Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d9-hPSDPZA8qQg3YNHlcPvA76x8.roa
File:                     d9-hPSDPZA8qQg3YNHlcPvA76x8.roa (raw, json)
Hash identifier:          vrBhEHcVZNaJMWVa/MjsxnVO9AtNKanKCjm210wx+n4=
Subject key identifier:   77:DF:A1:3D:20:CF:64:0F:2A:42:0D:D8:34:79:5C:3E:F0:3B:EB:1F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7F5FF8064FC92BF7CA643315E848F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d9-hPSDPZA8qQg3YNHlcPvA76x8.roa
Signing time:             Mon 02 Jan 2023 05:15:27 +0000
ROA not before:           Mon 02 Jan 2023 05:15:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210951
IP address blocks:        2a0e:b107:15d0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:f5:ff:80:64:fc:92:bf:7c:a6:43:31:5e:84:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77dfa13d20cf640f2a420dd834795c3ef03beb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:18:6a:e1:dd:cc:0d:c6:a4:86:3e:35:cd:
                    dc:79:7e:3c:b2:9c:a8:55:65:ff:50:e6:a4:4e:71:
                    e9:0f:a8:77:29:f6:c9:7e:ea:f0:b6:be:24:a4:fa:
                    40:90:90:ac:4b:08:93:f4:2b:6f:16:28:f3:27:92:
                    9a:a0:ef:5f:d3:26:0c:90:12:88:81:99:ac:00:75:
                    3e:0c:bb:e5:d3:87:1a:ff:a8:a7:d4:50:21:1a:c3:
                    ed:d3:02:d6:f5:08:75:ce:4e:79:62:83:03:cd:0f:
                    14:2a:4a:cb:70:e5:70:cd:bd:c4:4d:8a:79:c7:31:
                    af:17:b5:e9:fc:46:71:0a:14:d0:47:cd:7e:0b:6c:
                    4e:61:42:ba:31:ba:b6:75:bb:13:44:0c:bf:bc:7a:
                    61:a9:6c:e6:d6:e8:3e:22:41:28:aa:a9:b2:33:70:
                    f5:21:fd:ec:ac:69:85:6a:86:9f:54:a6:56:5d:13:
                    5f:d1:47:41:56:98:74:97:9c:c0:44:c8:09:0a:c7:
                    68:66:c9:c2:31:c7:c0:38:5c:31:0a:05:91:a9:95:
                    07:34:79:35:12:f4:19:49:24:7d:0b:18:ae:f6:91:
                    d7:5c:ea:25:a0:6c:fc:3a:ea:97:a9:fc:a1:62:30:
                    71:5c:fd:44:b6:a9:6f:c6:b6:4c:2b:a4:55:03:24:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DF:A1:3D:20:CF:64:0F:2A:42:0D:D8:34:79:5C:3E:F0:3B:EB:1F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d9-hPSDPZA8qQg3YNHlcPvA76x8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:15d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:a7:c6:6d:2f:23:8b:61:10:13:d1:eb:9f:b3:8d:03:09:a9:
         b0:71:d5:d0:a5:fb:21:cf:0a:3c:19:7f:c2:37:1b:63:78:73:
         d7:17:d0:89:e8:a2:f1:d8:00:e9:24:b1:13:c1:af:8a:c6:08:
         65:30:ba:02:ee:34:ac:8a:90:41:86:76:f2:d0:96:5e:66:0a:
         47:34:86:56:81:17:87:54:6a:c9:e1:21:cd:bd:4f:c2:bc:ca:
         2b:51:ac:f9:e8:2b:10:d1:d9:d6:e6:ee:7c:80:3a:3c:c0:be:
         81:d8:d1:c8:12:1e:00:9c:27:59:d4:5c:b3:97:a1:96:af:33:
         cf:23:a3:0d:b7:4d:8c:be:bd:67:cd:57:53:59:b2:8b:89:99:
         71:fe:90:37:37:03:03:b6:9b:56:1e:3c:6f:e4:a1:5d:e9:49:
         eb:c2:5c:dc:f5:8f:43:2f:87:94:a9:a3:6b:77:d9:3b:16:bb:
         65:9e:27:9a:a1:e7:f8:8f:0f:a9:2e:fa:91:ae:68:b8:37:fc:
         a2:4a:18:d2:d5:22:30:61:d8:ff:c6:27:2a:09:55:6e:65:6c:
         29:85:c9:b4:56:45:fb:97:7a:5e:f9:32:e4:1f:cd:bb:2a:ab:
         dd:8b:77:cb:cc:04:5c:90:17:21:9b:eb:85:7b:47:9d:29:a6:
         ca:6c:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----