Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kbB6lHhrDRQWRIABG65kFhQd8b4.roa
File:                     kbB6lHhrDRQWRIABG65kFhQd8b4.roa (raw, json)
Hash identifier:          PLGcTi2sVkORtapxRCnTUxOLZj0ujluK2XE5hQFKdMY=
Subject key identifier:   91:B0:7A:94:78:6B:0D:14:16:44:80:01:1B:AE:64:16:14:1D:F1:BE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01857D99633A292CA6B1180BABE0F8BAAD0D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kbB6lHhrDRQWRIABG65kFhQd8b4.roa
Signing time:             Wed 04 Jan 2023 16:24:42 +0000
ROA not before:           Wed 04 Jan 2023 16:24:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200455
IP address blocks:        2a0e:b107:800::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:7d:99:63:3a:29:2c:a6:b1:18:0b:ab:e0:f8:ba:ad:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  4 16:24:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=91b07a94786b0d14164480011bae6416141df1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:c9:c5:fa:a9:b0:e8:83:26:1d:3a:59:4f:
                    12:28:52:0b:10:c7:d3:5b:b8:2c:d4:0b:f6:02:fb:
                    09:f2:3f:0f:7c:c8:80:08:74:bf:e5:6f:b1:97:af:
                    67:d0:98:55:14:06:d5:9e:07:4a:38:fa:9f:c2:66:
                    66:fc:7b:4a:d0:c7:07:76:52:c1:b7:f8:58:d7:d2:
                    4a:aa:fa:92:56:e8:cd:df:22:48:f4:b2:0d:27:79:
                    ec:c6:15:7a:28:5c:d7:e8:bf:67:fd:f9:9a:a6:20:
                    aa:eb:5a:33:65:2b:36:6a:34:60:a3:ac:71:39:f0:
                    18:b8:e7:a6:7c:30:b6:9e:50:5a:f0:13:92:e2:eb:
                    62:c6:d9:76:5e:5a:7b:17:dd:d9:a9:b4:17:43:21:
                    51:e2:ce:b7:a7:9c:50:8c:3a:12:aa:e5:99:a3:2e:
                    a6:14:6e:7e:05:c5:d4:4e:bf:31:86:98:b0:02:97:
                    63:7b:3a:a1:c2:4b:9c:05:c4:d3:83:c8:e2:60:78:
                    3e:4a:ce:4a:53:c6:65:46:f0:01:2f:34:94:c2:02:
                    51:a0:8c:dc:88:f8:25:8d:fd:1f:d1:05:14:22:2a:
                    9d:92:8f:af:e5:bb:f1:5f:22:4d:04:0e:91:39:33:
                    c7:2f:68:79:27:53:7f:01:08:0e:2e:04:03:03:6d:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B0:7A:94:78:6B:0D:14:16:44:80:01:1B:AE:64:16:14:1D:F1:BE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kbB6lHhrDRQWRIABG65kFhQd8b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:800::/44

    Signature Algorithm: sha256WithRSAEncryption
         34:d5:5c:05:05:a0:f0:cb:ea:e5:0e:c4:1d:65:f3:97:d9:6d:
         65:30:a5:ed:b1:e1:68:c6:33:ab:be:8d:37:f1:d5:d6:15:ef:
         e9:91:cf:bd:3b:ac:df:4b:da:8f:88:d8:17:c3:10:16:82:27:
         e5:b0:11:a7:19:f5:60:10:d0:af:f0:58:ab:aa:d6:d5:dd:05:
         7e:3b:32:fd:e6:b5:c1:74:5c:61:55:7a:e1:68:62:58:d3:d5:
         87:be:33:6b:54:17:86:db:34:59:6c:74:0e:61:f6:56:b0:15:
         f8:73:6b:9a:21:fc:1b:07:9d:f5:8b:8b:0a:a9:67:68:2e:44:
         b8:35:d8:ff:cc:8e:f6:79:89:12:b9:84:2a:0b:ff:cc:39:08:
         b3:a6:00:b6:99:ed:86:98:3f:d7:53:10:af:6d:2b:91:7f:ff:
         be:fa:eb:d4:03:09:ac:1b:9b:05:93:2e:14:89:0c:45:10:ae:
         7c:89:c0:5e:76:32:17:59:05:83:70:bf:da:d9:14:7e:ca:95:
         2e:48:37:a5:3e:2a:48:9a:bf:85:66:30:36:b2:87:cb:53:b7:
         54:44:a9:47:34:8c:0d:68:e3:f1:8f:c7:aa:52:06:54:e7:23:
         00:5e:d2:a4:ad:f7:28:a0:f6:fc:d2:1c:47:45:83:65:0f:ba:
         b3:81:88:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----