Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uwx8pIbQcT1NvpV_-FU1w2X9hbQ.roa
File:                     uwx8pIbQcT1NvpV_-FU1w2X9hbQ.roa (raw, json)
Hash identifier:          99ZrY9j9/vH+6urrwXzyjDKEAy8ynFd1WmqzZHogow4=
Subject key identifier:   BB:0C:7C:A4:86:D0:71:3D:4D:BE:95:7F:F8:55:35:C3:65:FD:85:B4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AEF6BB23781A90AEDC511C2F8D39A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uwx8pIbQcT1NvpV_-FU1w2X9hbQ.roa
Signing time:             Tue 24 Jan 2023 16:09:48 +0000
ROA not before:           Tue 24 Jan 2023 16:09:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210951
IP address blocks:        2a0e:b107:15d0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:ef:6b:b2:37:81:a9:0a:ed:c5:11:c2:f8:d3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bb0c7ca486d0713d4dbe957ff85535c365fd85b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:24:f4:77:9c:47:63:0e:44:0b:e8:74:0f:
                    11:b2:39:b7:1e:6f:86:52:d3:9b:a7:ca:ce:2d:81:
                    fa:31:83:42:dd:b6:76:d6:0d:ab:5b:0e:ce:d9:b8:
                    19:82:7b:dd:e8:39:f4:22:7c:c8:ea:10:da:4f:75:
                    be:76:86:2f:a7:d9:2d:56:d4:37:1c:8c:93:83:b4:
                    27:82:36:c5:e8:39:34:4f:d1:fc:04:94:0b:36:78:
                    eb:71:97:a1:e9:5e:92:f8:9f:a0:da:7e:e6:c7:4e:
                    2a:ed:f9:71:ad:9e:f0:e6:39:3a:2f:3c:bd:b8:b2:
                    eb:42:f3:b1:8e:01:e5:d4:80:a8:86:fc:6e:da:24:
                    23:b1:8c:ab:01:6b:1a:eb:ab:2b:ce:43:87:36:b9:
                    a6:68:76:6f:4b:07:57:5b:12:85:9c:67:7b:a9:73:
                    c4:34:ed:3e:28:29:0b:a6:91:40:eb:d8:aa:0d:56:
                    5c:1f:aa:21:ae:e2:29:67:28:b2:43:5f:de:e2:17:
                    6a:75:53:be:3e:41:d4:d1:0c:19:b9:da:bf:71:c7:
                    f2:71:32:de:95:f9:c5:18:30:9a:4d:c3:79:7d:42:
                    26:38:d9:d7:3c:82:c7:e3:e7:a4:47:4c:cd:dd:90:
                    1d:0a:bf:bc:e9:2b:50:48:85:46:ce:7a:65:df:dc:
                    61:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0C:7C:A4:86:D0:71:3D:4D:BE:95:7F:F8:55:35:C3:65:FD:85:B4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uwx8pIbQcT1NvpV_-FU1w2X9hbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:15d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         61:e0:72:d1:54:99:28:3b:90:3f:9e:bf:e6:ae:a7:6c:03:b5:
         34:2e:99:9e:13:cf:e6:b7:4d:cc:88:7c:55:44:4e:d1:d2:cc:
         64:49:ec:7f:28:49:c5:35:06:1d:c9:ba:57:7e:0a:cd:87:67:
         13:da:58:cc:7d:a3:b9:25:f5:a1:e7:b7:7c:19:7d:db:cb:44:
         75:c3:df:f1:64:01:50:4b:42:7f:98:86:43:5d:27:4c:15:94:
         ed:16:a4:69:47:9f:05:32:0c:2d:2b:f9:52:dc:b5:e6:64:6a:
         00:98:ff:00:4a:d9:8a:86:e6:98:2e:62:91:f2:76:75:20:44:
         b7:5a:a6:18:38:d0:9e:6d:2f:94:d1:b9:e6:fd:31:2f:6e:a8:
         d2:9e:13:76:ff:07:fd:6b:07:c2:19:bf:3a:e8:9d:50:54:e7:
         85:44:e6:c3:55:10:8e:9a:8e:26:82:6d:83:a0:df:d5:74:38:
         fb:84:95:56:61:de:16:39:04:9e:6e:78:7c:ed:89:1c:d6:c0:
         ef:33:49:70:9d:81:01:c4:45:cf:22:90:3c:39:1c:ee:c1:c4:
         95:6a:67:59:da:c3:41:f5:92:8e:6e:52:cb:1f:16:b7:1c:f6:
         75:30:70:74:e0:d8:0e:18:94:72:f5:84:9e:85:79:79:f3:e4:
         eb:50:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----