Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/evdlqNN8ASkhlZkFXX-p4_ZHSDg.roa
File:                     evdlqNN8ASkhlZkFXX-p4_ZHSDg.roa (raw, json)
Hash identifier:          lHNdshFL5IOJ9rDhqYegxUVeifElnFo9gGgI1uYxERg=
Subject key identifier:   7A:F7:65:A8:D3:7C:01:29:21:95:99:05:5D:7F:A9:E3:F6:47:48:38
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E802C4AC1979C4E9D6D300034F4E86
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/evdlqNN8ASkhlZkFXX-p4_ZHSDg.roa
Signing time:             Mon 02 Jan 2023 05:15:31 +0000
ROA not before:           Mon 02 Jan 2023 05:15:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211459
IP address blocks:        2a0e:97c0:373::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:02:c4:ac:19:79:c4:e9:d6:d3:00:03:4f:4e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7af765a8d37c0129219599055d7fa9e3f6474838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:16:a3:78:be:64:43:19:96:0f:21:e3:c4:d9:
                    53:c2:9d:4f:24:b4:43:30:05:e8:bd:d7:70:a0:42:
                    ba:33:1e:f5:3c:a5:24:42:5e:89:9e:ef:b0:b4:be:
                    c9:a3:57:a1:2a:46:1b:c5:fe:f0:e5:e4:87:88:96:
                    6b:83:5e:b9:6c:25:ae:32:33:df:4b:95:13:8f:84:
                    7a:e3:fd:ea:42:ba:ac:38:a3:a3:e6:10:44:4a:93:
                    b1:e3:3e:84:66:7f:8c:1d:16:9b:87:6c:eb:ee:95:
                    4f:92:94:f7:72:1a:ee:68:ec:b5:c7:6f:3f:8d:db:
                    87:96:bb:14:cc:d2:49:47:fc:31:f2:07:53:2f:04:
                    0d:bf:63:03:90:6e:39:a1:e0:aa:4f:ce:09:2f:39:
                    be:97:03:56:9d:4d:db:ab:78:75:2c:99:b8:64:46:
                    28:e6:e3:73:71:ca:c4:95:ab:3d:dd:19:3e:f1:56:
                    4e:b0:44:7b:9c:07:93:33:0c:e3:2c:ef:b1:7e:38:
                    e6:0b:78:c3:3b:5d:14:26:3f:0e:85:3e:ea:af:90:
                    30:a0:ca:e4:30:fb:07:f2:a2:fd:ce:fe:1f:75:8a:
                    c0:c0:16:56:3a:9d:a1:38:a3:8d:1a:93:c9:d4:79:
                    19:db:a7:d6:14:80:1c:0e:d3:d5:55:63:2e:0c:f7:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F7:65:A8:D3:7C:01:29:21:95:99:05:5D:7F:A9:E3:F6:47:48:38
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/evdlqNN8ASkhlZkFXX-p4_ZHSDg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:373::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:c0:aa:e2:4a:16:ed:34:7f:98:19:13:71:20:80:f0:97:72:
         06:14:44:d6:b0:b4:71:6f:39:4f:7f:d0:0a:6c:d8:8d:31:12:
         69:72:d7:03:c4:78:5b:9a:67:e0:bf:a1:f4:e7:d8:c7:7f:4e:
         3f:c6:01:d0:a2:dd:7b:90:9c:6f:62:74:54:c3:87:ed:73:05:
         ad:47:c7:fa:cf:ed:ff:92:70:2c:26:4f:5e:d4:eb:ca:b3:20:
         0e:78:08:93:16:fa:0a:cb:69:75:3c:eb:db:a5:ff:5d:2d:5d:
         ff:59:24:09:38:d3:7a:50:67:79:4e:fc:76:60:85:9c:83:86:
         33:23:9f:2c:d2:55:7a:41:0d:d2:e6:16:48:3f:c8:aa:6f:91:
         e6:59:f4:13:61:55:47:aa:c2:ba:0b:3d:fe:96:c9:24:83:c8:
         5c:87:9e:69:2d:3f:82:b1:d7:82:3c:8d:92:43:04:a5:56:f9:
         36:ed:b1:11:09:ae:51:99:a1:62:c4:68:83:e0:4c:c6:93:bf:
         2c:2a:8a:46:0f:0d:98:ad:8e:58:2c:4b:02:56:38:28:d5:62:
         4f:28:b1:20:0b:b8:5c:e8:8f:dc:f2:9e:d1:67:f5:d8:4f:d1:
         f2:de:7a:e3:a1:c7:77:69:ad:9a:59:ee:76:97:dc:95:00:c3:
         8c:2a:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----