Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cK4uJpK_54jnUfukvg008MxbjlU.roa
File:                     cK4uJpK_54jnUfukvg008MxbjlU.roa (raw, json)
Hash identifier:          iLc8yJoOFjdpC0mmHqSwBvfUd1EZjr9nmgJGilElkOg=
Subject key identifier:   70:AE:2E:26:92:BF:E7:88:E7:51:FB:A4:BE:0D:34:F0:CC:5B:8E:55
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185C4D2FC6B6F5386F1E555DDE93DA058EF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cK4uJpK_54jnUfukvg008MxbjlU.roa
Signing time:             Wed 18 Jan 2023 12:20:39 +0000
ROA not before:           Wed 18 Jan 2023 12:20:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202256
IP address blocks:        2a0e:97c6:4000::/34 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c4:d2:fc:6b:6f:53:86:f1:e5:55:dd:e9:3d:a0:58:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 18 12:20:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=70ae2e2692bfe788e751fba4be0d34f0cc5b8e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:db:5c:e1:5e:4c:15:9c:27:d0:a3:f5:5c:d2:
                    92:e6:0a:1c:30:7b:e4:84:55:cd:9f:ae:1d:0c:85:
                    af:ae:c2:b2:a1:1a:68:4e:25:44:86:7b:b5:43:12:
                    a9:d8:a5:7a:a6:cf:2b:d3:c1:15:a9:d7:0b:38:f4:
                    35:cb:d9:e3:32:f9:37:f1:3c:d4:cf:e2:31:70:57:
                    6b:00:6d:74:66:a3:1a:9c:8b:57:7f:ab:42:83:ee:
                    f9:fd:10:99:87:e8:84:f6:c5:8f:7c:84:7f:91:f5:
                    c5:ba:e5:bc:24:da:b4:82:18:a3:4d:61:fc:48:72:
                    21:5a:80:66:40:eb:ef:bd:0c:34:e1:3f:db:7b:cb:
                    2f:86:20:e3:28:77:5f:8c:1b:a1:72:a9:3f:83:21:
                    ef:42:18:61:78:f7:b9:5a:2a:71:50:40:1a:bb:34:
                    41:c5:43:b3:85:ea:30:dc:4a:16:07:1a:bc:aa:40:
                    16:9b:44:4a:66:eb:18:79:46:c3:cc:45:4c:29:77:
                    5b:10:70:b8:7c:43:82:f1:34:a2:29:da:64:38:9b:
                    5e:ae:20:e8:e3:32:9a:2f:3c:87:63:fd:cd:e1:4b:
                    2a:a4:93:15:26:6f:19:d6:df:16:11:fd:59:35:85:
                    51:1d:c9:8b:c7:54:c6:ca:20:d1:4b:82:b0:5d:42:
                    9c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AE:2E:26:92:BF:E7:88:E7:51:FB:A4:BE:0D:34:F0:CC:5B:8E:55
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cK4uJpK_54jnUfukvg008MxbjlU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c6:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5e:f8:12:60:57:96:a7:6e:20:f9:a5:46:dd:2b:18:c4:0c:88:
         04:ad:6f:42:c1:5e:23:f3:1a:1a:f5:93:d7:f5:a6:38:1a:85:
         86:d0:d0:57:6c:b6:af:65:66:e6:2a:35:b0:62:03:23:80:12:
         c5:87:e0:56:35:ca:7b:12:92:02:5f:95:9a:3b:55:6d:fb:01:
         f6:40:c1:56:bb:b3:c0:e3:10:21:b3:f9:e5:33:e5:bb:dc:33:
         8e:20:b3:e1:87:1c:09:8f:a6:74:b2:db:1e:46:7f:cf:39:c7:
         19:0b:05:34:9b:b6:27:8c:46:3e:91:7e:87:f4:64:83:33:4e:
         79:df:35:6e:b8:14:30:74:51:a2:96:09:af:be:65:98:03:e6:
         7b:28:51:8c:f9:a3:35:fe:21:22:41:f7:b4:b8:91:ae:7f:c0:
         e1:a5:06:4d:b3:e5:12:9e:af:b0:9c:ab:04:13:1d:12:2c:c8:
         32:e7:74:b6:fc:3b:6b:74:e1:b5:1f:1f:c2:1c:9d:b1:67:de:
         af:9a:ab:9e:dc:fb:f0:a0:af:94:59:9e:bb:35:14:7c:89:b0:
         0a:55:b1:f8:b3:f6:3a:62:48:42:d1:80:5b:ab:0a:28:6f:7b:
         b0:09:e3:f2:58:78:8c:23:a1:ff:52:94:b2:5d:8d:d6:11:db:
         a0:3f:88:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----