Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oKSnsfNP6LLr47T0n4_QRYn9jYE.roa
File:                     oKSnsfNP6LLr47T0n4_QRYn9jYE.roa (raw, json)
Hash identifier:          wD8cvMzII7F3kXj7bkX3t03jrbUGudVnp+jkzt1Ic+Y=
Subject key identifier:   A0:A4:A7:B1:F3:4F:E8:B2:EB:E3:B4:F4:9F:8F:D0:45:89:FD:8D:81
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018B63E2986EC0719BFCAFC43D97963AFC05
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oKSnsfNP6LLr47T0n4_QRYn9jYE.roa
Signing time:             Tue 24 Oct 2023 22:51:16 +0000
ROA not before:           Tue 24 Oct 2023 22:51:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203790
IP address blocks:        2a0e:97c0:460::/44 maxlen: 48
                          2a0e:b107:12a0::/44 maxlen: 48
                          2a0e:b101::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:63:e2:98:6e:c0:71:9b:fc:af:c4:3d:97:96:3a:fc:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 24 22:51:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a0a4a7b1f34fe8b2ebe3b4f49f8fd04589fd8d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f3:1e:1f:f7:63:e4:d0:36:f3:d4:6c:23:70:
                    0d:5e:d9:99:68:cc:9d:44:e8:85:ac:fe:91:3a:df:
                    8d:1c:cc:5d:5e:47:2d:0a:f4:5f:5e:04:9d:6a:4b:
                    85:f7:9f:f5:35:59:a9:e8:ff:de:ae:2c:f4:5d:49:
                    eb:71:0d:bd:a3:a0:69:35:61:c2:9c:c5:63:85:f9:
                    0e:5b:db:5c:8b:c1:55:7b:60:18:4b:05:46:76:36:
                    c8:43:69:ad:dc:42:35:ef:2b:63:61:27:e3:c3:15:
                    7f:55:49:d1:fd:3b:34:3c:9f:b7:fb:5f:5a:9b:c5:
                    f6:1f:07:0f:58:d9:25:cf:67:26:f8:70:7b:56:73:
                    4a:ca:67:71:43:d6:2b:e3:eb:a3:62:9b:47:a7:af:
                    ab:04:82:78:8c:2d:c7:6b:0c:9f:ab:54:1e:8e:b7:
                    06:2c:63:22:35:f1:97:ec:52:d8:31:98:96:3f:b1:
                    f2:98:b1:14:89:af:93:2b:4f:41:06:5a:fb:1c:ef:
                    fb:cf:7a:7a:a3:d3:d2:e7:b4:44:28:3e:f3:c8:ea:
                    fb:82:85:c8:c7:80:82:65:12:46:dc:5b:3a:6e:e8:
                    2d:8b:93:d0:21:37:49:eb:55:14:8b:0f:d1:e0:84:
                    4b:9c:35:7d:62:06:1a:b9:94:58:c3:ea:7a:f1:3f:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A4:A7:B1:F3:4F:E8:B2:EB:E3:B4:F4:9F:8F:D0:45:89:FD:8D:81
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oKSnsfNP6LLr47T0n4_QRYn9jYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:460::/44
                  2a0e:b101::/32
                  2a0e:b107:12a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         86:a1:28:c3:41:2d:bc:8a:68:6f:28:f8:83:6d:29:02:f9:e5:
         b1:08:2a:0a:33:9c:49:81:9b:52:58:2b:12:93:a4:62:a5:cd:
         75:45:28:14:c4:c6:37:da:ed:8d:fa:e4:6d:d4:87:2b:10:ef:
         44:0c:2e:a5:cb:db:2f:48:dc:8d:a1:ef:a0:70:ad:d0:46:18:
         b4:9b:2e:fe:99:50:09:73:57:8b:19:78:83:23:b8:dd:16:6e:
         40:b7:28:67:cc:bd:55:eb:d9:1d:b1:a2:15:63:f6:39:58:f3:
         6b:bc:ed:ae:1b:2b:a7:22:32:fe:d6:7c:3d:b4:19:76:20:70:
         3f:5b:bd:81:bf:b3:21:0f:07:ed:30:45:64:86:35:d0:9b:13:
         02:86:97:f2:60:8b:77:bd:ed:d5:04:31:e9:1a:09:49:4f:16:
         c6:22:f4:7e:46:6b:ce:0c:f9:88:08:ec:e8:c5:66:ea:21:19:
         e5:84:26:4e:13:bf:f2:58:bf:b7:19:94:2a:8f:ca:8e:5c:f4:
         1e:29:55:c2:e6:24:fe:2c:b4:f6:d0:46:0e:b6:c2:82:c2:cd:
         d0:41:eb:be:82:0b:3e:a7:7d:79:cd:2d:79:81:e1:ba:b1:87:
         36:1f:34:9c:d8:67:60:f0:99:86:a2:53:02:98:04:ad:d5:3e:
         88:c6:fd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----