Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qjoY0kL6XKfP0ueYBYvbhzkwxoE.roa
File:                     qjoY0kL6XKfP0ueYBYvbhzkwxoE.roa (raw, json)
Hash identifier:          dz4ecGBf7CVEeImdJFPypyxeMJjV3XR3WBcuszPV16Y=
Subject key identifier:   AA:3A:18:D2:42:FA:5C:A7:CF:D2:E7:98:05:8B:DB:87:39:30:C6:81
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187B759B4DC52C01428D5367E200DE2BB76
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qjoY0kL6XKfP0ueYBYvbhzkwxoE.roa
Signing time:             Tue 25 Apr 2023 07:38:42 +0000
ROA not before:           Tue 25 Apr 2023 07:38:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207401
IP address blocks:        2a0e:b107:4e2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b7:59:b4:dc:52:c0:14:28:d5:36:7e:20:0d:e2:bb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 25 07:38:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aa3a18d242fa5ca7cfd2e798058bdb873930c681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:91:0b:47:c5:ac:7f:72:4c:52:86:d1:e2:
                    69:ce:4f:f0:6f:12:dd:5a:95:8d:85:e4:39:a1:4d:
                    bc:46:79:87:7b:df:95:c1:6e:53:bf:c6:8b:04:ca:
                    b7:64:19:8a:8d:4d:d1:16:39:87:1e:3a:f6:fa:02:
                    4f:c1:c6:8f:5b:a3:66:5e:77:bc:52:59:0c:8b:97:
                    62:b6:62:89:0d:14:d9:35:41:d5:f5:9e:27:69:31:
                    0c:b2:d6:3d:f8:85:b4:18:77:99:0a:5d:7c:0e:6e:
                    a5:fe:f8:1c:0e:7c:88:d5:aa:ae:3d:18:78:dd:50:
                    5b:b9:4e:29:08:42:1f:b2:22:18:7d:ce:e7:e1:34:
                    64:4d:db:7c:52:a6:6f:21:2d:44:45:75:cc:95:70:
                    7a:ce:80:d4:61:27:d3:88:32:4e:90:fc:ae:23:c6:
                    70:5a:ec:2f:8a:8c:d0:f4:a6:b9:b7:cf:3a:91:7b:
                    98:f3:73:8d:5c:4a:e0:f9:a6:ae:20:37:48:44:ce:
                    76:a8:e1:a9:d5:7b:29:5e:df:08:f8:6d:61:b3:3c:
                    e5:97:98:08:30:93:41:8a:81:db:06:da:39:09:e7:
                    3c:c3:bd:89:06:42:21:1e:9f:a0:bd:aa:f1:5c:fd:
                    b0:9b:7c:a2:a2:42:ab:e3:50:9b:cc:51:9e:ab:38:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3A:18:D2:42:FA:5C:A7:CF:D2:E7:98:05:8B:DB:87:39:30:C6:81
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qjoY0kL6XKfP0ueYBYvbhzkwxoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:4e2::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:48:4d:25:31:b9:4c:fc:ab:45:a4:dd:b6:2a:dc:f2:3f:e5:
         42:bb:11:24:21:41:02:c2:c1:75:62:f3:11:96:d8:f0:d9:45:
         d4:13:68:9b:6c:c7:1d:bb:1c:50:d0:c9:df:1e:70:67:75:50:
         81:6e:9c:9e:d4:6f:0d:ea:f1:20:43:b5:66:c4:dd:08:10:f1:
         71:a6:3a:61:a6:09:6e:81:a2:9a:b9:3a:10:cc:cc:6b:a0:47:
         91:8f:8c:58:bd:e6:39:9c:e5:81:20:04:da:b8:37:ef:a1:e8:
         bf:36:45:18:54:92:8d:1a:1e:37:75:34:60:10:f9:47:ef:12:
         d1:be:04:ba:3c:6e:25:51:50:fd:27:f5:92:bb:20:d8:76:46:
         c7:d1:32:72:96:ed:e0:23:cf:23:ba:68:93:3a:74:b0:75:ef:
         74:fd:19:17:90:3c:21:34:97:42:bf:7c:bd:0d:6a:6b:e5:fe:
         b0:9d:61:39:69:62:d8:66:29:55:ac:cd:94:f6:a4:94:bf:e7:
         58:e6:74:b0:57:37:9e:60:6d:5a:97:f1:82:70:1d:b2:b3:5f:
         d8:bf:0c:35:68:19:3b:5c:a0:eb:99:19:a5:84:30:48:cf:66:
         22:14:ee:c4:9a:4a:e7:9e:5d:3e:7f:a1:a6:16:a3:e8:56:d8:
         7c:44:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----