Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_tIatljVgS0SKkwzqJz6EkCZjZo.roa
File:                     _tIatljVgS0SKkwzqJz6EkCZjZo.roa (raw, json)
Hash identifier:          DY9YABK/gWkaYSQWFd7qX0XRvnp85aAxek/64zDxqiQ=
Subject key identifier:   FE:D2:1A:B6:58:D5:81:2D:12:2A:4C:33:A8:9C:FA:12:40:99:8D:9A
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CC9BCDA3C016C110E30577FE1F81889B1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_tIatljVgS0SKkwzqJz6EkCZjZo.roa
Signing time:             Tue 02 Jan 2024 10:34:06 +0000
ROA not before:           Tue 02 Jan 2024 10:34:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     136535
IP address blocks:        2a0e:97c0:83f::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 23:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:da:3c:01:6c:11:0e:30:57:7f:e1:f8:18:89:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 10:34:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fed21ab658d5812d122a4c33a89cfa1240998d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a1:3a:00:c1:7f:12:35:78:c8:49:95:de:31:
                    ec:3f:3b:04:57:97:8a:4e:20:e5:56:82:fc:57:41:
                    fc:86:40:a9:14:0b:19:19:73:6c:90:f0:bb:58:c7:
                    cd:de:1d:9d:75:ee:68:5f:12:c6:8e:9c:08:74:2f:
                    76:45:82:fe:13:71:d9:00:0e:01:94:54:ca:42:02:
                    63:99:d2:02:0b:19:46:bb:17:f6:72:9d:03:18:4f:
                    d4:5a:7e:50:a8:80:22:9b:4b:13:00:d8:90:8c:3e:
                    e7:0f:1f:c7:67:a2:c5:5a:56:13:ba:0e:c3:19:a7:
                    e5:14:a3:6c:c7:61:6d:e7:8b:bb:59:5e:55:25:d3:
                    0e:f5:fd:4e:90:5c:64:ff:ef:22:a9:46:bb:7f:35:
                    4d:e6:d4:18:e8:0d:84:04:3f:eb:41:3d:c8:e0:31:
                    3c:34:a5:3a:02:55:cb:76:01:56:5b:7e:df:18:fb:
                    9a:ad:e8:fc:b9:5f:57:da:86:bc:bc:c0:c9:05:d1:
                    ca:c3:1e:66:f1:ed:9c:ae:85:eb:6b:41:8f:74:59:
                    1f:fd:bf:b8:9f:5d:48:c7:67:63:d7:dd:6d:38:9c:
                    ec:d8:7a:b4:fa:0b:f0:15:f8:9e:63:1f:2d:ac:f3:
                    ae:d8:20:bd:e8:48:49:5a:72:1b:e7:91:81:7a:b0:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D2:1A:B6:58:D5:81:2D:12:2A:4C:33:A8:9C:FA:12:40:99:8D:9A
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_tIatljVgS0SKkwzqJz6EkCZjZo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:83f::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:00:df:30:22:fe:78:8a:11:e4:28:3a:f9:29:ff:40:d2:ef:
         a5:b3:7f:4d:ef:2b:ed:51:7d:cb:8c:90:de:52:24:43:d7:5c:
         c4:d5:d2:00:65:e1:0e:74:04:71:28:de:d3:89:64:f1:ae:b8:
         c8:2c:b7:45:d7:ad:09:49:a7:7e:b7:4e:04:94:1b:70:51:98:
         a6:2d:70:1b:45:27:cc:9b:3f:cb:d8:df:0b:83:57:10:74:6b:
         14:0c:3d:78:31:14:fc:8b:0f:57:76:9c:94:bf:b5:f0:18:1f:
         37:aa:20:5f:23:7d:a4:d4:41:f8:41:bc:5c:ec:03:92:5f:29:
         57:0c:b1:ff:6d:b3:11:49:f3:d3:87:65:4b:95:60:ea:07:60:
         e5:47:f0:5a:a6:5a:f5:c1:5d:f3:49:8a:e0:95:26:5a:12:26:
         b3:cc:42:44:22:90:b8:00:6f:fe:2f:e9:0f:a2:e0:5f:c8:74:
         d8:ca:e0:f5:b5:0f:31:48:59:2a:92:48:77:9d:b0:5f:83:38:
         5a:e7:c8:7c:df:01:8c:64:90:52:d5:93:bf:a5:0c:55:1c:fc:
         7b:e5:a4:91:b3:d3:f6:ff:df:73:c2:b1:5a:27:72:82:60:ad:
         3f:99:c2:5c:d8:0f:3c:1d:d8:2c:f6:c4:18:ea:86:18:d3:29:
         9f:9b:09:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----