Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fCr8v1SpXw4H0DDNdvNM59PEcvE.roa
File:                     fCr8v1SpXw4H0DDNdvNM59PEcvE.roa (raw, json)
Hash identifier:          IFADaGGA6gEvK+lBRlLdN7VrBZcMSSAWPlm81+mSEdE=
Subject key identifier:   7C:2A:FC:BF:54:A9:5F:0E:07:D0:30:CD:76:F3:4C:E7:D3:C4:72:F1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7965DB68225B369E75266D3BCE4EC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fCr8v1SpXw4H0DDNdvNM59PEcvE.roa
Signing time:             Mon 02 Jan 2023 05:15:03 +0000
ROA not before:           Mon 02 Jan 2023 05:15:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142164
IP address blocks:        2a0e:b107:1470::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:96:5d:b6:82:25:b3:69:e7:52:66:d3:bc:e4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7c2afcbf54a95f0e07d030cd76f34ce7d3c472f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:57:ad:10:02:2f:39:b4:d6:a4:00:d5:c9:
                    4c:aa:4c:28:20:7d:d3:ba:d6:9b:1d:3d:6f:f6:64:
                    b8:d1:58:cb:27:d2:3e:15:ae:db:b4:7a:92:8b:fd:
                    39:4c:4a:05:79:7f:6b:d6:62:22:7e:1c:d8:74:38:
                    9a:49:00:d5:0c:63:05:67:6f:01:d8:93:6f:74:5d:
                    39:65:7f:19:e2:bd:5c:89:6a:a6:5d:90:6c:17:d1:
                    74:41:4d:10:3a:08:eb:fa:bd:f2:a7:dc:c7:ec:77:
                    09:27:0e:62:b3:26:7e:a5:03:7c:12:db:15:18:54:
                    48:1d:9c:fb:96:eb:41:25:07:97:9e:e7:6d:40:96:
                    9f:ed:94:6b:96:e7:86:6c:ec:85:cc:2e:1a:c9:a8:
                    1d:51:bb:20:13:3f:9d:0f:e3:01:e1:0e:5b:2c:7e:
                    96:41:2d:00:6c:7f:5d:10:49:e0:47:ea:17:78:48:
                    cf:b6:f4:df:7c:78:6c:83:86:3c:21:59:f2:81:a6:
                    df:1c:fc:94:86:56:03:3f:aa:43:a2:ff:3e:05:93:
                    cf:70:01:b1:af:4b:a8:38:a7:39:82:67:71:01:01:
                    d1:9f:78:cb:4f:eb:6c:31:6b:4d:9f:76:8c:2a:2e:
                    64:d1:3c:93:92:83:40:87:1e:28:fd:53:7a:a5:9b:
                    e6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2A:FC:BF:54:A9:5F:0E:07:D0:30:CD:76:F3:4C:E7:D3:C4:72:F1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fCr8v1SpXw4H0DDNdvNM59PEcvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1470::/44

    Signature Algorithm: sha256WithRSAEncryption
         90:28:ea:c2:b9:91:06:31:58:85:ae:96:d8:1c:ae:b7:1b:d9:
         57:2a:84:58:36:14:29:1a:5b:86:d1:4b:3b:de:7a:94:41:6c:
         e6:e3:03:df:22:c9:36:46:b9:4f:41:16:fe:82:52:75:f9:5e:
         0c:7c:9b:14:6b:90:c7:33:76:80:fb:52:84:23:e1:71:a7:27:
         eb:33:aa:7e:a1:97:cc:30:26:c5:5c:ee:86:87:38:80:a8:53:
         27:c2:79:70:c2:14:b7:f8:ac:cd:ee:3c:b1:2e:68:45:59:71:
         fc:8b:c3:7e:84:04:de:6c:27:e1:af:8a:24:83:81:86:1f:81:
         de:5a:fd:6d:57:b2:f5:c2:76:67:84:93:82:be:3d:37:5e:89:
         f3:49:3e:cf:fb:4e:88:cc:93:4d:31:93:cf:4d:a9:45:a5:22:
         0a:d2:27:07:e4:65:7f:7b:08:0e:ac:58:b2:e8:34:ba:6c:4e:
         2c:81:a4:41:87:02:63:d8:d7:18:0d:0d:6d:d6:5f:ab:55:c9:
         45:93:97:ac:eb:6e:c1:e9:0e:c4:5e:91:78:a3:ce:62:cf:93:
         8d:59:1d:6d:3e:50:cb:b5:0e:a9:e2:7a:26:9b:88:ec:12:15:
         10:41:fc:97:b5:d5:99:51:32:80:d7:4c:25:a6:95:8b:96:f0:
         9d:9d:b3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----