Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a7WvbYASXoBMyHSquB9Heh-RnKQ.roa
File:                     a7WvbYASXoBMyHSquB9Heh-RnKQ.roa (raw, json)
Hash identifier:          C5hm5Q+QQolOEsQapMAuAJXvR2a5ajUplMYgemaBNhg=
Subject key identifier:   6B:B5:AF:6D:80:12:5E:80:4C:C8:74:AA:B8:1F:47:7A:1F:91:9C:A4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187DD3774A63B7DD4C6D804D7933184358D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a7WvbYASXoBMyHSquB9Heh-RnKQ.roa
Signing time:             Tue 02 May 2023 16:06:51 +0000
ROA not before:           Tue 02 May 2023 16:06:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212516
IP address blocks:        2a0e:b107:1ef0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:dd:37:74:a6:3b:7d:d4:c6:d8:04:d7:93:31:84:35:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May  2 16:06:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6bb5af6d80125e804cc874aab81f477a1f919ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:bf:cb:49:97:7f:eb:d7:da:bb:e7:12:fe:
                    9d:41:a4:24:bf:d7:67:de:5e:62:bc:c5:6c:95:21:
                    74:d3:c5:de:b7:14:82:2f:94:e7:b8:dd:03:ce:45:
                    79:af:d5:c7:4f:ec:4a:65:12:79:ca:55:3b:3e:01:
                    7d:c8:5e:af:50:9f:ef:c6:54:1b:90:7d:cf:76:a4:
                    44:62:b5:18:d9:f6:91:82:d1:9f:34:40:07:25:52:
                    b5:f3:53:20:94:a7:13:73:de:8d:44:31:14:e5:41:
                    40:9f:b3:e8:66:1c:65:5e:65:f5:3b:0d:9e:7a:ab:
                    a8:e0:5a:eb:08:bd:53:4a:2d:d6:18:0a:44:64:1d:
                    e2:6d:8e:54:a1:a7:36:85:6e:1f:f1:7e:21:d6:54:
                    44:24:04:3c:43:f9:a2:08:21:7c:77:9d:75:b4:70:
                    e6:1c:08:c7:6f:a4:cc:02:ce:83:c1:f2:5e:05:21:
                    99:6f:e5:90:d0:15:a8:65:c9:da:e5:de:8f:32:88:
                    bc:54:b0:1f:3a:de:3d:34:e4:8b:36:44:9e:24:b5:
                    c4:f4:ea:b8:49:79:62:13:f7:eb:dd:d6:db:95:81:
                    2b:a3:a3:f3:83:c1:85:84:0b:87:75:0a:83:e6:e6:
                    8a:2b:75:41:75:3c:02:44:52:5d:44:bf:d0:ce:85:
                    83:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B5:AF:6D:80:12:5E:80:4C:C8:74:AA:B8:1F:47:7A:1F:91:9C:A4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a7WvbYASXoBMyHSquB9Heh-RnKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1ef0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:e6:09:c9:ed:a1:b7:50:56:d5:a5:4e:65:1b:fd:bd:1e:26:
         35:12:ea:da:ad:93:cd:0b:ac:51:12:b0:dc:e8:fa:22:27:ba:
         39:20:6f:0a:d5:d8:9a:1b:03:92:8b:df:d5:ea:58:bf:c0:92:
         f3:06:08:df:a0:bd:2e:c6:3e:b6:18:53:f8:6f:54:57:cf:47:
         2b:aa:19:e6:2f:61:fd:f6:96:79:51:f8:4d:20:1c:29:14:6d:
         d0:48:82:1d:7e:4f:8e:6a:7f:03:5c:30:b4:6a:8c:e1:bb:dd:
         dd:a0:39:d3:29:8d:bf:51:79:11:14:0b:0a:38:7d:04:74:08:
         ab:c3:11:cd:80:34:5d:6b:92:61:73:8a:86:6c:84:5d:85:b4:
         76:2e:f7:81:e1:9f:40:20:b4:3f:be:52:4d:5d:51:e8:7f:66:
         fd:fc:98:ff:e2:c4:03:5f:96:f8:41:aa:97:b7:db:03:83:8d:
         62:ac:3d:d9:ac:42:e8:e0:5f:88:37:9a:ba:c6:10:5a:4c:2d:
         e4:94:a3:09:9c:54:a8:c5:8c:e8:b3:0c:cb:c4:cc:9c:5c:1b:
         4f:fd:7f:8a:c5:33:22:9c:68:78:b6:6d:25:ab:69:0e:81:0a:
         a4:ba:05:31:96:9b:51:a4:8e:b9:bb:ea:20:f8:70:c4:be:47:
         58:40:17:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----