Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rqLV6P5CFkhw0FV3aUEaJ-3BmPA.roa
File:                     rqLV6P5CFkhw0FV3aUEaJ-3BmPA.roa (raw, json)
Hash identifier:          Ja2kBk5KUVzCZiQe1oI+DB8YeumtKaXgMeTs4sgTFco=
Subject key identifier:   AE:A2:D5:E8:FE:42:16:48:70:D0:55:77:69:41:1A:27:ED:C1:98:F0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BDF6F66174A7D15362E7D8E58D25DFA65
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rqLV6P5CFkhw0FV3aUEaJ-3BmPA.roa
Signing time:             Fri 17 Nov 2023 22:38:21 +0000
ROA not before:           Fri 17 Nov 2023 22:38:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215980
IP address blocks:        2a0e:97c0:e30::/44 maxlen: 48
                          2a0e:97c0:e30::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:df:6f:66:17:4a:7d:15:36:2e:7d:8e:58:d2:5d:fa:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 17 22:38:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aea2d5e8fe42164870d0557769411a27edc198f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:95:60:77:a5:61:af:4a:e4:cf:1b:b0:d1:40:
                    d8:cf:fa:d6:6b:55:2b:06:5e:5f:19:8b:f9:e5:ce:
                    43:17:1d:60:5f:da:90:a7:b7:2e:5b:e5:55:0b:ed:
                    2d:e3:af:96:f0:86:2c:b7:3d:12:04:1e:14:4f:70:
                    79:cd:fe:e6:ab:d7:74:07:6c:af:df:f5:6b:08:6a:
                    76:22:69:f1:38:75:28:92:4f:63:1a:47:a1:4c:2e:
                    e1:84:4b:da:47:2e:cc:37:5e:65:cf:5f:39:07:27:
                    aa:40:b0:72:fc:5b:88:d1:c7:dd:8c:b0:6b:88:c0:
                    c3:48:b3:2c:55:8f:6c:69:f0:82:c4:fa:a7:a5:cb:
                    21:1e:e3:ee:d4:92:08:b1:49:2d:b4:17:26:79:b2:
                    b6:5d:4d:42:85:12:25:06:db:ee:e9:be:9c:bb:77:
                    35:8f:89:2e:88:6a:ba:00:4a:92:da:f0:21:ca:8e:
                    9c:e0:26:b9:f1:10:75:a0:91:dd:46:57:a1:7b:20:
                    1f:57:1c:d0:f2:ba:68:57:a6:e4:8c:67:52:51:14:
                    75:dd:38:bb:4c:39:09:22:b0:04:30:e1:d6:24:b6:
                    9f:35:96:bc:bc:6c:8a:c4:6d:45:de:30:8d:03:7f:
                    ea:d7:b4:00:f6:2b:7b:ca:c5:a0:5c:a5:f9:3f:f2:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A2:D5:E8:FE:42:16:48:70:D0:55:77:69:41:1A:27:ED:C1:98:F0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rqLV6P5CFkhw0FV3aUEaJ-3BmPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:e30::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:2d:d1:d1:c4:47:90:e0:89:c8:f6:28:ec:45:3c:2d:0e:1a:
         84:dd:76:cb:fe:d9:4a:c9:bf:f6:85:a1:bb:9c:7d:94:13:35:
         db:ae:10:8a:7e:ec:6d:90:67:dd:91:a6:2e:e3:12:f4:74:6f:
         79:a3:3b:4a:44:06:af:23:38:30:ed:4b:5f:6a:b9:b5:a2:15:
         98:f0:51:fc:cc:60:94:f4:80:e2:01:c2:39:01:af:b2:da:cd:
         03:36:26:f0:2f:bd:d5:a4:21:30:cd:ee:a7:4d:1c:0c:7e:16:
         14:ea:82:f7:4a:60:71:c6:c0:bf:ef:37:8b:c1:f3:8a:d0:13:
         46:b7:40:4a:07:74:c0:4f:ed:94:61:a2:e3:d1:e9:c6:2d:78:
         57:32:3c:ff:7a:a9:06:59:11:5b:75:06:c7:de:35:ec:1a:3b:
         16:69:bb:f8:b6:cc:e6:a5:30:5f:5a:54:16:55:aa:8b:0b:f9:
         36:cc:3f:c5:10:e7:d0:dd:b7:4d:24:0e:4f:41:c6:25:71:54:
         07:13:2b:10:0a:4b:09:e0:0a:2d:9d:c0:5f:67:95:6e:f3:52:
         78:43:1a:b4:7a:29:c0:f0:7a:1c:6b:b0:0c:84:67:86:7a:72:
         02:e8:2e:f8:fb:05:bb:82:fe:38:bb:05:c9:e3:d6:78:32:25:
         30:44:f3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----