Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j4L6tHZLJLYk-UZ0g9SrBDl8aKo.roa
File:                     j4L6tHZLJLYk-UZ0g9SrBDl8aKo.roa (raw, json)
Hash identifier:          9LlTA98Oze5TagadEhwmCShKk7BJVWvedg1n0InXjio=
Subject key identifier:   8F:82:FA:B4:76:4B:24:B6:24:F9:46:74:83:D4:AB:04:39:7C:68:AA
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185F20B0CEA965E78FDF8B5E42ABF657886
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j4L6tHZLJLYk-UZ0g9SrBDl8aKo.roa
Signing time:             Fri 27 Jan 2023 07:04:48 +0000
ROA not before:           Fri 27 Jan 2023 07:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212888
IP address blocks:        2a0e:b107:c00::/47 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:f2:0b:0c:ea:96:5e:78:fd:f8:b5:e4:2a:bf:65:78:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 27 07:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f82fab4764b24b624f9467483d4ab04397c68aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:ba:da:49:70:55:07:9d:9d:b1:bf:bf:a3:
                    ec:f9:74:c8:10:ff:f6:8d:d5:c8:ec:0b:a8:bc:5a:
                    5f:14:a8:31:15:72:08:5c:9c:a4:07:2a:12:ff:aa:
                    7c:7a:04:0e:f7:e1:13:4d:97:f9:74:16:ac:71:04:
                    55:49:e4:47:0d:ea:29:8b:35:bf:b5:6a:3e:ef:a3:
                    31:96:58:d2:c0:6e:82:1a:10:8b:71:ce:7e:b2:94:
                    6f:02:1f:58:ec:ff:f2:12:03:89:3a:8a:68:46:d2:
                    3d:84:73:f4:21:3e:da:4c:08:a9:5e:b2:17:13:1b:
                    94:44:e2:76:9f:f0:67:67:27:9d:1c:57:52:b7:b9:
                    23:60:1f:95:e5:15:c7:0c:c4:43:d0:85:59:48:7b:
                    d2:3a:9d:26:0c:51:be:ad:57:bb:1b:80:a2:49:1d:
                    56:a8:7e:c5:33:8d:ef:cd:31:1c:d0:bd:6e:d2:c5:
                    04:d8:18:d1:97:60:b3:83:d9:ab:14:8b:25:93:d5:
                    8a:36:9b:c4:f9:a8:75:bb:56:8b:e9:e0:b0:be:16:
                    88:9c:96:d4:31:f3:83:79:0b:8d:31:54:aa:ff:59:
                    47:88:ca:38:e5:7f:a0:7a:a6:72:f1:47:97:7e:fe:
                    2c:67:96:d9:7e:cd:e5:72:f7:ec:d4:93:cc:bd:90:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:82:FA:B4:76:4B:24:B6:24:F9:46:74:83:D4:AB:04:39:7C:68:AA
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j4L6tHZLJLYk-UZ0g9SrBDl8aKo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:c00::/47

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:e6:f9:67:6e:50:63:88:53:bd:82:62:83:80:4d:6c:57:
         65:62:fd:83:4c:fb:52:48:6e:24:27:e6:cc:98:6c:b8:a2:41:
         32:e0:a2:28:7d:98:c2:10:b8:e2:50:b2:8a:4f:f1:fb:49:e9:
         5c:d8:f3:81:4b:4b:93:92:a9:8a:91:74:99:f4:77:39:8d:ea:
         66:62:be:9f:44:a6:d6:07:58:93:52:47:ce:fe:f8:05:9b:f8:
         cd:0b:3e:e4:d6:cd:c6:27:de:60:e9:e5:57:4a:fa:d2:6e:b6:
         7d:eb:ce:bb:5e:ba:7c:ee:4b:13:35:85:3b:16:f2:24:4d:ec:
         bb:19:23:9e:e0:0d:17:08:7b:ba:24:a3:8d:56:73:f0:fa:eb:
         8e:f2:9f:54:aa:96:0e:05:c1:50:1a:d2:a7:1e:e1:d2:a7:0d:
         8b:bb:81:48:17:06:43:43:91:61:73:a0:00:f9:20:97:34:56:
         96:7e:68:33:ce:1d:55:10:4d:31:ed:29:2c:01:1b:db:af:6a:
         c6:80:68:b7:08:9d:de:92:10:7d:3b:07:61:f0:62:bd:27:be:
         71:89:2a:61:30:98:11:ca:eb:4e:f6:6b:cf:2a:2c:3b:ac:42:
         5a:9b:5f:9a:85:e2:05:5e:4e:50:01:dc:4f:e7:8d:4c:77:0a:
         f0:2c:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----