Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a0kPSghVcbp_Kd6cWXoBK-vd2to.roa
File:                     a0kPSghVcbp_Kd6cWXoBK-vd2to.roa (raw, json)
Hash identifier:          lE9LGNy7qPa1rWfoaViSPWECVecBcTmEGdDYxrMzglA=
Subject key identifier:   6B:49:0F:4A:08:55:71:BA:7F:29:DE:9C:59:7A:01:2B:EB:DD:DA:DA
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AE07DAB72D60FE020340DDFDF91F7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a0kPSghVcbp_Kd6cWXoBK-vd2to.roa
Signing time:             Tue 24 Jan 2023 16:09:44 +0000
ROA not before:           Tue 24 Jan 2023 16:09:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208680
IP address blocks:        2a0e:b107:790::/48 maxlen: 48
                          2a0e:b107:795::/48 maxlen: 48
                          2a0e:b107:79a::/48 maxlen: 48
                          2a0e:b107:79f::/48 maxlen: 48
                          2a0e:b107:794::/48 maxlen: 48
                          2a0e:b107:799::/48 maxlen: 48
                          2a0e:b107:79e::/48 maxlen: 48
                          2a0e:b107:793::/48 maxlen: 48
                          2a0e:b107:798::/48 maxlen: 48
                          2a0e:b107:79d::/48 maxlen: 48
                          2a0e:b107:792::/48 maxlen: 48
                          2a0e:b107:797::/48 maxlen: 48
                          2a0e:b107:79c::/48 maxlen: 48
                          2a0e:b107:791::/48 maxlen: 48
                          2a0e:b107:796::/48 maxlen: 48
                          2a0e:b107:79b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:e0:7d:ab:72:d6:0f:e0:20:34:0d:df:df:91:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6b490f4a085571ba7f29de9c597a012bebdddada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:0f:0d:b5:96:1f:15:cf:5d:4b:da:9f:20:
                    cd:89:4a:7c:c8:ca:f8:67:57:83:0f:1e:8c:69:7e:
                    cb:90:93:ee:15:27:77:8f:aa:61:f4:b3:db:96:3f:
                    b4:d2:04:f0:b1:2a:c8:f7:0e:12:17:d7:47:6e:7e:
                    00:d4:2f:1c:0d:d3:aa:d7:08:86:96:f8:8b:88:fa:
                    3b:e8:83:70:d2:ca:1e:a5:1f:05:d4:f0:23:f7:3d:
                    a1:c9:43:24:06:a0:61:26:93:bf:71:cb:84:ca:78:
                    0e:27:d0:51:8e:91:f1:4b:70:75:b6:74:40:76:30:
                    8e:85:5f:23:a3:51:63:f2:cf:d8:02:90:b2:f3:de:
                    6e:90:d3:93:a8:85:8e:07:75:da:60:c1:c7:71:1e:
                    3d:4b:0c:fa:53:12:c7:d5:17:7b:be:66:ca:7a:28:
                    53:78:eb:e2:b5:6d:5c:81:60:23:06:7b:16:7e:0b:
                    17:22:3c:b4:2e:a8:7d:52:b0:54:49:15:1e:93:d2:
                    e3:3f:de:f4:96:92:c1:ca:ae:98:4e:77:c2:24:19:
                    a5:91:9d:d3:0e:e9:36:8b:4e:ee:78:b9:48:91:ac:
                    27:c3:ab:15:9c:2f:b5:22:02:cc:c3:7f:f1:09:f3:
                    3f:d0:38:f9:6a:53:62:cb:aa:ec:25:2d:c2:4b:ba:
                    f5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:49:0F:4A:08:55:71:BA:7F:29:DE:9C:59:7A:01:2B:EB:DD:DA:DA
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a0kPSghVcbp_Kd6cWXoBK-vd2to.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:790::/44

    Signature Algorithm: sha256WithRSAEncryption
         0e:19:05:39:c4:6f:83:a5:2f:d3:c5:af:3f:4a:34:ab:58:ad:
         88:8c:65:95:70:70:41:19:e4:a6:23:4c:a8:69:a5:80:d4:94:
         3a:78:b8:f7:bd:0d:78:8c:82:b6:78:87:35:69:1f:8d:a6:c4:
         31:f1:ef:36:60:20:ba:57:37:10:73:f0:7f:2d:0b:c3:63:85:
         f6:b0:85:15:20:29:9c:8a:fe:16:eb:c9:96:e0:5f:4b:a7:4e:
         8a:c5:7c:d5:15:60:0a:5b:50:15:b0:36:2e:f3:e3:90:2b:0a:
         83:b2:e9:d6:84:1c:2b:2c:26:f9:d0:fe:9b:c9:0c:43:a6:4e:
         89:77:04:ae:26:50:a6:5c:e4:b1:f8:18:96:89:9c:c0:34:7d:
         62:be:1f:55:7c:73:23:a6:1c:b9:be:5a:aa:32:57:77:ae:e7:
         05:41:cb:fd:40:36:e4:9b:07:af:9a:3a:d7:17:25:e4:c6:8c:
         74:de:66:84:a0:e4:b1:f5:14:d3:57:37:3c:51:ec:d0:be:f6:
         15:ae:99:bd:be:ba:5e:a8:30:0c:5f:36:c1:ed:f2:94:8b:55:
         14:79:51:5c:1d:2e:61:04:b9:3e:e9:07:3c:99:09:38:c7:4d:
         60:76:a6:01:9c:34:fb:19:31:a4:b8:44:6d:da:10:d4:01:58:
         3c:79:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----