Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mnGBWEv0-wqWIaxp8T4NQWkSgK8.roa
File:                     mnGBWEv0-wqWIaxp8T4NQWkSgK8.roa (raw, json)
Hash identifier:          XDICHzd5Wr44m03JHT5fJNbOcTBS1ay1/eL+VLYoW+Q=
Subject key identifier:   9A:71:81:58:4B:F4:FB:0A:96:21:AC:69:F1:3E:0D:41:69:12:80:AF
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E492F4BB0E6FE931C80DC90326360E47
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mnGBWEv0-wqWIaxp8T4NQWkSgK8.roa
Signing time:             Tue 24 Jan 2023 16:18:34 +0000
ROA not before:           Tue 24 Jan 2023 16:18:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41732
IP address blocks:        2a0e:b107:1400::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:92:f4:bb:0e:6f:e9:31:c8:0d:c9:03:26:36:0e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:18:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9a7181584bf4fb0a9621ac69f13e0d41691280af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:36:4d:ef:1d:f3:20:90:44:01:07:d0:f8:6f:
                    8f:e1:bb:23:0e:16:f3:3e:ae:44:6a:ed:79:89:8d:
                    82:c2:f4:b8:da:e7:6c:25:56:ac:70:91:3f:d9:fa:
                    2b:f3:24:ca:52:2f:4d:a8:7c:25:3c:0d:5d:48:fa:
                    e2:b2:6c:28:75:fb:35:c2:78:9a:c0:09:47:20:f6:
                    d5:ce:48:7b:ca:3e:c0:b3:23:47:eb:23:00:df:99:
                    40:b6:44:21:d7:f8:f3:b4:35:80:29:db:ce:f3:b6:
                    72:3e:86:da:1b:44:45:07:ae:33:91:cc:c3:d3:3c:
                    06:12:40:c8:4d:3a:52:2c:c4:cf:7e:1b:37:8b:e7:
                    6c:95:b0:7f:e7:96:49:37:ca:de:d6:78:2d:15:e7:
                    95:c2:fb:cc:95:f6:bd:83:30:60:ed:6c:a8:e8:ee:
                    db:19:bc:fd:4c:d7:be:f4:c0:35:30:78:47:5e:b7:
                    72:fe:f7:1b:34:8f:c5:7d:81:6c:89:36:f8:6d:30:
                    13:fa:c7:59:4f:e2:84:02:43:d1:38:23:b8:5f:ed:
                    13:0f:05:7a:59:2a:f0:5f:80:68:a9:fd:1e:8c:bb:
                    4c:fe:e9:41:f8:7a:98:48:7f:36:68:c4:1f:14:ef:
                    d3:2b:b8:b0:e1:85:a9:24:f9:84:88:a8:4a:a2:78:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:71:81:58:4B:F4:FB:0A:96:21:AC:69:F1:3E:0D:41:69:12:80:AF
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mnGBWEv0-wqWIaxp8T4NQWkSgK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1400::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:e1:01:a3:d4:d6:38:3d:42:d5:2c:1a:1f:bb:5c:83:d6:
         3b:a8:b1:02:77:e3:7b:f3:f4:51:45:37:2a:d3:42:b4:05:94:
         f0:e5:4e:1d:d1:ef:5e:f2:1e:84:5b:6f:0a:33:9d:de:8c:ac:
         28:4b:41:0e:02:f1:29:6e:f6:11:a1:17:84:fa:be:ad:48:07:
         ca:bb:3c:40:af:f8:45:22:c4:d9:c4:f0:c4:75:af:cd:21:61:
         44:17:8d:e8:d0:fd:c5:83:d3:76:6c:ce:d6:40:da:bb:de:07:
         a7:db:a5:2d:a8:d0:cb:82:59:bc:cd:8d:72:1b:ec:7b:ab:5d:
         44:b3:8f:61:ca:ba:72:73:b9:5f:b7:79:88:be:de:07:8d:09:
         ec:c2:43:3a:d4:e0:e7:31:d7:67:7e:e5:3f:46:c3:59:a1:d7:
         ad:97:65:39:77:68:4a:d2:99:50:a8:c7:90:1c:f2:c1:65:29:
         6f:f4:80:de:4d:ed:eb:21:f4:28:57:e8:93:37:e7:af:4c:e8:
         8d:05:87:58:67:68:f9:b0:22:f5:29:cc:4a:a4:0a:79:bc:c4:
         76:d3:1e:b0:7b:2a:c1:ed:6e:04:c4:d3:0c:3b:c4:1c:94:3f:
         d8:6a:cc:db:5c:ef:bb:30:fc:d2:ff:7b:72:9d:7b:6a:b7:69:
         39:35:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----