Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cRq9YbnB8ZdSyC3Re-bSWuLmrt4.roa
File:                     cRq9YbnB8ZdSyC3Re-bSWuLmrt4.roa (raw, json)
Hash identifier:          xkNeB+aMMRJbFu49319KIM61vz/H2y8x6bmENoDyIwY=
Subject key identifier:   71:1A:BD:61:B9:C1:F1:97:52:C8:2D:D1:7B:E6:D2:5A:E2:E6:AE:DE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185DE40B050F4B5908F54479A0F3AF1FF66
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cRq9YbnB8ZdSyC3Re-bSWuLmrt4.roa
Signing time:             Mon 23 Jan 2023 10:50:59 +0000
ROA not before:           Mon 23 Jan 2023 10:50:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211350
IP address blocks:        2a0e:97c0:1c8::/48 maxlen: 48
                          2a0e:97c0:1c0::/45 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:40:b0:50:f4:b5:90:8f:54:47:9a:0f:3a:f1:ff:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 23 10:50:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=711abd61b9c1f19752c82dd17be6d25ae2e6aede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:7d:31:d0:14:10:04:e1:ae:5e:42:bd:d8:
                    16:e3:81:7e:ea:52:92:a4:48:17:00:f0:0e:66:2e:
                    11:35:78:15:38:bd:fd:26:4c:28:77:37:d3:ac:8d:
                    6e:d3:e7:c9:94:2e:24:d6:d3:0d:33:9e:8f:81:89:
                    2f:dc:85:25:80:0b:f4:96:96:d9:71:4c:b4:2c:c4:
                    ba:c2:e5:95:ca:4c:00:45:15:05:45:9e:a1:a8:90:
                    f5:1d:ba:d1:1e:8d:ba:d4:2a:f3:d1:99:6c:03:e3:
                    3d:78:66:0c:6d:14:e6:00:11:13:f3:6b:e9:fd:3c:
                    10:39:3a:b9:4e:59:95:2f:f6:33:8d:7f:80:26:8a:
                    fe:e9:b9:91:66:73:85:01:07:bf:75:57:e5:15:ab:
                    1b:21:e8:80:70:a3:35:a4:20:2e:6c:2b:4c:b7:8e:
                    17:3b:05:02:f4:ef:c0:0b:e0:3b:5f:25:7e:be:bc:
                    9d:16:41:ee:e0:58:0d:d5:8c:99:16:4a:1a:05:90:
                    9a:b8:6b:6d:6d:82:c2:42:3b:50:42:be:3e:65:6f:
                    8f:0c:be:ef:60:df:3c:cf:88:b2:65:8a:0a:1c:dd:
                    3a:ec:53:81:50:0d:c2:c6:e3:8d:5b:51:d0:a3:4a:
                    6f:f1:56:a4:01:38:6d:c7:f0:d8:9e:a2:42:a1:dd:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:BD:61:B9:C1:F1:97:52:C8:2D:D1:7B:E6:D2:5A:E2:E6:AE:DE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cRq9YbnB8ZdSyC3Re-bSWuLmrt4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:1c0::-2a0e:97c0:1c8:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         78:e4:38:ee:da:91:54:c2:bc:79:88:1e:64:9a:53:c0:ad:ef:
         87:8b:9b:66:e7:2a:c9:c4:8c:f3:c8:b0:0d:c6:fe:8f:a1:bd:
         00:5a:64:b8:de:1b:71:c1:4a:71:84:9d:72:73:4d:79:ed:27:
         4f:97:34:17:87:b1:de:27:76:3e:3d:c2:85:7e:e0:c0:ff:ac:
         37:1a:13:6d:82:aa:f9:f6:3c:55:31:47:3e:0c:3b:ad:a7:d0:
         89:b8:d5:84:a9:40:8a:c0:d2:9a:34:3a:94:b8:06:11:9f:3b:
         9b:5b:68:e3:55:a1:35:d1:30:6e:69:57:0d:97:e7:ba:ad:91:
         0c:0e:13:de:52:c9:1a:f7:03:00:7d:e1:7a:22:c1:6f:ad:1b:
         42:27:68:4d:b5:1a:fa:9e:44:8d:f3:30:37:ec:90:2e:5e:a3:
         60:03:f7:f0:a1:d9:50:0e:c7:4b:3b:55:f9:92:ce:bd:ce:71:
         6a:5f:45:05:f3:a3:bc:a0:be:ae:c4:64:6c:2c:55:64:eb:15:
         12:7d:98:27:a4:aa:9c:96:43:d4:84:9f:02:f6:f2:17:c2:e6:
         ec:45:83:11:2e:c5:6a:a7:1a:06:3a:07:fb:6a:07:24:5f:35:
         9c:c0:19:b6:a8:cd:67:72:9e:73:1b:d4:99:67:0a:62:67:22:
         8c:f7:ab:6c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYXeQLBQ9LWQj1RHmg868f9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTIzMTA1MDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTFhYmQ2MWI5YzFmMTk3NTJjODJkZDE3YmU2ZDI1YWUyZTZhZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt99MdAUEAThrl5CvdgW44F+6lKS
pEgXAPAOZi4RNXgVOL39JkwodzfTrI1u0+fJlC4k1tMNM56PgYkv3IUlgAv0lpbZ
cUy0LMS6wuWVykwARRUFRZ6hqJD1HbrRHo261Crz0ZlsA+M9eGYMbRTmABET82vp
/TwQOTq5TlmVL/YzjX+AJor+6bmRZnOFAQe/dVflFasbIeiAcKM1pCAubCtMt44X
OwUC9O/AC+A7XyV+vrydFkHu4FgN1YyZFkoaBZCauGttbYLCQjtQQr4+ZW+PDL7v
YN88z4iyZYoKHN067FOBUA3CxuONW1HQo0pv8VakAThtx/DYnqJCod0k+wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHEavWG5wfGXUsgt0Xvm0lri5q7eMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvY1JxOVlibkI4WmRTeUMzUmUtYlNXdUxtcnQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwYqDpfA
AcADBwAqDpfAAcgwDQYJKoZIhvcNAQELBQADggEBAHjkOO7akVTCvHmIHmSaU8Ct
74eLm2bnKsnEjPPIsA3G/o+hvQBaZLjeG3HBSnGEnXJzTXntJ0+XNBeHsd4ndj49
woV+4MD/rDcaE22Cqvn2PFUxRz4MO62n0Im41YSpQIrA0po0OpS4BhGfO5tbaONV
oTXRMG5pVw2X57qtkQwOE95SyRr3AwB94XoiwW+tG0InaE21GvqeRI3zMDfskC5e
o2AD9/Ch2VAOx0s7VfmSzr3OcWpfRQXzo7ygvq7EZGwsVWTrFRJ9mCekqpyWQ9SE
nwL28hfC5uxFgxEuxWqnGgY6B/tqByRfNZzAGbaozWdynnMb1JlnCmJnIoz3q2w=
-----END CERTIFICATE-----