Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v-9JB1wMBfSIdo0GTKAJtcLB4P4.roa
File:                     v-9JB1wMBfSIdo0GTKAJtcLB4P4.roa (raw, json)
Hash identifier:          UO/dBpfTGx8Nhb9Ytmvbh5zbbYGGsIQYpvSwz2ip/MM=
Subject key identifier:   BF:EF:49:07:5C:0C:05:F4:88:76:8D:06:4C:A0:09:B5:C2:C1:E0:FE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018675992D2CB74615598A5713EB1125E9FB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v-9JB1wMBfSIdo0GTKAJtcLB4P4.roa
Signing time:             Tue 21 Feb 2023 20:10:18 +0000
ROA not before:           Tue 21 Feb 2023 20:10:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210397
IP address blocks:        2a0e:97c0:780::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:75:99:2d:2c:b7:46:15:59:8a:57:13:eb:11:25:e9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 21 20:10:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bfef49075c0c05f488768d064ca009b5c2c1e0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f1:ef:7b:9f:9f:1a:2d:09:74:3c:bf:5b:1e:
                    c2:9e:12:76:9f:39:10:9b:f4:4d:d9:a0:a5:c5:e3:
                    96:4a:33:47:f9:0f:87:7a:f0:ea:a9:61:20:7c:fe:
                    4e:5b:ca:88:db:e1:6f:4b:8e:a7:4a:e5:e4:ec:f6:
                    e4:8d:6f:6f:16:36:70:b3:7f:26:3c:56:80:f8:46:
                    09:f9:8a:55:a7:e1:3f:92:19:11:30:bf:f9:63:1c:
                    b0:27:3b:fa:9c:09:fb:01:d2:ea:b2:25:c6:c9:69:
                    4d:d0:63:ad:f1:bb:08:cc:30:71:5a:61:a1:af:cc:
                    3f:87:5c:51:d3:67:b2:0e:79:92:20:1b:51:5d:69:
                    58:70:7d:da:6f:f6:9b:ef:91:a1:6b:73:46:66:84:
                    7f:a3:4f:3f:00:ca:f8:53:e7:81:27:cf:b5:93:1c:
                    37:43:ca:51:dc:f3:7e:73:ef:09:aa:17:30:51:03:
                    c4:2e:02:c6:8a:c4:4b:a2:7f:44:73:5d:6f:b6:0b:
                    5e:f1:4b:f7:4e:b4:e9:71:63:27:b1:3b:63:ba:1c:
                    f8:fe:f3:a2:d1:46:b5:04:35:23:a8:ea:0c:46:9f:
                    c0:aa:9f:e7:d1:06:c1:b4:85:7d:7c:35:6d:de:b6:
                    39:71:28:d1:6a:05:41:c5:63:83:26:9f:20:1d:06:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EF:49:07:5C:0C:05:F4:88:76:8D:06:4C:A0:09:B5:C2:C1:E0:FE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v-9JB1wMBfSIdo0GTKAJtcLB4P4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:780::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:22:63:15:b1:d9:5d:d7:5e:5c:4a:80:d6:fb:81:56:d0:12:
         1b:12:ea:5f:50:7e:a8:5b:19:3b:74:e5:26:c1:c2:94:82:d7:
         16:d4:a7:a3:4a:d2:74:a9:af:07:f3:45:d3:97:ff:13:e7:0d:
         94:65:9d:cd:1a:f2:9c:fb:25:23:57:22:13:c1:2f:eb:db:15:
         cd:eb:79:73:09:7d:14:2b:16:58:ed:38:39:78:5c:c6:c6:e9:
         d5:2c:41:d1:a0:c0:7c:70:44:0c:e7:cd:f8:59:b9:2b:99:59:
         31:b2:72:10:b8:f2:6a:d5:7e:ce:7d:55:87:f2:72:55:c6:ee:
         ad:44:01:35:fa:9b:0a:e4:2a:93:c6:a7:53:9c:78:b5:87:bd:
         9c:38:d0:5b:ad:a7:5c:ca:35:c6:a0:4a:ab:6a:46:f1:3e:98:
         7d:d3:e0:a1:cc:d2:78:a0:e2:71:82:f2:bf:55:d5:51:9a:17:
         60:b0:37:a4:17:38:0d:dc:fa:67:4c:94:71:1d:ef:fa:4c:c6:
         df:d7:67:95:5b:99:f8:65:bb:a2:d5:53:ed:9a:09:5f:13:29:
         6e:e4:e1:a8:4d:52:54:17:b2:fb:7d:d4:1e:06:26:b6:59:af:
         2c:4a:4b:01:ab:0f:42:4e:15:bd:d5:e9:e1:13:f8:4f:29:f4:
         43:78:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----