Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h6H0kqg33A3qqVL8l4IDreB0sS8.roa
File:                     h6H0kqg33A3qqVL8l4IDreB0sS8.roa (raw, json)
Hash identifier:          S2E+TQHPxD/WdjjQyCm+NckkkRes7lDwy7EmyK/91CE=
Subject key identifier:   87:A1:F4:92:A8:37:DC:0D:EA:A9:52:FC:97:82:03:AD:E0:74:B1:2F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7AC6A0AD641088562DCBB198DFE26
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h6H0kqg33A3qqVL8l4IDreB0sS8.roa
Signing time:             Mon 02 Jan 2023 05:15:09 +0000
ROA not before:           Mon 02 Jan 2023 05:15:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202929
IP address blocks:        2a0e:97c0:510::/47 maxlen: 48
                          2a0e:97c0:512::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:ac:6a:0a:d6:41:08:85:62:dc:bb:19:8d:fe:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=87a1f492a837dc0deaa952fc978203ade074b12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:ba:22:d3:4c:66:bc:98:14:7d:bc:3d:f4:
                    61:60:a2:15:0c:08:49:00:42:56:68:64:1f:a3:d4:
                    09:7d:a9:7b:26:34:29:ec:80:a1:52:37:e2:e8:e0:
                    1a:fa:0b:a7:c4:db:80:e1:e5:a1:a3:39:cc:e2:da:
                    d1:e6:1a:b9:12:e9:b3:23:51:95:fd:88:76:e7:47:
                    d5:56:97:67:b9:3b:ee:a7:61:e9:79:b8:e3:3e:28:
                    e1:14:68:9a:7d:49:86:22:46:f6:1d:c8:01:92:70:
                    dc:d7:96:6d:09:33:af:0a:52:38:dd:ec:2f:b8:d8:
                    d2:0f:2d:43:e6:31:e6:51:c6:af:da:27:57:8f:15:
                    ad:c1:cc:bb:14:3d:53:c5:0c:2b:77:47:3d:39:8a:
                    70:1d:b4:37:c1:a4:dd:8f:fb:a4:76:71:ca:d9:5a:
                    05:a3:7f:e9:4e:5b:cd:5a:26:a1:86:c0:98:73:e2:
                    07:27:0c:15:05:b8:3d:a5:5b:b9:1f:bb:68:80:f2:
                    8d:1a:66:a8:ad:5b:c2:31:1b:d2:62:95:31:39:77:
                    d4:68:ac:00:b4:01:01:3b:d9:e1:e3:eb:6f:80:4b:
                    82:3d:2c:26:30:a2:2d:9c:97:40:c6:b0:1c:e0:9a:
                    b6:df:a8:5d:a4:4e:d3:23:7b:cd:8e:72:52:59:bb:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A1:F4:92:A8:37:DC:0D:EA:A9:52:FC:97:82:03:AD:E0:74:B1:2F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h6H0kqg33A3qqVL8l4IDreB0sS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:510::-2a0e:97c0:512:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         17:26:63:02:5a:b1:03:21:b8:b8:03:35:48:c1:d3:7c:c4:ec:
         5b:29:a0:63:6b:4b:a0:d3:00:a8:d1:7e:b8:90:a3:c2:2b:5b:
         01:2a:c7:95:57:c2:17:31:5d:86:ab:41:c1:36:3b:e4:f0:d4:
         38:28:cf:6c:22:30:74:5d:df:f0:5e:5a:5c:47:7a:47:21:a6:
         2a:c4:ef:c6:c1:ef:e0:04:7e:b5:63:3d:b9:54:6a:17:f1:82:
         40:35:e5:d1:77:d6:a4:80:f7:91:3e:79:3b:2c:fd:0b:be:68:
         9c:c5:cc:eb:0e:3d:ba:ea:4d:f5:f1:6e:91:ad:c7:7e:ca:32:
         6d:ce:5f:e2:21:6e:a9:43:8d:c1:12:c4:3a:fc:da:3e:bb:79:
         bd:58:5b:92:6d:5a:27:b2:13:63:cb:39:5f:49:7b:e1:f2:05:
         0c:02:2c:47:74:5f:70:fd:cc:cb:49:1b:ae:53:8f:a1:79:78:
         f4:09:87:72:d6:8f:35:d1:56:e2:d5:74:75:9e:87:00:66:00:
         63:eb:89:06:5e:60:50:92:ae:ee:23:ec:58:ef:8e:85:4d:96:
         cf:88:66:fc:23:0d:75:a0:bf:76:e6:6b:4e:fe:96:4c:ff:3e:
         10:98:6d:0e:31:b8:05:4b:c5:4e:85:bc:c4:53:bf:70:ea:f6:
         f9:f3:18:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----