Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cQW_MoARQsb85Rxp3-8ebEg_mog.roa
File:                     cQW_MoARQsb85Rxp3-8ebEg_mog.roa (raw, json)
Hash identifier:          EXiUuO8DIuRbIDhn4hqJHBLYCIXFAaJWLXWwuN5/2us=
Subject key identifier:   71:05:BF:32:80:11:42:C6:FC:E5:1C:69:DF:EF:1E:6C:48:3F:9A:88
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018AD2CDA7AA4EDFA887349C3AE5CED0A9BC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cQW_MoARQsb85Rxp3-8ebEg_mog.roa
Signing time:             Tue 26 Sep 2023 18:43:27 +0000
ROA not before:           Tue 26 Sep 2023 18:43:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199052
IP address blocks:        2a0e:b107:2070::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d2:cd:a7:aa:4e:df:a8:87:34:9c:3a:e5:ce:d0:a9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 26 18:43:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7105bf32801142c6fce51c69dfef1e6c483f9a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:81:bb:be:b9:97:b8:05:81:e2:8f:e3:9f:
                    69:dc:c2:ad:4d:54:84:ba:53:61:27:86:96:f4:e8:
                    4c:ef:f7:ec:98:ce:6d:5e:0b:a3:66:7b:3b:9f:e1:
                    57:6f:b1:34:bb:cc:32:9d:ea:d9:2b:c4:76:bb:61:
                    28:7e:fd:48:bf:82:b5:e2:27:93:17:2e:74:68:9f:
                    ea:02:76:30:ca:40:77:05:46:69:9e:5d:9e:67:af:
                    f4:cb:a2:7a:20:e0:ed:94:8c:ab:e9:09:5e:8c:40:
                    c1:1b:0c:1b:be:33:c5:63:d5:1f:01:34:f8:d8:0f:
                    d7:31:3c:e2:0f:ef:81:c7:d1:ff:28:e1:00:c8:54:
                    5a:f7:46:b6:09:a8:a1:fc:ca:2e:ba:a1:ec:fb:91:
                    3a:ee:37:74:e7:aa:cf:2e:07:ec:29:a1:d2:62:06:
                    46:9f:27:59:16:11:4e:71:49:27:1d:7f:4e:d7:b2:
                    22:8c:da:be:fe:d7:7e:e4:2f:2f:24:3e:0d:0b:50:
                    22:48:52:6a:8b:4a:b7:f3:d7:a9:35:da:40:e1:37:
                    82:a3:c4:99:fd:aa:ee:0f:bc:3e:9f:ea:57:a6:df:
                    ad:be:0a:a4:8f:82:0e:e8:02:05:f6:49:92:87:bf:
                    2a:6f:a1:43:e6:1c:10:85:21:94:7c:1c:31:d4:75:
                    ee:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:05:BF:32:80:11:42:C6:FC:E5:1C:69:DF:EF:1E:6C:48:3F:9A:88
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cQW_MoARQsb85Rxp3-8ebEg_mog.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:2070::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:a5:ee:7e:69:4d:d8:1c:3e:fb:a8:13:aa:00:6f:08:25:b2:
         27:f9:a3:3a:e5:f6:08:a0:64:d7:99:1f:56:3f:bb:52:bb:74:
         80:a3:73:e4:70:fc:fe:e3:fd:2b:b7:e2:e3:45:d4:66:ef:42:
         c8:3e:6c:c5:19:da:a6:ad:6b:83:5f:c0:da:54:90:84:3d:99:
         8a:46:6f:b7:bb:bc:29:32:f8:b6:70:55:34:0e:e6:3f:c0:3e:
         2e:0e:85:30:59:ef:12:98:85:bd:3a:30:cb:a4:d7:03:67:db:
         3b:87:f2:16:f9:b1:61:47:fd:d3:48:5b:f5:ad:e3:2d:6f:e5:
         f3:c7:89:0a:35:72:d8:74:8d:dd:4f:a4:6c:fb:3b:67:81:7d:
         3d:11:1a:24:d3:b9:52:0e:a4:de:49:ca:af:d7:ef:dc:e6:61:
         10:14:24:ef:a4:cd:13:06:36:3b:b2:20:17:b5:d9:65:52:c9:
         7f:4e:4d:ff:bb:6f:d1:05:77:12:b6:04:f5:2b:65:8d:ee:57:
         a6:b9:39:f0:8d:01:35:09:21:3a:6d:6e:d3:3e:5a:0f:26:bd:
         bf:ed:9a:cd:77:9c:d0:3b:46:df:e6:17:2a:48:9f:5c:74:60:
         f7:9d:f5:f2:00:3e:17:01:7e:35:96:55:85:8a:ea:7d:89:f6:
         bc:99:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----