Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/is9S9eL50YJ58VwFdQqwDghNqbQ.roa
File:                     is9S9eL50YJ58VwFdQqwDghNqbQ.roa (raw, json)
Hash identifier:          cfJAXIg5atq4E+dF5nuqNPiWiSnwbRCG4IixWX+yCTQ=
Subject key identifier:   8A:CF:52:F5:E2:F9:D1:82:79:F1:5C:05:75:0A:B0:0E:08:4D:A9:B4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BE47B367DFC6F8401AB4295B416C2CFDC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/is9S9eL50YJ58VwFdQqwDghNqbQ.roa
Signing time:             Sat 18 Nov 2023 22:09:21 +0000
ROA not before:           Sat 18 Nov 2023 22:09:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51939
IP address blocks:        2a0e:97c0:5c5::/48 maxlen: 48
                          2a0e:97c0:5c0::/44 maxlen: 48
                          2a0e:97c0:5c0::/48 maxlen: 48
                          2a0e:97c0:5c3::/48 maxlen: 48
                          2a0e:97c0:5ce::/48 maxlen: 48
                          2a0e:97c0:5c1::/48 maxlen: 48
                          2a0e:97c0:5cf::/48 maxlen: 48
                          2a0e:97c0:5ca::/48 maxlen: 48
                          2a0e:97c0:5c2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:e4:7b:36:7d:fc:6f:84:01:ab:42:95:b4:16:c2:cf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 18 22:09:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8acf52f5e2f9d18279f15c05750ab00e084da9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:02:02:41:cf:2a:d2:69:87:96:1f:1d:1e:
                    12:44:62:19:a9:c1:6b:4f:60:35:5d:66:12:22:62:
                    43:41:73:0c:a5:52:d4:fb:26:e5:89:bd:76:dd:15:
                    cc:ea:8b:44:b9:15:53:09:6d:43:34:f7:bc:c9:c0:
                    bc:07:0c:cc:80:3d:fd:44:95:83:01:fb:1d:d7:62:
                    d6:85:3d:b0:55:4f:74:70:03:8b:5a:d0:69:3d:93:
                    23:a5:3b:7c:26:3d:1c:09:d1:db:41:ab:7f:59:6a:
                    a8:e9:58:72:7a:b1:88:f7:f0:19:6c:6e:37:d6:1c:
                    8b:e4:37:a5:5a:2a:e2:a5:ad:c8:57:56:ad:48:7c:
                    82:57:e4:7a:6e:ab:c2:d8:69:92:78:90:1c:e9:96:
                    e3:74:39:ae:dc:23:51:44:88:86:79:9e:f2:54:56:
                    79:31:d4:d7:6e:c6:a9:df:dc:0a:80:b8:99:e3:c2:
                    a8:8b:70:f3:92:57:32:11:62:55:b7:ec:72:24:3a:
                    3b:f0:84:e8:3c:4b:00:83:1d:75:a7:8c:aa:34:66:
                    af:0a:cf:8e:53:d6:8c:f3:56:20:25:a0:06:c5:1f:
                    bd:77:1a:32:00:13:88:11:ad:79:da:38:e4:f2:ac:
                    54:0f:4e:f3:a7:a9:50:6e:28:8d:4c:c1:46:1f:a2:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CF:52:F5:E2:F9:D1:82:79:F1:5C:05:75:0A:B0:0E:08:4D:A9:B4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/is9S9eL50YJ58VwFdQqwDghNqbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:5c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         bd:1d:1f:b3:56:20:89:5b:e7:61:d0:c0:7b:33:f3:c5:9b:88:
         7c:4b:ee:9f:52:67:de:57:5d:88:2c:39:41:0b:65:3e:7f:41:
         90:d5:b1:68:8e:02:c7:c7:99:f9:0d:75:07:a4:67:8a:83:bf:
         70:9f:3c:88:b3:49:3d:f3:0a:28:2b:bc:45:d6:7f:a0:ec:bc:
         7a:68:33:28:34:c2:a2:66:24:35:22:95:8c:0b:26:3c:96:ff:
         11:56:b3:26:bf:1a:0a:b9:ae:73:38:1d:2e:f9:a3:dc:61:a8:
         d5:75:08:70:9d:d0:69:5d:27:ce:4f:44:6a:41:f4:aa:78:d5:
         cc:b5:75:78:b0:da:bf:69:ca:c4:ba:55:b6:51:f2:84:5d:a0:
         f2:19:9d:2a:e5:84:1f:58:b6:64:38:9d:10:9c:ca:3f:d2:9b:
         2a:e3:a6:53:e9:d3:5c:20:0f:58:46:38:c9:cf:03:40:e5:ac:
         d3:92:a0:b9:7c:53:cb:8d:2a:5f:53:2f:c5:de:5c:31:94:bc:
         c2:ef:4d:f6:b0:1c:a7:7d:85:2f:11:de:ad:2f:f5:9c:18:e2:
         37:fb:c2:4d:00:33:0a:76:da:32:bf:3e:52:51:d9:46:5d:33:
         83:95:1a:73:a8:1a:43:60:90:14:a5:ef:eb:49:73:86:bd:5b:
         fa:50:a8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----