Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/si8ZszOxyy-NDjf5j4uC3PKzum4.roa
File:                     si8ZszOxyy-NDjf5j4uC3PKzum4.roa (raw, json)
Hash identifier:          6BG3r8Sms+maW5tvMG76hm63TIjEUAmrgjsdcGQwm84=
Subject key identifier:   B2:2F:19:B3:33:B1:CB:2F:8D:0E:37:F9:8F:8B:82:DC:F2:B3:BA:6E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A1DBB2C68CAE5567E47762AA5A96D922B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/si8ZszOxyy-NDjf5j4uC3PKzum4.roa
Signing time:             Tue 22 Aug 2023 14:52:00 +0000
ROA not before:           Tue 22 Aug 2023 14:52:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216425
IP address blocks:        2a0e:b107:1d13::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1d:bb:2c:68:ca:e5:56:7e:47:76:2a:a5:a9:6d:92:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 22 14:52:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b22f19b333b1cb2f8d0e37f98f8b82dcf2b3ba6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fa:e3:3d:57:14:18:09:66:3b:0c:c3:1e:7e:
                    a4:af:db:92:cc:48:c1:eb:6a:c3:d8:97:16:42:bd:
                    1d:e3:89:e9:67:52:5b:61:7b:53:11:87:30:38:c2:
                    7d:89:d8:bc:9c:70:68:4e:e9:27:95:b9:cd:0a:6e:
                    ff:18:5c:ac:f6:b4:ae:51:bb:30:89:d8:4b:55:47:
                    fa:10:8d:da:38:85:fb:6d:08:ca:5d:5c:28:78:ad:
                    7c:a2:3a:63:5a:ef:88:94:47:7d:8a:30:ec:c4:c4:
                    bc:6c:2a:96:25:fe:08:07:ac:0e:66:44:11:d9:c0:
                    37:d8:0c:1f:67:b2:c6:68:05:f7:cf:78:ee:6b:c8:
                    71:b0:24:fd:1b:d2:a2:10:08:f5:79:de:c0:4c:03:
                    0a:fb:89:e2:ea:5c:e6:a0:50:cb:13:0f:22:13:28:
                    8c:5a:22:50:eb:0b:de:8d:1e:67:8c:be:f7:4b:f3:
                    a2:de:2d:a3:28:18:b6:dc:e2:ec:de:48:7b:6f:b4:
                    82:e3:fe:d5:4e:39:92:85:1d:e6:7d:cb:c6:31:5a:
                    fb:13:87:5b:2f:ad:71:f9:2e:3e:97:06:29:cd:da:
                    00:34:20:09:a1:2c:36:f4:df:05:eb:3b:aa:96:8c:
                    4c:f8:fd:7c:b4:27:29:d5:f1:f1:67:c3:86:f9:e3:
                    97:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2F:19:B3:33:B1:CB:2F:8D:0E:37:F9:8F:8B:82:DC:F2:B3:BA:6E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/si8ZszOxyy-NDjf5j4uC3PKzum4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1d13::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:31:dd:f7:5a:f7:d8:79:fd:48:61:46:92:1c:7e:20:85:7a:
         26:25:bd:7f:0e:13:0a:de:a0:0d:53:0f:5b:ef:ac:75:78:f6:
         c4:bc:00:73:c5:4b:ba:21:ef:f9:e4:90:6f:7d:89:19:ff:17:
         08:a4:11:1d:0c:9e:e8:47:01:bd:e3:cf:d9:9c:ea:26:5a:45:
         4a:5b:6d:94:19:ea:49:e2:0c:25:b8:62:85:8b:aa:05:fd:e8:
         5a:86:d4:f2:c0:e0:0e:8b:82:28:23:cc:ce:7a:f9:63:8e:ac:
         93:78:b8:44:d1:ba:2e:bf:9a:22:b0:ea:22:ec:8f:cb:f8:c5:
         5f:b8:2f:9f:5e:74:a7:d5:33:2b:23:e3:9b:93:6d:06:b8:65:
         8c:2d:a1:85:ae:af:05:11:bf:57:ec:33:03:4d:f5:85:8d:56:
         ed:70:a4:43:26:68:0c:d6:39:81:5b:4a:07:ca:cb:7b:8c:70:
         6a:6c:cb:8d:d1:44:c5:db:50:d5:06:5b:6b:58:38:13:7e:40:
         f1:b7:16:6d:ac:1c:d4:4a:d1:89:3a:8a:9d:f9:29:09:39:d4:
         6d:04:c1:f8:e4:41:e8:d3:d9:99:67:69:e3:33:17:4f:f2:0d:
         50:29:75:f7:92:27:52:c5:6a:0d:f2:15:24:5d:60:4d:5a:d5:
         79:94:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----