Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_xoXj07oqESGuJNWCPITiehqtL4.roa
File:                     _xoXj07oqESGuJNWCPITiehqtL4.roa (raw, json)
Hash identifier:          D8ItAQjDGeyzduqdfOx1byi0Bao+Qwsg7tc3R9JnLp0=
Subject key identifier:   FF:1A:17:8F:4E:E8:A8:44:86:B8:93:56:08:F2:13:89:E8:6A:B4:BE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185A9094C68EC5F1F7784B0B26DC11F1F55
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_xoXj07oqESGuJNWCPITiehqtL4.roa
Signing time:             Fri 13 Jan 2023 02:50:36 +0000
ROA not before:           Fri 13 Jan 2023 02:50:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a0e:b107:19a0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a9:09:4c:68:ec:5f:1f:77:84:b0:b2:6d:c1:1f:1f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 13 02:50:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff1a178f4ee8a84486b8935608f21389e86ab4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:23:3f:db:82:54:3e:f4:be:1f:5f:19:67:
                    56:5f:fd:0e:3e:0b:8e:f5:39:11:b7:15:ea:1f:49:
                    0f:bc:e4:c6:83:34:b1:3a:7f:53:73:d0:de:2e:d2:
                    91:16:b1:d4:95:a0:87:64:e5:be:1f:e3:86:eb:e0:
                    5a:a0:fe:ae:2a:f6:98:eb:48:5a:43:51:62:44:70:
                    71:df:a2:ce:7c:ae:49:f4:36:8c:70:24:8a:dd:89:
                    fd:f4:63:b6:71:f3:eb:54:b2:8f:f4:b7:09:f6:5f:
                    dc:d7:88:75:aa:f2:a6:49:23:3b:b0:57:b3:d1:d2:
                    77:f6:01:4e:6b:30:c0:d8:17:ce:58:67:fb:72:ff:
                    de:fe:ef:2d:0e:e4:ed:c2:76:4b:59:06:dc:09:da:
                    b8:bd:14:32:48:ad:f3:80:c4:8e:d4:54:48:de:f8:
                    04:bb:a0:2e:5f:db:56:37:14:3b:e4:1d:3b:bf:fa:
                    47:bd:0f:1a:97:9b:27:35:e4:97:5c:9d:b2:6b:04:
                    b6:a3:83:af:63:f0:e9:d4:0e:41:f3:bd:d6:bf:6b:
                    b9:f3:d4:83:7b:0e:c2:c6:7d:2a:79:70:28:5f:db:
                    43:1f:a1:f2:bf:ab:76:da:7b:ce:24:11:1b:06:cc:
                    57:5b:b4:0c:fb:36:3c:12:18:9c:ca:8d:bd:8e:6c:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1A:17:8F:4E:E8:A8:44:86:B8:93:56:08:F2:13:89:E8:6A:B4:BE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_xoXj07oqESGuJNWCPITiehqtL4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:19a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:88:42:3e:c8:16:0a:9e:8e:ad:d5:54:7e:ad:d8:1a:76:f2:
         0d:2b:b1:18:6d:9b:59:c4:94:a2:fc:49:75:d4:e7:e6:22:f9:
         6e:c3:99:30:c9:36:19:eb:c2:ad:10:e9:df:34:2b:91:1c:ba:
         b3:a0:94:94:8c:76:3a:eb:b9:c6:2f:1c:c9:7c:99:ae:b8:f5:
         72:10:aa:5a:67:e1:d9:ed:b2:81:fc:f3:92:4e:45:61:19:20:
         15:a0:ce:8d:71:c6:de:ab:5a:49:3b:3b:79:fb:9c:13:5f:0e:
         69:13:71:1e:08:a9:58:f5:74:69:41:2c:12:3f:e5:1f:8f:77:
         4b:cc:98:a1:63:b4:e5:f1:a9:e3:67:7a:98:a3:e9:cb:71:e7:
         de:61:dc:a1:6a:3e:9b:de:bd:b5:fd:9d:0b:f6:a6:d0:f0:3b:
         c0:32:de:21:1f:54:fc:1c:cf:b6:bd:24:bf:7e:fc:dc:3b:87:
         43:5b:00:2b:7f:8e:ca:df:83:f8:07:0a:4d:c7:5e:7c:9b:77:
         29:0f:50:2a:fb:ac:46:45:49:f1:72:52:8f:7a:09:b5:8b:dd:
         88:4f:9e:36:10:41:24:19:07:e8:00:12:7a:0a:15:e1:30:c0:
         1d:14:62:ee:9e:05:af:13:02:53:01:a6:14:d3:50:30:4c:95:
         a4:17:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----