Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cPnJ8cFIi51Hg2yQ8amZZGUneig.roa
File:                     cPnJ8cFIi51Hg2yQ8amZZGUneig.roa (raw, json)
Hash identifier:          Zsfp8ucR7CVqp3orDZsDTKIvq+QZ3Hl7aBPJp/nhehw=
Subject key identifier:   70:F9:C9:F1:C1:48:8B:9D:47:83:6C:90:F1:A9:99:64:65:27:7A:28
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E517B3B3CA40AAF9DA4D01D73A0D2EEB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cPnJ8cFIi51Hg2yQ8amZZGUneig.roa
Signing time:             Tue 24 Jan 2023 18:43:33 +0000
ROA not before:           Tue 24 Jan 2023 18:43:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141237
IP address blocks:        2a0e:b107:df4::/48 maxlen: 48
                          2a0e:b107:df1::/48 maxlen: 48
                          2a0e:b107:df3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e5:17:b3:b3:ca:40:aa:f9:da:4d:01:d7:3a:0d:2e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 18:43:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=70f9c9f1c1488b9d47836c90f1a9996465277a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:9c:18:e1:ea:dd:31:84:d8:a2:b1:65:5f:
                    29:1e:99:2b:77:ba:1c:89:ca:c5:94:ec:c6:c4:08:
                    c4:0e:6f:e0:f4:fe:32:9c:ee:d1:66:fe:03:7f:91:
                    70:1b:ff:40:b4:98:23:b7:e5:06:5d:59:8b:d4:61:
                    0c:dc:5e:91:1b:bb:56:67:b2:e2:0f:8d:9d:05:b7:
                    11:de:64:ba:ca:bd:c2:9b:9c:ae:cc:a3:47:a5:f2:
                    93:b3:9c:84:60:35:0d:8a:9f:03:31:80:93:f3:01:
                    c6:70:8b:ac:8e:42:ac:be:87:6d:34:43:2d:6e:81:
                    12:e1:40:e9:64:2b:2e:b8:64:a5:ee:b1:8a:de:58:
                    8a:8a:b6:1f:7b:c3:07:0f:cd:ef:f3:91:7a:f5:13:
                    81:23:a3:4a:1b:0d:80:8a:0b:36:7f:e4:76:98:14:
                    81:7d:f7:ba:3c:2a:da:05:cf:50:33:81:ca:41:b3:
                    67:78:29:6c:ef:d2:bd:c7:55:8b:2a:91:99:ed:f9:
                    f1:5b:96:5a:55:bd:37:41:cd:b9:fb:b8:cd:63:90:
                    ad:53:69:53:bc:fc:08:3e:40:6f:2f:2b:96:4e:4c:
                    7d:36:77:ca:b0:90:1e:ab:91:fd:40:7a:d7:15:bf:
                    3a:74:f1:d4:cf:60:a7:5a:81:7d:d4:70:69:1d:0d:
                    bb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F9:C9:F1:C1:48:8B:9D:47:83:6C:90:F1:A9:99:64:65:27:7A:28
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cPnJ8cFIi51Hg2yQ8amZZGUneig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:df1::/48
                  2a0e:b107:df3::-2a0e:b107:df4:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         63:3c:6a:96:90:8c:19:a5:89:ec:7b:f4:7d:49:dd:a7:0e:37:
         e1:07:0a:78:55:93:30:32:49:86:6c:9e:81:a9:e4:24:68:31:
         0b:41:73:de:82:00:36:c2:56:e3:f6:8c:83:a5:54:0b:66:15:
         d8:fb:ce:c3:14:3d:a2:4c:7b:86:b7:f8:1c:47:bd:16:00:03:
         11:98:e3:ab:a9:ab:b6:c2:7e:03:8b:35:85:e2:11:ee:4c:2b:
         b6:5b:86:c5:e0:ed:56:4c:ee:b6:e4:87:35:72:dc:f4:51:55:
         f0:8a:1c:76:16:18:8f:95:48:2a:6b:4d:88:5d:51:5d:96:e8:
         5d:52:01:c6:db:fd:0c:c9:a2:2b:34:e7:dd:67:80:4f:0e:dd:
         de:bf:05:87:c0:99:22:0d:51:5a:29:53:7e:0b:fb:c8:91:00:
         a0:d2:ae:ec:fc:a9:81:c7:78:14:cb:5d:af:34:e7:56:cf:5a:
         7d:66:df:d6:4a:8c:0a:e9:cd:df:b0:0e:ec:c1:4f:b1:7d:7b:
         16:3e:f6:b1:8f:dc:56:0c:bb:14:4f:f4:26:17:68:65:ff:31:
         81:0d:dc:54:d9:85:89:57:97:a4:29:2d:e9:86:07:2c:50:c7:
         a6:bd:e8:56:64:e1:b0:a2:84:b2:79:4c:bb:72:e3:b5:42:a5:
         5c:34:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----