5A:17:C8:FA:4E:81:1E:3C:BE:9F:8F:7E:89:84:B0:A6:E6
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E77FA01E55B474D97408D1F46EA4B4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_JzzWhfI-k6BHjy-n49-iYSwpuY.roa
Signing time:             Mon 02 Jan 2023 05:14:57 +0000
ROA not before:           Mon 02 Jan 2023 05:14:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47316
IP address blocks:        2a0e:97c0:78d::/48 maxlen: 48
                          2a0e:97c0:780::/44 maxlen: 48
                          2a0e:97c0:788::/48 maxlen: 48
                          2a0e:97c0:783::/48 maxlen: 48
                          2a0e:97c0:78e::/48 maxlen: 48
                          2a0e:97c0:781::/48 maxlen: 48
                          2a0e:97c0:78c::/48 maxlen: 48
                          2a0e:97c0:787::/48 maxlen: 48
                          2a0e:97c0:782::/48 maxlen: 48
                          2a0e:97c0:785::/48 maxlen: 48
                          2a0e:97c0:780::/48 maxlen: 48
                          2a0e:97c0:78b::/48 maxlen: 48
                          2a0e:97c0:786::/48 maxlen: 48
                          2a0e:97c0:789::/48 maxlen: 48
                          2a0e:97c0:784::/48 maxlen: 48
                          2a0e:97c0:78f::/48 maxlen: 48
                          2a0e:97c0:78a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:7f:a0:1e:55:b4:74:d9:74:08:d1:f4:6e:a4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:14:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc9cf35a17c8fa4e811e3cbe9f8f7e8984b0a6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:74:62:2e:9d:ac:1e:6b:d8:7e:01:43:49:
                    ca:29:92:21:96:6b:f5:b3:83:e3:a3:39:10:8e:a5:
                    fc:61:04:50:c4:dd:6f:1e:9b:07:07:51:08:e8:47:
                    e3:e0:93:26:e2:81:6c:65:56:7a:7a:e3:63:25:00:
                    6f:c1:bd:09:30:0e:3e:e9:5b:32:57:c8:0b:8f:09:
                    d4:5b:f9:5f:82:22:c0:27:8d:2f:b5:4b:bb:46:58:
                    72:b3:54:40:7b:d2:d4:37:fb:d7:2e:33:b2:24:ab:
                    17:8e:1e:1a:99:82:b4:24:90:c6:08:8c:5b:92:10:
                    cf:ea:ee:48:41:84:70:4a:ac:11:99:4c:ce:eb:c0:
                    d9:f2:a0:5c:db:d5:b3:95:26:39:e2:ba:8b:fd:d0:
                    99:b3:60:b0:49:29:1f:ee:74:7a:d3:2b:38:bb:5d:
                    17:99:3f:47:7f:26:0f:78:88:5c:3f:1b:f5:04:f3:
                    47:86:82:b4:63:67:4d:e0:67:56:5b:34:5f:c1:b9:
                    17:0b:9a:c2:f3:98:18:f7:28:bf:9e:b1:d1:70:61:
                    8a:10:7c:ca:6b:ef:19:48:b8:da:1c:f4:64:ad:73:
                    7d:b4:be:ff:91:5f:77:c9:a9:ef:9f:34:82:81:4d:
                    14:46:c0:85:fc:72:17:85:1b:a4:01:7a:54:bc:26:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9C:F3:5A:17:C8:FA:4E:81:1E:3C:BE:9F:8F:7E:89:84:B0:A6:E6
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_JzzWhfI-k6BHjy-n49-iYSwpuY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:780::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:8b:76:48:97:8c:4a:91:c2:86:95:fe:35:93:58:3b:10:80:
         f6:c7:24:4a:46:99:32:cb:03:23:c7:fb:23:d7:f2:fa:90:cd:
         fb:33:34:b2:33:a1:84:af:5d:88:3e:99:02:35:bf:2d:99:7c:
         28:1f:07:27:b1:47:d2:d6:2b:b7:b3:ba:ee:fd:4b:61:72:b9:
         bb:5e:88:d1:da:5d:20:b4:c8:6b:03:bb:ad:a0:50:76:20:8a:
         e0:f2:c0:f0:38:b7:0c:42:6d:1f:58:0d:b6:e1:9b:63:65:93:
         fd:d6:82:16:39:bd:10:ee:73:db:a0:70:8d:90:ab:34:c0:82:
         f7:bc:df:7b:2c:a7:30:c1:ef:a3:e4:35:33:9f:81:10:1b:18:
         51:68:ef:41:36:c4:3a:34:df:51:5c:7e:07:d5:a3:09:43:f0:
         c2:c0:cf:ee:6a:e4:2c:7c:36:2c:87:45:ab:33:96:e5:f6:83:
         d7:b6:8e:4b:e1:97:aa:07:0b:db:fd:b7:83:25:9c:87:53:b2:
         33:ff:d8:a7:5d:15:a2:ec:f1:5d:65:61:22:56:09:2e:6d:f5:
         90:1b:38:40:64:b8:4f:b4:16:0e:fe:28:98:95:d0:fb:9a:55:
         c1:62:95:55:22:da:34:a4:4d:ba:b9:27:19:26:0a:dd:ed:fb:
         4e:b4:6d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----