Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ccqWayuk8eRltPyaL8Vt-CK3PQg.roa
File:                     ccqWayuk8eRltPyaL8Vt-CK3PQg.roa (raw, json)
Hash identifier:          OJ+eB80G/HyOJdJlQjqAhS7DtHr44xgR5mS/CIonjSU=
Subject key identifier:   71:CA:96:6B:2B:A4:F1:E4:65:B4:FC:9A:2F:C5:6D:F8:22:B7:3D:08
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E80DD69A99AEE1DF0605FC82B96C36
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ccqWayuk8eRltPyaL8Vt-CK3PQg.roa
Signing time:             Mon 02 Jan 2023 05:15:34 +0000
ROA not before:           Mon 02 Jan 2023 05:15:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211781
IP address blocks:        2a0e:b107:390::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:0d:d6:9a:99:ae:e1:df:06:05:fc:82:b9:6c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=71ca966b2ba4f1e465b4fc9a2fc56df822b73d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:cc:80:6e:98:ab:1c:37:b1:d9:5b:3f:4b:
                    f1:32:8b:87:43:ea:f1:a9:fb:30:22:3f:6c:4a:d5:
                    2e:ef:01:62:c8:49:b1:59:8b:36:3e:ca:d8:1c:42:
                    e8:ca:5b:75:38:6e:3c:03:67:45:33:b4:e8:b4:73:
                    90:c3:23:94:df:25:ac:bc:62:21:48:04:42:3d:34:
                    28:97:8a:81:a0:d7:cd:0e:3e:b4:a6:29:8d:38:59:
                    78:1c:57:6b:0f:e7:a0:d6:10:78:1b:bb:cf:8d:ae:
                    7e:ff:6c:19:6f:a8:1b:19:ed:3d:75:34:41:c9:0c:
                    38:59:c9:e1:52:37:03:30:b0:0d:4e:fc:d3:ea:ec:
                    2b:af:96:a6:25:ab:03:6d:96:bf:ff:af:40:26:73:
                    ef:08:b6:78:16:1f:db:1a:b5:17:86:86:52:f2:e6:
                    c7:1a:21:58:cb:3d:cc:dc:16:bb:aa:1c:29:ad:39:
                    f9:fb:32:8c:73:d4:82:65:72:b0:ca:0d:fb:e5:62:
                    ff:32:99:a3:2c:e2:bd:84:18:7b:82:95:8e:08:df:
                    eb:0d:61:1d:fa:cb:f1:4d:25:ec:e9:c2:55:4f:d5:
                    40:f1:3c:14:c2:e3:55:b5:a0:18:b4:80:ba:44:a8:
                    43:bf:99:cd:8e:c0:91:02:4a:fb:a0:10:95:fe:fe:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CA:96:6B:2B:A4:F1:E4:65:B4:FC:9A:2F:C5:6D:F8:22:B7:3D:08
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ccqWayuk8eRltPyaL8Vt-CK3PQg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:390::/44

    Signature Algorithm: sha256WithRSAEncryption
         a0:d3:ce:3b:f3:dc:6e:58:b5:fb:c3:9b:58:06:9c:6a:62:6a:
         a7:b6:d2:7c:30:7a:74:ab:1f:88:4b:56:b0:b6:60:67:61:ad:
         a5:bc:5e:c5:5a:33:dc:ec:e3:2d:25:29:31:91:ed:5d:18:af:
         85:ea:16:b5:ea:91:20:e1:e2:55:9c:22:89:ef:70:ed:68:76:
         c2:1a:89:a2:24:2e:d9:a2:2f:aa:ed:ce:26:e0:2f:5e:f8:24:
         99:3e:fd:9c:b0:cd:51:ca:05:10:7d:42:03:c3:f2:28:22:8f:
         a6:02:63:52:da:e6:e0:a7:68:73:a4:78:4f:c5:79:7e:92:dd:
         00:44:af:6b:6b:48:d7:97:fe:d1:84:be:a2:be:97:1d:23:31:
         2a:07:41:17:c7:1c:04:8d:4e:af:2c:1d:23:67:4f:c8:b1:ac:
         44:a6:12:77:64:e6:a9:f2:9e:0f:dd:89:b4:f2:94:5b:bf:80:
         b5:bf:3d:30:46:ea:f8:49:71:78:47:c0:a2:ce:94:b2:cc:d0:
         54:60:d1:af:9f:8f:41:0d:ac:5b:07:c9:d5:43:d3:a5:e1:47:
         52:66:1e:2f:43:2c:44:68:f1:8c:5b:36:c1:7d:fd:9f:c8:6b:
         cf:02:d9:03:d0:06:42:b1:4c:42:4f:8a:17:83:4d:6d:11:5e:
         65:24:4d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----