Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i85Q2fLPKtXjX4Z5vz0MErDBhU4.roa
File:                     i85Q2fLPKtXjX4Z5vz0MErDBhU4.roa (raw, json)
Hash identifier:          u+UMxJOzAwY9u5WDQi5ezI8aujE/ESUY0eTfYnRfMyg=
Subject key identifier:   8B:CE:50:D9:F2:CF:2A:D5:E3:5F:86:79:BF:3D:0C:12:B0:C1:85:4E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0188BEF84F1DA1E44E2F84936C01CD98BBA9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i85Q2fLPKtXjX4Z5vz0MErDBhU4.roa
Signing time:             Thu 15 Jun 2023 12:12:04 +0000
ROA not before:           Thu 15 Jun 2023 12:12:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204750
IP address blocks:        2a0e:97c0:3d0::/44 maxlen: 48
                          2a0e:97c0:3e8::/48 maxlen: 48
                          2a0e:97c0:3d3::/48 maxlen: 48
                          2a0e:97c0:3d1::/48 maxlen: 48
                          2a0e:97c0:3d7::/48 maxlen: 48
                          2a0e:97c0:3d2::/48 maxlen: 48
                          2a0e:97c0:3d5::/48 maxlen: 48
                          2a0e:97c0:3d0::/48 maxlen: 48
                          2a0e:97c0:3d6::/48 maxlen: 48
                          2a0e:97c0:3d9::/48 maxlen: 48
                          2a0e:97c0:3e9::/48 maxlen: 48
                          2a0e:97c0:3d4::/48 maxlen: 48
                          2a0e:97c0:3df::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:be:f8:4f:1d:a1:e4:4e:2f:84:93:6c:01:cd:98:bb:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun 15 12:12:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8bce50d9f2cf2ad5e35f8679bf3d0c12b0c1854e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:18:03:36:50:f6:ab:f1:6c:dd:1e:f8:0e:8b:
                    c6:96:81:e6:aa:f5:c0:4f:53:56:ba:ea:73:89:5c:
                    2c:be:e6:67:c7:70:5d:b1:93:8d:56:0a:d3:1e:43:
                    ee:49:8c:0d:6c:d0:8d:49:52:86:1b:90:9e:29:1f:
                    72:8e:4f:61:8c:87:2c:5f:3e:d7:23:29:c2:6d:bb:
                    c9:d4:6d:12:86:53:4c:3f:d6:c5:99:c9:2b:0c:14:
                    1b:a4:df:0f:0d:db:bb:ce:6d:b4:9c:ef:64:01:f1:
                    84:23:26:8f:1d:68:8e:9c:34:ea:fe:5d:b2:28:fc:
                    eb:e8:ce:0e:cd:ba:4f:cb:58:0d:84:d1:a8:b9:c3:
                    6b:f4:83:1d:14:98:c8:6e:93:fc:09:42:28:7c:ab:
                    9e:d3:39:e3:ff:99:70:4d:76:d3:79:ec:4a:e5:98:
                    7a:fe:e0:49:3b:87:0a:22:ce:6c:4d:77:75:c2:3b:
                    6b:11:31:61:cd:60:06:21:9b:2d:1d:90:55:fd:75:
                    e8:1e:e7:7f:33:e1:b2:87:20:91:6c:f4:85:26:96:
                    87:35:72:d6:59:de:24:08:5e:30:d2:bf:2e:25:7c:
                    ec:c9:ad:ba:0a:f7:bd:0e:25:04:e5:3b:23:6a:2c:
                    c6:a9:ce:95:1d:ee:b3:10:25:ce:18:79:71:1d:5b:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CE:50:D9:F2:CF:2A:D5:E3:5F:86:79:BF:3D:0C:12:B0:C1:85:4E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i85Q2fLPKtXjX4Z5vz0MErDBhU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:3d0::/44
                  2a0e:97c0:3e8::/47

    Signature Algorithm: sha256WithRSAEncryption
         a5:67:38:01:f7:75:5a:9b:dd:20:62:7f:90:ce:bb:a9:f4:a5:
         e5:fc:80:db:6b:50:17:43:cd:ac:8d:4f:65:7b:f7:17:93:3a:
         f5:f7:11:76:08:de:c6:b1:ea:91:9d:ca:f1:10:f8:c1:cc:0f:
         72:b8:25:aa:2f:d6:74:f8:90:9d:d1:b3:fa:b5:c6:44:90:23:
         ff:32:75:df:7f:aa:a2:26:3b:9b:ad:06:1f:8d:98:fc:b7:bc:
         21:69:ce:e4:d1:94:98:f9:eb:d8:62:9e:9d:cd:82:9c:33:0a:
         c9:fb:65:6f:48:b7:38:58:67:0d:88:ea:a7:61:db:1a:12:7e:
         56:00:92:af:8e:75:c8:60:57:2a:4b:31:30:9e:75:28:3e:80:
         58:25:31:97:7d:4c:fe:20:db:7b:5f:d0:4a:6a:8f:0a:46:9b:
         11:6f:e6:29:9e:8a:0d:cf:1d:18:f2:49:97:ec:3d:67:bd:8e:
         b1:d5:01:18:db:24:79:42:cb:95:3f:89:2f:7e:ec:d3:4a:3e:
         8c:2b:03:b9:1d:1e:96:76:a5:c3:29:98:17:92:db:a7:df:8e:
         db:e0:65:d3:41:8d:cd:f0:b5:c6:14:62:92:45:e8:6c:81:48:
         68:30:f8:28:22:f9:ef:38:a5:e4:d1:59:db:4e:2d:5f:58:a6:
         0c:ad:92:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----