Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/td85pweN0KFb_bNkwsXX1PQsgrg.roa
File:                     td85pweN0KFb_bNkwsXX1PQsgrg.roa (raw, json)
Hash identifier:          MH5ULh/XznCBJnTdvbsKGI8s5YmgoW/6yGd9XIkwy44=
Subject key identifier:   B5:DF:39:A7:07:8D:D0:A1:5B:FD:B3:64:C2:C5:D7:D4:F4:2C:82:B8
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185A4A7E8359F70F7CE6682824FA3E03D5B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/td85pweN0KFb_bNkwsXX1PQsgrg.roa
Signing time:             Thu 12 Jan 2023 06:25:45 +0000
ROA not before:           Thu 12 Jan 2023 06:25:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a0e:b107:19a0::/48 maxlen: 48
                          2a0e:b107:13b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a4:a7:e8:35:9f:70:f7:ce:66:82:82:4f:a3:e0:3d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 12 06:25:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b5df39a7078dd0a15bfdb364c2c5d7d4f42c82b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:23:6a:f8:35:b2:be:f2:cb:c5:58:aa:f6:
                    79:96:66:da:60:18:00:5c:38:f6:f2:d7:24:f0:5a:
                    41:7b:ec:50:d2:8e:10:50:7d:ed:63:c3:ec:04:c9:
                    7a:43:3f:86:7b:0d:fc:5f:e2:c4:71:c8:8d:4f:68:
                    9f:68:7c:0f:f9:1a:bf:08:e8:1f:e2:9e:23:30:58:
                    16:25:e2:f9:94:6a:fd:de:54:d3:68:8c:18:78:af:
                    18:95:95:f2:60:66:5a:54:d1:a2:eb:7d:e7:3f:99:
                    ed:6b:a3:1a:19:4d:f2:96:dd:5d:fd:e6:42:7e:7f:
                    64:a3:d8:53:6b:44:72:bf:0e:0b:a1:85:42:74:78:
                    86:bd:97:d2:5a:b4:43:1b:ff:2d:b0:d3:2e:b1:57:
                    ca:6f:93:ba:27:c8:24:a0:a8:bf:1a:26:3b:d9:ac:
                    ef:0e:02:b8:18:39:f9:ef:15:bf:e4:b4:2e:80:6a:
                    eb:16:4c:97:8e:64:e1:a7:e4:b6:a8:b1:22:74:56:
                    64:ec:4c:66:cb:82:61:b0:f7:eb:33:66:92:7c:1e:
                    1e:a3:c8:ec:3f:8a:5c:c5:48:bf:80:90:fd:7e:86:
                    c7:24:fd:3d:4f:ce:f2:e8:40:95:d9:aa:94:46:3e:
                    aa:e1:55:72:4c:96:f7:a7:21:cb:4c:84:5f:1a:7e:
                    c1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DF:39:A7:07:8D:D0:A1:5B:FD:B3:64:C2:C5:D7:D4:F4:2C:82:B8
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/td85pweN0KFb_bNkwsXX1PQsgrg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:13b::/48
                  2a0e:b107:19a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:d3:b2:f1:d0:81:5d:2c:bf:95:ae:a1:49:20:84:69:09:26:
         7c:d9:74:ee:81:c2:f9:29:8a:56:4d:03:9f:51:f5:71:e7:67:
         ee:08:9f:c2:12:b3:fa:0a:16:8b:13:6a:60:2f:28:a3:a5:2b:
         a9:a6:4c:73:f1:ec:58:b0:08:99:80:14:9d:a5:99:83:f0:bf:
         53:31:b7:ae:a9:59:05:4d:6e:3f:d8:0f:d5:fb:5c:e4:5d:56:
         e9:ee:01:56:eb:fb:d6:1a:63:06:aa:57:0e:57:00:4c:3e:ee:
         77:d0:37:27:b3:75:0d:fc:6c:71:88:da:a8:04:68:85:14:b3:
         0e:62:95:3d:c3:b2:d1:88:b5:6f:d8:69:f5:75:ee:d2:fa:bd:
         fa:28:d2:40:75:d5:c7:bd:af:2d:68:62:c0:43:ef:88:4e:a3:
         e7:6b:cc:b6:b8:f0:ee:7b:43:c7:d9:74:58:ea:09:76:26:e1:
         8d:fb:1b:ce:51:df:6e:79:d5:af:ca:9b:97:5a:e5:72:86:74:
         a8:3d:86:b5:85:da:17:f0:6e:21:b1:22:ed:e2:fa:12:b4:da:
         25:32:89:77:bf:a1:97:61:40:ed:b5:c5:e6:d4:3c:bf:d8:48:
         24:08:80:41:a4:de:50:64:c2:3f:78:16:39:10:8e:40:ce:f8:
         83:7e:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----