Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fsW2EalzuE6jZQB7R_O-FJWvgLc.roa
File:                     fsW2EalzuE6jZQB7R_O-FJWvgLc.roa (raw, json)
Hash identifier:          554dHUuqUO6fTYJl69lqs4TO5CK4/M7c5eRXjWLYSzs=
Subject key identifier:   7E:C5:B6:11:A9:73:B8:4E:A3:65:00:7B:47:F3:BE:14:95:AF:80:B7
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E778E694749AEAF10723DA633530A1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fsW2EalzuE6jZQB7R_O-FJWvgLc.roa
Signing time:             Mon 02 Jan 2023 05:14:56 +0000
ROA not before:           Mon 02 Jan 2023 05:14:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34800
IP address blocks:        194.50.99.0/24 maxlen: 24
                          2001:7f8:e7::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:78:e6:94:74:9a:ea:f1:07:23:da:63:35:30:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:14:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ec5b611a973b84ea365007b47f3be1495af80b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:5b:3f:0d:f6:2c:20:65:85:34:f6:a1:42:
                    ab:da:32:b1:b0:7d:87:2c:b0:93:cb:63:b4:23:60:
                    32:6b:80:83:c3:f4:67:fc:5b:a9:6d:f7:b4:06:5a:
                    fe:8d:3a:9a:cb:30:ed:bb:68:be:f1:f1:e1:3b:16:
                    d0:80:3e:50:d0:5a:a2:7c:df:4b:01:bd:51:4f:45:
                    24:46:98:42:ab:6a:88:10:7d:2e:57:c4:dd:d3:06:
                    07:04:94:e6:cd:29:5f:59:e2:24:c6:73:9c:bd:cc:
                    85:bc:a8:4d:bc:13:cb:2a:db:e3:13:d8:f6:2b:6b:
                    3e:5e:63:5c:d4:bd:05:86:2e:a0:8f:36:05:46:da:
                    bb:39:18:78:4b:4c:09:9f:3b:6e:b5:dd:12:b5:b7:
                    c2:42:45:e0:d0:27:b5:0a:f6:b1:2f:a5:58:41:03:
                    a7:c6:4e:55:bd:cf:06:f9:57:55:db:59:56:a4:7c:
                    1a:a8:81:13:e4:49:6d:1c:0b:32:b3:2e:e7:ba:ad:
                    64:0a:19:94:6d:e4:a6:d2:b3:c1:8e:12:3e:98:cf:
                    b3:55:a7:25:cd:b0:6b:35:c4:fe:b2:14:08:de:4a:
                    e4:a3:2e:0f:c2:27:55:fb:16:f7:f1:bc:c8:88:b1:
                    43:94:e1:3d:de:b1:b9:45:c9:91:fc:2e:fa:15:5b:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C5:B6:11:A9:73:B8:4E:A3:65:00:7B:47:F3:BE:14:95:AF:80:B7
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fsW2EalzuE6jZQB7R_O-FJWvgLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.99.0/24
                IPv6:
                  2001:7f8:e7::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:de:4c:c5:95:d8:61:cb:1f:9c:85:ce:b0:e9:f0:ac:6b:c5:
         93:71:8c:fa:90:b3:20:76:01:77:94:0f:60:7e:38:4b:17:31:
         56:68:d7:55:af:98:d8:00:42:b8:c1:43:9e:95:0d:06:9a:d6:
         fa:9b:a0:a6:f9:6e:5f:b6:47:d9:89:27:0c:55:ae:c3:5b:7f:
         52:fd:42:bd:65:2f:39:4d:01:7d:74:2e:c0:e0:fd:cd:e6:d2:
         f7:6b:26:cd:ed:c2:c2:1f:6d:61:93:4e:d4:97:15:45:bc:ff:
         5b:b8:8c:c9:70:81:c9:73:b6:36:4c:3b:c8:d6:b0:1f:dd:bb:
         d1:ec:74:3c:73:34:89:37:1f:d5:85:e7:f9:7d:63:4d:f4:df:
         1d:96:47:6e:6d:62:31:9a:c5:21:19:8d:92:69:7f:8f:05:36:
         5a:99:f9:af:b3:92:f6:a9:ab:f9:0d:1b:47:8a:68:43:6c:77:
         ba:36:2b:29:11:22:4f:2f:4d:31:bd:6e:a8:41:70:59:fd:f2:
         dd:b0:b4:53:dd:10:2c:8b:9d:88:b1:bc:e9:bb:8a:49:51:bc:
         cc:27:e7:0d:a5:1c:87:ac:f7:4f:f7:b8:07:fb:cd:84:bf:01:
         ca:12:bf:5d:b2:62:44:91:53:9d:ac:70:e3:a2:25:c8:76:ff:
         07:cd:95:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----