Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k0lNIe1-7EdsWS3yWrXqkxLEIZQ.roa
File:                     k0lNIe1-7EdsWS3yWrXqkxLEIZQ.roa (raw, json)
Hash identifier:          hWtVcY0CeRQaInT2AOttnALoh+zHROpkJ7rz5XTq0Yk=
Subject key identifier:   93:49:4D:21:ED:7E:EC:47:6C:59:2D:F2:5A:B5:EA:93:12:C4:21:94
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0186E22B2F939D912431036348B417E9A883
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k0lNIe1-7EdsWS3yWrXqkxLEIZQ.roa
Signing time:             Tue 14 Mar 2023 22:08:46 +0000
ROA not before:           Tue 14 Mar 2023 22:08:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199467
IP address blocks:        2a0e:b107:1f50::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e2:2b:2f:93:9d:91:24:31:03:63:48:b4:17:e9:a8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar 14 22:08:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93494d21ed7eec476c592df25ab5ea9312c42194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:49:e9:e4:76:46:8a:ad:d7:6e:73:42:40:
                    7b:2c:c0:0a:f0:22:39:c7:d1:38:e2:44:9e:c4:b8:
                    71:eb:fe:e2:fd:2c:7f:05:a5:c8:7a:ff:05:a7:21:
                    64:13:25:f9:8d:d7:77:9e:36:2a:09:b3:f8:a4:34:
                    8b:b8:89:3d:03:47:3c:cf:e3:2b:10:93:0e:48:21:
                    c7:fb:d4:92:be:14:4c:1a:14:c0:9f:2c:99:c1:3d:
                    99:33:3e:85:cf:35:91:ef:4d:c5:79:7f:96:f2:da:
                    5a:fc:3e:08:1c:e8:ba:1f:fc:74:c2:8c:f4:89:cb:
                    8a:42:cc:9f:b1:9d:81:ac:62:8d:13:23:6e:19:7c:
                    e6:16:b5:11:18:e7:e5:ad:78:16:27:46:62:09:19:
                    01:d5:53:6a:79:1d:34:a8:86:25:6c:e1:b7:39:01:
                    57:8c:a2:98:4e:87:70:6c:7c:cf:9b:2b:ac:41:02:
                    b5:49:5a:8d:5f:b6:f0:83:a6:f3:31:81:57:ce:ca:
                    dc:d7:19:8e:e6:86:17:30:46:86:3a:93:8a:39:7c:
                    71:e8:e5:91:05:57:58:2c:ff:df:c9:e7:76:4f:09:
                    7f:6c:a6:12:cb:58:b6:bf:87:d4:a0:b1:5e:09:e2:
                    75:58:da:1c:29:8e:a3:14:e8:b6:c5:dd:1e:8a:bd:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:49:4D:21:ED:7E:EC:47:6C:59:2D:F2:5A:B5:EA:93:12:C4:21:94
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k0lNIe1-7EdsWS3yWrXqkxLEIZQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1f50::/44

    Signature Algorithm: sha256WithRSAEncryption
         50:5f:e6:81:de:b2:01:ee:d6:48:04:9c:d5:00:c1:c1:a4:43:
         fe:bd:dc:74:22:64:a3:73:c5:12:e0:08:3c:fe:ef:11:cc:29:
         6a:f8:f2:c7:15:a8:ca:62:6c:4f:9e:cc:e2:2b:f1:de:4b:b8:
         10:c6:58:d2:35:e4:b8:d1:4d:2b:71:0c:43:e5:df:60:62:f4:
         f2:a2:84:32:b0:96:44:00:cb:74:e5:f2:f0:0c:f2:71:8d:ac:
         a4:48:6b:e1:58:46:81:ac:47:12:1f:f0:0d:ec:70:49:07:2c:
         5e:a6:b3:86:fc:d0:84:e6:82:36:b5:5d:a3:b1:9a:5a:f0:8e:
         a9:93:39:cd:b1:05:71:55:96:96:f9:3f:21:bb:45:4a:28:df:
         ac:5e:d7:7b:90:bf:97:48:17:25:ad:15:6f:7b:32:d3:02:2d:
         e8:fd:96:b4:13:a1:11:4d:93:33:f9:b8:a1:2b:3e:cb:f5:f2:
         47:11:43:01:1d:e3:39:c9:7b:84:9c:9b:3d:1c:a8:27:b6:24:
         32:74:73:1b:45:b7:59:0a:be:a0:c2:65:8c:9f:f7:32:d7:23:
         47:b8:e9:05:07:44:00:07:99:6b:4c:71:cc:b8:08:e0:60:db:
         37:2c:88:23:65:63:29:d3:3a:a2:5e:3a:fb:a3:a6:88:dd:85:
         0d:fd:1c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----