Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iPxswiLbPRUSzQA9FarQkhu5Fxs.roa
File:                     iPxswiLbPRUSzQA9FarQkhu5Fxs.roa (raw, json)
Hash identifier:          1iXgCLJgVaIE48IiKvNLM4pQzWKS5EBNYpsXoiQvoxE=
Subject key identifier:   88:FC:6C:C2:22:DB:3D:15:12:CD:00:3D:15:AA:D0:92:1B:B9:17:1B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01889B5749B885535F86C51B1B41894AA9C9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iPxswiLbPRUSzQA9FarQkhu5Fxs.roa
Signing time:             Thu 08 Jun 2023 14:09:28 +0000
ROA not before:           Thu 08 Jun 2023 14:09:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198219
IP address blocks:        2a0e:97c0:ab0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9b:57:49:b8:85:53:5f:86:c5:1b:1b:41:89:4a:a9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun  8 14:09:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=88fc6cc222db3d1512cd003d15aad0921bb9171b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4e:b3:57:a8:89:7e:08:8e:a2:27:87:fa:ff:
                    c3:86:07:68:3d:a8:9d:ca:bf:cf:73:70:2b:51:41:
                    01:30:c1:1f:0d:96:e3:e0:9e:c0:17:da:96:aa:7b:
                    b9:21:bb:ea:44:f1:7a:53:30:c2:40:de:f7:f7:e7:
                    c4:5e:d3:a4:67:d8:4f:58:d5:5a:c2:f0:72:3f:e1:
                    d2:a8:b3:7c:c5:40:06:c2:69:f8:ee:93:11:ec:96:
                    ed:4c:6b:9b:5f:4a:63:7b:00:95:df:e7:16:a2:11:
                    54:f5:9f:ba:c2:60:84:69:2c:f4:b2:cc:c4:d4:57:
                    54:30:ce:32:ce:4d:61:35:34:b2:9b:5b:27:21:21:
                    1f:3f:e9:bc:9e:11:e2:1f:9c:eb:fd:d4:60:32:04:
                    15:f4:23:7d:d6:94:f7:b7:3a:7d:fb:ef:fc:f0:55:
                    fc:22:16:35:44:08:3a:5c:8a:97:0c:fe:56:c1:58:
                    e7:78:a3:88:48:d5:b4:0c:02:ce:1a:73:30:1d:f1:
                    c2:82:3a:f9:a9:b6:2e:7d:14:69:6a:83:ca:04:d2:
                    af:8c:32:69:1d:26:d5:e5:bd:92:ff:c2:23:4f:06:
                    bc:1a:77:2e:f9:c3:f4:43:10:d7:86:1a:8f:12:67:
                    cc:5a:ff:94:49:dd:da:c1:31:12:a8:71:d7:48:30:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FC:6C:C2:22:DB:3D:15:12:CD:00:3D:15:AA:D0:92:1B:B9:17:1B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iPxswiLbPRUSzQA9FarQkhu5Fxs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:ab0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:27:66:f4:95:14:76:65:30:f0:a9:58:dc:17:76:5f:1a:52:
         a0:36:6b:05:b6:ca:35:25:7d:fb:f3:1f:55:39:26:4d:ae:12:
         d4:56:b8:81:3a:ca:ca:51:11:de:b4:5e:62:73:80:29:50:0c:
         e1:18:53:f9:45:47:27:7a:5e:d9:8b:55:d5:e4:90:64:41:c8:
         53:33:b5:25:3f:b5:62:73:0d:62:95:9c:82:ec:6a:92:4e:d8:
         21:fb:de:fd:88:60:98:05:83:02:f4:15:63:98:17:45:90:65:
         06:e1:42:17:26:14:3c:f8:9a:05:ae:04:12:89:23:b1:dd:50:
         d3:f4:4c:94:33:a5:9f:3e:f7:ba:6c:a8:e8:24:76:00:fa:27:
         30:c4:0e:94:37:a5:d0:e8:2c:68:ff:48:70:9d:e3:83:8a:58:
         c8:0f:f8:a6:30:bb:85:60:a0:2d:5a:c0:fc:49:11:61:48:01:
         b6:d3:5f:62:d0:45:c1:93:ce:9f:f5:79:f0:8b:48:a4:0b:38:
         1f:d3:c3:68:f5:f1:d4:78:10:af:fa:ae:ef:c5:4b:7f:f7:93:
         e0:e1:1d:95:d2:f1:06:b9:5e:6b:f8:76:11:f0:92:a9:7d:6f:
         f9:57:8e:09:cd:70:4f:14:9c:97:f5:8c:b6:43:31:15:c4:4c:
         36:9d:86:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----