Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kKRZg5WOCd5-6VhswyFX-qc_Z2w.roa
File:                     kKRZg5WOCd5-6VhswyFX-qc_Z2w.roa (raw, json)
Hash identifier:          3tMAFvJzgW9Q+Ll+yIzb1w3AqcnzxVsVCbJ5aYZJxK4=
Subject key identifier:   90:A4:59:83:95:8E:09:DE:7E:E9:58:6C:C3:21:57:FA:A7:3F:67:6C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A7EDF86D00CA051C9ACDC87351315B118
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kKRZg5WOCd5-6VhswyFX-qc_Z2w.roa
Signing time:             Sun 10 Sep 2023 11:34:52 +0000
ROA not before:           Sun 10 Sep 2023 11:34:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216418
IP address blocks:        2a0e:97c1:130::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7e:df:86:d0:0c:a0:51:c9:ac:dc:87:35:13:15:b1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 10 11:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=90a45983958e09de7ee9586cc32157faa73f676c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7d:32:b6:6a:ba:4d:b1:79:54:6a:d6:f9:20:
                    fb:fd:63:ff:f5:54:11:4f:82:99:61:55:81:c5:97:
                    19:52:ca:a6:e5:9a:b6:01:8a:29:35:0d:22:e7:72:
                    8a:b4:4c:80:ee:44:b5:b9:21:88:f6:44:d2:47:cd:
                    ea:9b:58:e0:67:6e:11:35:be:7a:46:66:a8:a6:6f:
                    66:4a:50:6a:b4:31:4b:70:22:a2:bd:4a:a0:a6:92:
                    48:2a:e3:c6:37:b1:cc:cc:45:68:61:bf:58:3b:d2:
                    b7:aa:34:a0:49:3b:60:2a:70:af:8d:72:77:1d:9a:
                    b6:64:f0:fc:6f:27:b5:cc:07:42:2e:cb:be:60:7b:
                    c4:fc:d3:49:00:d1:11:75:7c:27:55:41:c9:c9:9b:
                    1b:5d:46:a4:97:02:e7:3f:ec:44:6d:01:2c:27:9c:
                    5d:4d:28:19:28:e1:c0:58:5f:c5:7c:4c:84:5e:f2:
                    11:a7:1d:c8:01:43:9c:b6:7c:89:38:a9:16:cf:a5:
                    09:a7:33:49:ce:ee:21:d0:eb:fd:98:87:b8:9e:c1:
                    5d:e7:64:4a:d3:b6:13:b3:b0:ed:6c:62:5d:23:b0:
                    ac:2d:f3:f9:14:2f:cf:c6:82:fb:e3:0a:6d:5c:0d:
                    89:48:12:8d:6e:0f:f3:19:c7:e1:5a:8a:bc:6d:92:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A4:59:83:95:8E:09:DE:7E:E9:58:6C:C3:21:57:FA:A7:3F:67:6C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kKRZg5WOCd5-6VhswyFX-qc_Z2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c1:130::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:3f:68:8c:4c:98:66:89:3a:79:1d:91:81:63:d4:80:8b:4c:
         4c:a2:6e:2b:d5:86:d8:03:9c:f4:61:dc:1e:fd:08:1c:99:12:
         0c:7e:3a:81:f8:3f:26:52:7b:ed:b3:b8:5c:b2:a8:05:77:0b:
         ad:11:16:21:e5:5f:e5:c9:7e:ca:08:9d:da:9c:46:3a:97:2b:
         10:ce:cb:f2:6a:c8:10:81:47:5f:f3:4a:9e:fe:b6:45:6b:3e:
         ad:16:b9:ef:97:0a:fe:0a:59:f4:75:5e:0d:39:5b:8c:5f:0d:
         82:98:ad:c8:93:43:53:d5:0f:36:46:82:8e:7f:03:c1:ab:bd:
         d8:83:8b:ef:78:e9:eb:a3:d1:9e:22:fb:cc:cd:43:a6:cb:93:
         22:11:36:ff:5e:c6:62:74:d1:1d:c9:38:c2:86:73:82:e2:42:
         2b:32:13:44:cb:64:ff:38:c4:cc:08:af:3a:c0:3f:38:f2:32:
         b4:ef:76:ea:e7:0d:d2:a1:bf:2c:24:19:ab:2e:6f:d4:44:f1:
         38:55:4b:70:4a:c3:5f:96:1c:5d:19:88:bf:11:ee:ba:0e:88:
         49:19:29:98:d5:70:fb:4b:5f:e3:d4:50:81:d3:88:84:77:73:
         28:f4:b8:f9:77:58:51:8c:ea:b8:ed:2f:53:c6:fd:ea:4d:68:
         c6:22:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----