Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c4e0A_YlXbNA3ll5iXPy0HNIWak.roa
File:                     c4e0A_YlXbNA3ll5iXPy0HNIWak.roa (raw, json)
Hash identifier:          iqk7aO3KyquJ2rRgxp7F/ZFbppjmcMoZonvwawDfOTE=
Subject key identifier:   73:87:B4:03:F6:25:5D:B3:40:DE:59:79:89:73:F2:D0:73:48:59:A9
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0186E4961F71FD6AA7A36F18639D56EA45C7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c4e0A_YlXbNA3ll5iXPy0HNIWak.roa
Signing time:             Wed 15 Mar 2023 09:24:48 +0000
ROA not before:           Wed 15 Mar 2023 09:24:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211011
IP address blocks:        2a0e:b107:1ef0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e4:96:1f:71:fd:6a:a7:a3:6f:18:63:9d:56:ea:45:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar 15 09:24:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7387b403f6255db340de59798973f2d0734859a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0b:37:31:60:1a:3a:6d:a9:9b:aa:24:12:de:
                    e9:bf:a0:df:ae:3c:7f:6f:7d:a2:f0:b7:4c:4b:15:
                    ea:ff:e9:38:3f:ba:82:e1:81:cb:61:a9:b8:56:cd:
                    56:93:ca:fb:c6:80:08:b1:67:18:a9:c9:93:c0:dd:
                    c3:c0:a0:fe:9d:d5:d4:e4:b1:c9:ae:c9:07:b2:6f:
                    eb:9b:30:b0:44:c0:a1:a9:aa:72:c5:79:01:0f:1e:
                    4f:77:25:b0:aa:bf:7f:a6:b8:7b:69:3c:a7:78:a6:
                    a3:bd:22:f8:ed:52:22:ed:51:68:4a:df:dc:8e:5a:
                    7a:d6:25:f4:44:b9:36:98:47:55:3f:cd:39:6d:ed:
                    22:cf:8d:19:f3:9c:50:f6:3f:57:da:d4:e3:a4:88:
                    41:85:a5:e5:ee:a2:94:62:fe:0c:a1:a2:9a:66:8d:
                    89:13:80:44:18:4b:b3:c8:40:bc:2c:1e:b9:6f:3d:
                    66:80:b3:83:c2:c7:12:f4:2b:03:37:6a:45:96:f1:
                    b6:95:9e:cf:f0:96:15:15:4f:2e:b6:6c:6d:af:dc:
                    a3:cd:43:61:1e:b7:9f:53:70:02:c8:37:e0:c9:dd:
                    53:a1:d9:11:23:7b:c1:a8:c6:2c:98:11:d8:98:33:
                    c7:09:a0:d7:c8:f9:eb:c5:2b:0b:04:2b:64:94:4e:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:87:B4:03:F6:25:5D:B3:40:DE:59:79:89:73:F2:D0:73:48:59:A9
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c4e0A_YlXbNA3ll5iXPy0HNIWak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1ef0::/44

    Signature Algorithm: sha256WithRSAEncryption
         43:87:ba:3f:10:84:1c:dc:c5:11:7d:64:7d:eb:40:96:85:a1:
         d0:eb:79:03:e8:78:8d:28:87:70:0c:55:a3:30:6a:f8:07:b8:
         e8:48:d4:97:ae:d3:e3:7a:c3:28:d8:a3:15:3e:18:e5:91:0c:
         ad:ab:86:e2:23:fa:5f:f8:72:8a:de:3e:1d:0e:c3:48:3d:5d:
         fe:ba:31:9a:18:39:bc:5a:7e:07:af:25:07:5d:a3:a4:35:a3:
         07:b9:8c:7a:a7:48:ba:9e:9b:3d:10:c2:af:ad:e4:45:96:43:
         27:bd:00:c2:9d:46:f7:e0:3b:d7:bb:f2:b0:be:d5:85:fc:fc:
         e5:07:18:8b:34:67:4d:44:66:ed:b3:72:eb:dc:c4:38:51:2d:
         63:53:f5:4b:9a:32:77:ef:a3:38:86:40:06:7c:09:5b:dd:52:
         17:8e:c3:b8:90:23:d6:36:c0:22:a6:bf:7b:9a:2d:29:87:1d:
         19:70:64:af:62:75:1b:23:c5:96:7e:06:05:48:44:6d:f6:67:
         46:22:69:2b:4a:2e:6b:ee:7b:5f:ac:d5:fe:f9:06:43:6d:db:
         e0:2a:b3:31:3d:13:df:c0:40:1f:1c:90:36:c5:d2:59:1f:60:
         76:3a:08:fc:92:96:e4:0b:a6:c2:69:aa:45:80:cb:9d:ea:07:
         d5:1b:38:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----