Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c3GDOoUavk30uJF7tEbZvAftOAA.roa
File:                     c3GDOoUavk30uJF7tEbZvAftOAA.roa (raw, json)
Hash identifier:          RIZeRSsh1J3VK6TrIpukIhPiBuqf7TSiV4uLSuyVCBU=
Subject key identifier:   73:71:83:3A:85:1A:BE:4D:F4:B8:91:7B:B4:46:D9:BC:07:ED:38:00
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01889C10E931E7E0D1A607460D0FF5F5D1DF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c3GDOoUavk30uJF7tEbZvAftOAA.roa
Signing time:             Thu 08 Jun 2023 17:32:13 +0000
ROA not before:           Thu 08 Jun 2023 17:32:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204729
IP address blocks:        2a0e:b107:1b9d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9c:10:e9:31:e7:e0:d1:a6:07:46:0d:0f:f5:f5:d1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun  8 17:32:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7371833a851abe4df4b8917bb446d9bc07ed3800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e2:08:cf:e6:52:b7:2c:e0:b5:a9:37:b1:89:
                    f2:f6:32:1d:08:70:3f:a3:70:db:b7:71:a5:96:e6:
                    97:58:42:73:29:d8:4e:06:6b:f0:36:bd:0c:c4:65:
                    16:b2:b9:03:62:55:49:cd:3a:2a:84:bb:04:31:27:
                    a1:80:80:80:03:c5:28:a1:0c:72:31:af:b2:03:61:
                    b8:ce:ca:d8:81:1a:b9:34:47:aa:8b:a2:ad:32:79:
                    63:d9:f3:3a:e6:be:c5:e7:64:56:58:67:52:6f:63:
                    db:94:5f:a9:da:44:6c:d6:9b:d5:97:29:4d:f2:ea:
                    c4:4c:93:71:c1:4b:cf:01:70:51:48:1d:de:d8:b1:
                    0a:01:be:31:d7:89:3d:49:b6:1e:3e:a4:47:c8:d9:
                    be:3d:4e:19:9c:c9:53:ac:dd:93:bc:9d:52:43:03:
                    fc:87:e1:96:00:95:7e:5c:ca:8c:0c:de:0d:16:ba:
                    05:3a:dc:72:bd:e8:a6:ee:b8:88:fa:11:81:87:a4:
                    73:29:08:2f:09:84:ac:28:7b:b9:bd:49:eb:a4:a9:
                    ff:c2:ff:d6:d4:9c:62:14:0b:25:01:5f:3d:5c:0a:
                    df:cf:01:de:f6:00:79:52:87:d0:e4:a7:75:f0:42:
                    05:9a:b3:4b:77:91:5a:26:88:3c:32:6d:49:a0:88:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:71:83:3A:85:1A:BE:4D:F4:B8:91:7B:B4:46:D9:BC:07:ED:38:00
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c3GDOoUavk30uJF7tEbZvAftOAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1b9d::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:ab:5a:d2:da:22:0c:24:a9:a5:af:44:17:0e:59:7a:97:d9:
         76:f7:17:b9:c4:eb:69:c6:ce:92:e7:af:0a:66:fc:69:c3:44:
         ff:0a:69:9e:33:e8:4e:d8:d0:3d:58:e0:99:c7:48:21:db:85:
         a8:ee:52:9c:38:4c:0e:61:a5:95:37:f2:ee:fa:94:a0:d3:c2:
         e8:0b:1b:75:b4:70:2a:c8:18:0f:b3:1a:f3:95:7d:66:d7:18:
         86:5b:01:03:92:18:58:08:6a:3a:3e:ae:03:f2:52:a1:34:6f:
         d8:21:7d:6e:cd:10:5d:4a:2b:0e:01:02:4d:6a:fd:62:20:be:
         e4:be:0d:4c:7e:c6:b8:06:94:3e:21:d3:82:f4:15:f5:32:cb:
         aa:3f:12:70:4d:f4:4c:87:ee:e9:0d:14:10:d2:21:ce:32:40:
         17:e9:14:b2:c0:a2:51:c0:03:dd:2a:fc:36:ee:e7:cf:8f:5c:
         e3:7f:65:7e:59:be:3b:aa:76:31:8e:ce:05:c6:5b:32:e3:9f:
         53:56:11:d8:ea:48:2c:ac:78:93:85:f1:77:b6:4c:4f:e5:e2:
         e1:f3:eb:65:7a:ee:a1:dd:80:49:d6:a4:a5:df:e7:9f:24:51:
         42:9b:2e:c3:37:25:70:e1:44:21:68:b5:75:4e:65:a9:e8:d1:
         0d:33:ce:a6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYicEOkx5+DRpgdGDQ/19dHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNjA4MTczMjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzcxODMzYTg1MWFiZTRkZjRiODkxN2JiNDQ2ZDliYzA3ZWQzODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOIIz+ZStyzgtak3sYny9jIdCHA/
o3Dbt3GlluaXWEJzKdhOBmvwNr0MxGUWsrkDYlVJzToqhLsEMSehgICAA8UooQxy
Ma+yA2G4zsrYgRq5NEeqi6KtMnlj2fM65r7F52RWWGdSb2PblF+p2kRs1pvVlylN
8urETJNxwUvPAXBRSB3e2LEKAb4x14k9SbYePqRHyNm+PU4ZnMlTrN2TvJ1SQwP8
h+GWAJV+XMqMDN4NFroFOtxyveim7riI+hGBh6RzKQgvCYSsKHu5vUnrpKn/wv/W
1JxiFAslAV89XArfzwHe9gB5UofQ5Kd18EIFmrNLd5FaJog8Mm1JoIjt6QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHNxgzqFGr5N9LiRe7RG2bwH7TgAMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvYzNHRE9vVWF2azMwdUpGN3RFYlp2QWZ0T0FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxud
MA0GCSqGSIb3DQEBCwUAA4IBAQCGq1rS2iIMJKmlr0QXDll6l9l29xe5xOtpxs6S
568KZvxpw0T/CmmeM+hO2NA9WOCZx0gh24Wo7lKcOEwOYaWVN/Lu+pSg08LoCxt1
tHAqyBgPsxrzlX1m1xiGWwEDkhhYCGo6Pq4D8lKhNG/YIX1uzRBdSisOAQJNav1i
IL7kvg1Mfsa4BpQ+IdOC9BX1MsuqPxJwTfRMh+7pDRQQ0iHOMkAX6RSywKJRwAPd
Kvw27ufPj1zjf2V+Wb47qnYxjs4Fxlsy459TVhHY6kgsrHiThfF3tkxP5eLh8+tl
eu6h3YBJ1qSl3+efJFFCmy7DNyVw4UQhaLV1TmWp6NENM86m
-----END CERTIFICATE-----