Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pDmE7X39WloJN5xe8aOHZioTfIg.roa
File:                     pDmE7X39WloJN5xe8aOHZioTfIg.roa (raw, json)
Hash identifier:          iWpaw/nD6hFfvUWavIr4fefqQtW+FW5vkCtTpS1bNK4=
Subject key identifier:   A4:39:84:ED:7D:FD:5A:5A:09:37:9C:5E:F1:A3:87:66:2A:13:7C:88
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E825F6454F64F5A9F9F42592D1691B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pDmE7X39WloJN5xe8aOHZioTfIg.roa
Signing time:             Mon 02 Jan 2023 05:15:40 +0000
ROA not before:           Mon 02 Jan 2023 05:15:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213188
IP address blocks:        2a0e:b107:6e2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:25:f6:45:4f:64:f5:a9:f9:f4:25:92:d1:69:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a43984ed7dfd5a5a09379c5ef1a387662a137c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:2d:0a:55:59:2b:0e:48:0a:b4:17:16:7a:
                    1c:bc:14:f3:9c:75:d2:59:a7:a0:7a:04:75:60:86:
                    62:74:f9:2e:c4:4c:0c:cb:3d:f6:0c:57:c5:8f:1e:
                    25:36:bd:23:6e:65:ca:70:e0:fa:e3:d7:a5:6b:42:
                    6d:cb:37:8d:26:2a:4a:54:a4:37:96:a4:81:91:5c:
                    79:e2:e0:c9:a0:72:8c:28:e0:cf:8f:a7:c8:60:e8:
                    fb:dc:f6:83:4c:df:08:46:12:18:5b:0f:b1:88:24:
                    a6:57:1e:c0:70:99:d8:52:55:2a:ab:3f:18:22:93:
                    c7:4b:4f:0c:f9:27:e9:42:fd:15:2c:a0:82:bc:c4:
                    11:79:31:d2:b1:99:b4:e4:bf:10:8e:23:be:15:cc:
                    19:72:dc:3b:a7:19:c6:49:db:ab:d7:71:fa:ad:63:
                    59:2f:57:88:0b:1c:d6:07:b2:bf:8b:98:2a:24:75:
                    ae:6a:0e:6b:99:aa:eb:67:12:7d:a9:40:bc:11:0c:
                    bb:d2:cf:e3:19:e4:ff:bc:a0:23:f4:db:72:f2:b1:
                    05:7b:ab:58:87:a6:f7:0a:43:5f:2f:cb:a9:19:04:
                    31:c9:fb:7a:c7:a8:90:a9:41:d9:d2:77:51:c4:12:
                    63:1c:c5:e2:f1:d4:bb:64:a0:83:10:ab:ec:07:44:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:39:84:ED:7D:FD:5A:5A:09:37:9C:5E:F1:A3:87:66:2A:13:7C:88
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pDmE7X39WloJN5xe8aOHZioTfIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:6e2::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:35:9b:ca:00:d9:5b:77:a4:e5:86:c3:46:36:39:91:52:8a:
         52:4e:d0:7f:72:b2:68:39:40:26:33:04:90:be:e2:cb:cd:f5:
         cf:c2:0b:88:1d:95:32:3f:38:c5:d4:41:d0:7e:db:33:6e:62:
         95:78:51:ef:03:ec:f2:f8:fc:47:2e:66:fd:83:6f:5f:81:0d:
         0d:6d:d5:5e:c6:2d:ac:e7:ae:6e:f2:ed:a4:be:5c:d3:42:58:
         4f:9e:45:6f:80:65:f5:66:6a:da:e5:79:39:e2:01:d4:a8:50:
         dd:55:b2:dc:82:53:e2:77:bd:47:fc:0f:70:54:ab:bd:aa:01:
         d8:f7:6b:c1:10:92:d7:b3:d5:5b:05:d9:ca:d1:ff:fa:7b:8c:
         e8:c5:3a:af:44:df:20:84:1b:4b:24:cf:4b:70:59:da:b0:27:
         7c:fc:d4:e1:26:14:99:a4:43:ce:74:40:0b:ea:e9:a6:29:f8:
         e3:23:32:f8:8f:b6:ac:d7:d5:6a:98:77:4a:c3:38:97:99:e2:
         45:01:60:2d:dc:24:ab:04:47:97:3f:6e:56:89:e3:3f:15:49:
         a9:5b:df:76:03:1d:b5:27:fb:5e:0b:5f:c3:5b:df:8f:3b:c4:
         99:e2:bc:9c:45:9f:bf:de:cf:4b:c5:a5:0d:49:f1:d9:bc:3e:
         78:51:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----