Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k7sg7UugRNgthagqWPpBtFn4XV0.roa
File:                     k7sg7UugRNgthagqWPpBtFn4XV0.roa (raw, json)
Hash identifier:          tFLBbpFDjlDxJB5s5+y1UkXjiqO1MmT3PJ/uhV8BblM=
Subject key identifier:   93:BB:20:ED:4B:A0:44:D8:2D:85:A8:2A:58:FA:41:B4:59:F8:5D:5D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7E9CB95327274E589E10636249B7A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k7sg7UugRNgthagqWPpBtFn4XV0.roa
Signing time:             Mon 02 Jan 2023 05:15:24 +0000
ROA not before:           Mon 02 Jan 2023 05:15:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210490
IP address blocks:        2a0e:b107:17b0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:e9:cb:95:32:72:74:e5:89:e1:06:36:24:9b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93bb20ed4ba044d82d85a82a58fa41b459f85d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bf:5f:f2:f0:0d:09:e8:5f:c8:43:33:b1:4f:
                    f8:14:f1:d6:d6:10:a3:03:7f:84:3e:fe:1c:41:70:
                    99:b1:2e:af:3b:6b:ce:ba:e7:37:50:10:2a:bd:09:
                    7e:c2:c0:22:e4:aa:5b:db:8f:5b:0d:cc:f3:8b:c0:
                    af:bb:70:ff:b0:02:b0:8e:76:c4:51:27:c8:23:8d:
                    e9:d4:26:8a:a3:c6:4a:85:d5:f2:7e:29:39:49:66:
                    54:cc:0e:c0:62:d3:35:1a:8b:6b:b0:b7:b3:c3:60:
                    3c:5b:3f:5b:6b:12:18:38:a4:3f:04:6e:3d:3e:93:
                    d2:19:c8:29:e8:4e:4c:8b:c4:85:8f:ce:01:5a:77:
                    7f:7b:98:da:79:4e:e1:c7:80:4c:96:7f:21:50:c7:
                    ef:ba:86:4a:34:33:28:5c:e0:96:d9:83:01:a7:f5:
                    1b:e0:b1:37:62:d3:8d:00:df:49:49:28:63:dd:9b:
                    42:1e:6f:c9:40:9a:1d:21:6a:3d:74:a9:ef:1c:c7:
                    d1:09:a8:02:0c:40:d4:35:f8:3d:55:fd:66:c5:3b:
                    58:5c:c8:e1:e8:44:f3:40:56:ff:88:ac:8c:e1:96:
                    c9:aa:93:d0:e7:34:22:88:20:bd:7a:ae:7d:9b:fc:
                    16:5b:33:5e:84:23:1c:93:2d:31:9d:1c:69:24:4b:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BB:20:ED:4B:A0:44:D8:2D:85:A8:2A:58:FA:41:B4:59:F8:5D:5D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k7sg7UugRNgthagqWPpBtFn4XV0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:17b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:d7:80:e2:c6:24:3b:63:90:36:ba:7f:03:e0:37:2a:c3:54:
         35:af:ed:cb:d9:e8:bb:5b:87:19:4d:e5:35:52:74:4e:99:67:
         ed:e2:63:23:bc:b9:22:ce:e3:b3:d9:cd:ce:d5:c9:e1:87:b3:
         2f:0d:78:67:0d:d6:c3:d1:b2:c5:e3:c3:60:3e:7a:9e:b1:93:
         61:bf:cb:96:6b:16:8f:04:60:ca:27:7e:c0:bb:fd:06:27:b4:
         da:00:85:16:07:96:9e:1b:d1:08:5b:de:18:03:a7:45:64:c1:
         a8:11:b5:3e:31:6e:3e:8b:e5:69:a0:fb:66:9f:0f:4a:84:6f:
         ef:6d:b4:f6:0b:27:28:19:b5:5f:5b:5c:04:22:4a:aa:84:1f:
         7f:73:ca:f6:fa:c6:b5:30:35:61:2c:4e:5f:b3:ba:01:46:71:
         19:80:eb:a4:44:de:9d:eb:28:de:94:de:85:d6:ab:fb:ac:0f:
         4f:18:91:71:ab:3b:c6:8d:d4:df:30:bb:ea:60:d6:69:8c:46:
         a4:83:22:fb:29:b7:57:ef:7f:a5:0d:d9:ad:7e:b1:09:b4:99:
         68:d7:62:d7:fa:ff:1f:69:0f:d9:10:0a:6a:59:ae:e1:86:ed:
         13:73:e0:06:7f:af:9c:f7:e7:2f:1e:bf:5f:f1:80:30:eb:4c:
         0a:c1:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----