Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fjCdZLiT7vzXyjdtMPHB4dvmpC0.roa
File:                     fjCdZLiT7vzXyjdtMPHB4dvmpC0.roa (raw, json)
Hash identifier:          ojutqixvyYsFx7elL9hSgXXBKX2MvWSfBJAKGQXeB8A=
Subject key identifier:   7E:30:9D:64:B8:93:EE:FC:D7:CA:37:6D:30:F1:C1:E1:DB:E6:A4:2D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185DE40B706C9396A99FA04299B873395B5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fjCdZLiT7vzXyjdtMPHB4dvmpC0.roa
Signing time:             Mon 23 Jan 2023 10:51:01 +0000
ROA not before:           Mon 23 Jan 2023 10:51:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213372
IP address blocks:        2a10:2f00:128::/48 maxlen: 48
                          2a09:4c2:34::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:40:b7:06:c9:39:6a:99:fa:04:29:9b:87:33:95:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 23 10:51:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7e309d64b893eefcd7ca376d30f1c1e1dbe6a42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:ce:b5:97:24:8d:6e:87:17:99:16:b3:f4:
                    2e:66:59:9b:0a:e3:67:a1:64:f5:7b:a7:4d:ee:d7:
                    8b:3f:9e:ba:16:35:52:91:e2:97:93:0b:a1:ed:10:
                    0e:bb:86:c8:4d:3f:7c:97:1c:26:47:5e:9e:f0:2c:
                    c6:76:37:78:32:32:7c:dd:6d:02:66:94:f9:a6:cf:
                    bc:f9:04:6a:87:d8:9c:c7:e6:b4:80:2c:b8:c1:fe:
                    b0:3a:22:cf:03:57:c1:d5:65:c1:b1:ce:97:b5:e3:
                    cc:e8:75:74:9e:3f:81:9a:37:92:bf:f8:26:9c:61:
                    29:e8:9d:57:06:71:1f:02:2a:65:1e:1c:5d:db:67:
                    30:b0:9a:61:64:36:b2:79:18:75:53:cd:f5:35:c7:
                    89:a8:0c:5a:cf:13:0d:db:8b:14:c7:34:23:0d:58:
                    8d:7a:4d:ce:3d:6a:5c:9e:2b:89:ad:32:be:22:32:
                    c3:e8:c7:db:0f:00:7a:80:e4:02:d1:12:97:d5:a3:
                    6d:d4:58:82:bb:d2:19:6f:0c:2a:97:9e:ce:09:0f:
                    8c:fa:78:dc:f3:af:3f:30:dd:a3:8b:6e:76:58:15:
                    33:b1:2d:f7:3b:ea:0b:33:ad:6e:52:61:cc:14:79:
                    e4:c7:2a:9b:20:96:cf:e1:d5:e1:a9:63:01:ff:b1:
                    b0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:30:9D:64:B8:93:EE:FC:D7:CA:37:6D:30:F1:C1:E1:DB:E6:A4:2D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fjCdZLiT7vzXyjdtMPHB4dvmpC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:4c2:34::/48
                  2a10:2f00:128::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:66:23:36:b3:ef:4e:f2:d0:84:32:4d:80:28:3a:0f:d5:56:
         4a:52:c7:36:0b:ae:2c:1e:6d:6d:4f:d6:6b:3f:95:bf:b5:61:
         25:a7:ea:26:39:84:1a:43:1b:de:43:f1:1a:63:8d:5f:de:61:
         1f:d5:cb:f4:d3:d1:75:24:e9:d3:23:c9:22:e4:08:db:1a:1e:
         71:e5:4e:9f:51:34:9a:3c:88:a0:5c:2f:db:6c:36:c5:08:46:
         5b:a2:f8:ad:3f:44:bf:55:c7:ae:92:a0:c2:0d:06:1f:7d:92:
         a5:ae:d4:97:32:5c:6d:5c:a5:fc:e1:d9:b7:ba:36:b3:8d:0f:
         f0:23:9d:48:db:b6:50:bc:cc:4f:a7:1e:d8:92:bb:4e:b7:7f:
         f8:8d:e9:99:4c:f7:08:f2:26:6c:37:ec:13:47:8e:43:4f:31:
         d2:34:15:b7:27:61:15:4e:9d:32:a0:ad:3a:20:b4:c0:0a:a3:
         51:75:38:67:9e:93:ae:21:bb:02:4f:48:bc:f9:72:74:57:ca:
         5f:51:c2:1d:e9:7b:89:0c:c9:2c:33:62:3b:e3:d1:3e:0a:a7:
         d8:7f:fa:42:a9:9f:7b:1d:e6:44:38:9d:f5:47:38:1f:70:c8:
         b5:b3:d2:04:ce:c0:2e:db:c0:b1:6c:21:b3:56:c4:67:5e:ae:
         be:45:ea:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----