Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tX5Obm32mu2pYvTZYvvUMDgHRCU.roa
File:                     tX5Obm32mu2pYvTZYvvUMDgHRCU.roa (raw, json)
Hash identifier:          pJYr21zhiqORuW6Cnt4nviTkyYeCWbrvXCJthxIw4gE=
Subject key identifier:   B5:7E:4E:6E:6D:F6:9A:ED:A9:62:F4:D9:62:FB:D4:30:38:07:44:25
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187DAF8121D0286836E39994B95192D78D3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tX5Obm32mu2pYvTZYvvUMDgHRCU.roa
Signing time:             Tue 02 May 2023 05:38:23 +0000
ROA not before:           Tue 02 May 2023 05:38:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211659
IP address blocks:        2a0e:97c0:261::/48 maxlen: 48
                          2a0e:b105:121::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:da:f8:12:1d:02:86:83:6e:39:99:4b:95:19:2d:78:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May  2 05:38:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b57e4e6e6df69aeda962f4d962fbd43038074425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:70:8b:6f:06:bb:56:80:43:80:cd:47:59:9b:
                    6a:9b:43:3f:9d:7e:20:73:5d:a7:46:e1:91:c8:5e:
                    9e:8c:9e:55:e4:97:8a:6f:cd:fe:83:80:d8:44:d4:
                    06:ea:69:a0:2f:e5:e4:4c:8a:03:12:b9:b7:42:9d:
                    03:b3:09:ef:2c:21:c1:7e:83:ba:e2:64:bf:1d:6e:
                    54:1d:c0:c1:ab:b1:60:f4:39:9c:75:ec:a1:00:e1:
                    f6:d8:56:c7:78:6e:3a:30:1e:5a:c6:b1:cb:c9:f2:
                    b4:fb:ac:bd:cc:2e:95:04:f1:96:e0:2d:f5:05:9f:
                    9f:a2:e1:e6:44:4c:f4:cf:fc:fd:ad:d3:fc:89:fa:
                    ce:bf:56:29:f5:2c:f5:97:ac:52:16:5c:11:1c:05:
                    71:b8:4c:4b:0f:ee:98:a7:ab:6c:a9:82:93:39:e6:
                    69:ba:fb:78:c0:3b:a7:31:2c:77:94:06:00:29:b9:
                    56:53:42:32:6b:85:d7:a4:c3:f5:15:e7:13:99:79:
                    db:05:5c:7e:f0:68:24:48:21:77:f8:0a:5f:c5:f8:
                    72:f3:36:b7:6b:fd:f8:c0:b1:14:9c:e5:5d:8e:33:
                    ae:c2:8c:9a:b1:17:b0:9c:02:dc:11:cc:a4:55:49:
                    30:9e:cf:1d:c4:39:7b:43:0f:51:46:51:0f:99:59:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7E:4E:6E:6D:F6:9A:ED:A9:62:F4:D9:62:FB:D4:30:38:07:44:25
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tX5Obm32mu2pYvTZYvvUMDgHRCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:261::/48
                  2a0e:b105:121::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:ac:08:d0:21:54:8a:ca:dd:2a:ef:5c:51:18:c1:9d:84:cd:
         7d:aa:ba:45:c7:eb:0b:2c:a6:00:26:87:3d:23:72:95:0d:f1:
         b8:95:f7:ae:02:9c:ae:1d:e0:3e:c0:3d:19:57:6c:94:95:4c:
         4f:c7:3f:42:38:a2:a6:39:88:9a:4e:8e:4d:54:c1:9e:0e:34:
         4b:1c:23:76:f7:a1:ca:07:49:c1:ea:3f:85:c6:97:08:a1:7f:
         5e:3a:69:ed:53:7d:c9:6e:6c:f0:b2:a3:11:20:a0:ca:23:b0:
         f1:44:bc:2d:4b:b9:e6:9f:50:e3:bf:48:44:f2:bd:b1:db:fe:
         ab:c4:69:e9:87:2a:6d:87:ef:df:33:ab:43:57:85:b0:dc:a4:
         42:c6:0e:2a:9b:42:c4:a9:12:e9:aa:17:d9:05:3d:15:8a:dc:
         c8:89:2e:e0:43:28:66:1d:5c:ae:d5:f0:fd:70:64:dc:b0:e4:
         fb:e3:be:72:2d:b3:c2:09:44:82:20:a3:cc:c1:98:d9:c2:bf:
         44:0f:ac:c1:c9:b4:8a:a6:7d:7d:b9:2f:19:41:e7:02:d1:f5:
         88:31:10:c0:97:57:b2:4e:79:b6:13:d3:3f:81:5b:d7:f5:de:
         ba:cf:96:9d:5d:f1:fb:c0:19:52:e7:f1:54:28:2c:3e:fd:ce:
         99:a7:03:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----