Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bCDtQ_ahZu6f5YT5Q4cJTT2o7iE.roa
File:                     bCDtQ_ahZu6f5YT5Q4cJTT2o7iE.roa (raw, json)
Hash identifier:          HS+2EWg7Be38wTvmDe1ZfGg9BTeH8X94Bieja7z+skA=
Subject key identifier:   6C:20:ED:43:F6:A1:66:EE:9F:E5:84:F9:43:87:09:4D:3D:A8:EE:21
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018B90AD942F98C70FC305D77FB723ED7103
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bCDtQ_ahZu6f5YT5Q4cJTT2o7iE.roa
Signing time:             Thu 02 Nov 2023 15:36:16 +0000
ROA not before:           Thu 02 Nov 2023 15:36:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216084
IP address blocks:        2a0e:97c0::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:90:ad:94:2f:98:c7:0f:c3:05:d7:7f:b7:23:ed:71:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov  2 15:36:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c20ed43f6a166ee9fe584f94387094d3da8ee21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:c5:68:c9:27:8f:c5:d7:5d:64:62:a7:56:
                    04:af:c5:5b:fd:98:0c:e3:c8:1a:fb:ce:9c:af:28:
                    67:be:12:03:92:b4:08:eb:27:94:01:e1:3c:fe:4a:
                    c8:1c:21:8e:eb:09:f7:7c:bf:b7:c0:04:e2:47:bf:
                    9f:92:23:9b:91:0d:c3:be:9e:f8:99:82:fa:f5:8b:
                    94:7d:11:c5:ba:16:79:8f:6c:6e:cf:76:5a:6b:dd:
                    07:95:ca:ef:05:a4:18:af:02:bc:81:ac:91:e3:c5:
                    9b:7b:13:5e:bd:5d:8e:a3:ef:46:f6:0f:1d:7f:da:
                    18:d9:1e:45:2e:11:d9:f9:44:47:f9:b1:a2:8f:0a:
                    57:7b:fb:31:8e:57:f7:8a:f7:d8:af:4a:c4:7b:d0:
                    17:18:62:af:a6:b1:37:85:57:76:c2:5c:84:41:d2:
                    00:7d:1c:2f:a2:93:5d:62:a3:d5:95:22:83:87:90:
                    da:d6:1a:60:1d:86:6f:f5:27:8b:49:cf:e6:e9:6b:
                    8c:7d:0f:85:00:1e:e4:7b:55:86:8e:ef:c0:0d:db:
                    d0:eb:2a:ca:81:07:b5:ac:87:54:c3:26:04:d2:19:
                    d3:8d:42:0a:97:f5:0f:7b:f2:e9:d7:22:e3:e0:ab:
                    b7:56:b9:f1:f4:a0:ae:6f:12:45:3a:45:e0:e1:4e:
                    7d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:20:ED:43:F6:A1:66:EE:9F:E5:84:F9:43:87:09:4D:3D:A8:EE:21
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bCDtQ_ahZu6f5YT5Q4cJTT2o7iE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:4d:08:e5:d3:61:34:5b:90:d4:14:c3:10:85:0d:da:71:e1:
         49:70:a0:5e:e2:c3:61:e3:fa:8b:47:6d:31:e4:d0:aa:e0:ea:
         c2:de:df:2e:37:c1:11:8a:52:4d:71:92:e3:10:33:a0:4c:da:
         18:a3:fb:b3:d2:f9:ee:ed:ee:0f:d8:2b:75:3b:b1:52:b4:35:
         e1:d5:91:af:61:76:04:e4:d5:9d:40:c1:f2:91:6b:e2:70:2f:
         76:53:11:61:f5:35:d3:47:35:af:fe:3d:32:8e:af:94:48:d9:
         6d:2a:47:87:da:33:64:4b:ee:9a:34:60:9d:36:e9:8f:dd:50:
         ea:c1:95:b5:ea:cf:2f:9e:3b:39:3c:13:31:5e:56:0e:65:f1:
         fc:c9:53:ea:c1:37:f7:78:e4:43:38:f1:21:7f:d1:d5:e6:27:
         41:5a:81:a8:f0:77:75:48:05:ce:d4:52:5d:9d:5e:49:7e:7d:
         42:79:da:4a:fc:d1:6f:d6:b3:2b:d4:56:ed:ce:7f:81:2e:0f:
         78:37:d6:64:db:25:59:ec:5e:9b:c8:9b:ce:1d:67:f3:d4:eb:
         ee:40:07:92:ce:d4:93:a2:9e:e7:8f:6a:e2:51:f4:af:39:83:
         30:3b:47:e2:27:e9:11:f8:4c:02:54:45:30:8e:7f:41:39:92:
         7d:86:59:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----