Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vDtxqI2yc5z-cWEGGo1Ib7T7rtw.roa
File:                     vDtxqI2yc5z-cWEGGo1Ib7T7rtw.roa (raw, json)
Hash identifier:          MPeDJaA7iLWdRWnNenyIXj6wcZ0QjAiz0VhMROsHgfk=
Subject key identifier:   BC:3B:71:A8:8D:B2:73:9C:FE:71:61:06:1A:8D:48:6F:B4:FB:AE:DC
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018B2D9C3DFB7FA0568B93070F4CCCA7CADC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vDtxqI2yc5z-cWEGGo1Ib7T7rtw.roa
Signing time:             Sat 14 Oct 2023 09:54:56 +0000
ROA not before:           Sat 14 Oct 2023 09:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216182
IP address blocks:        2a0e:97c0:dd0::/44 maxlen: 48
                          2a06:de01:80::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:2d:9c:3d:fb:7f:a0:56:8b:93:07:0f:4c:cc:a7:ca:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 14 09:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc3b71a88db2739cfe7161061a8d486fb4fbaedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:74:1e:c4:3f:8b:69:d0:d9:ea:35:28:e2:
                    ef:e6:b8:c1:ab:b8:e5:96:55:cd:ff:61:36:a9:8a:
                    d6:9c:5e:6d:a2:59:a5:64:17:2a:4e:4b:50:85:ea:
                    9a:1f:f8:af:23:99:a6:e8:40:26:eb:0a:2f:09:0b:
                    34:a3:e6:ad:d9:a3:f1:4d:15:e2:62:63:2d:27:4b:
                    53:06:67:d5:e2:21:3c:03:1a:40:75:6a:a6:0f:84:
                    ce:d9:9b:d9:3f:19:37:38:a6:36:db:dc:56:f2:55:
                    f7:9b:ce:98:b8:17:7f:ae:89:16:e4:ae:d9:8c:74:
                    c0:7a:15:ed:09:58:cf:b3:75:d2:23:40:cf:f3:19:
                    96:77:75:03:00:cc:32:f9:b9:d3:55:5d:3e:57:a3:
                    81:83:62:fa:3b:6a:1a:b1:ce:1d:c9:21:16:76:2c:
                    51:5c:50:1a:7d:87:3f:44:87:06:da:50:13:c1:d5:
                    28:1f:3b:3b:06:85:e9:f5:98:b0:f7:14:7f:a3:e1:
                    86:14:a4:60:7e:48:e2:27:d9:95:87:6b:ce:c4:17:
                    2b:bb:3e:e2:60:43:94:74:71:68:ea:b1:2f:9f:ac:
                    00:da:1c:c2:c0:52:4b:73:eb:64:c1:33:4c:cf:14:
                    8f:1b:3f:11:94:f2:85:80:73:e5:ad:bf:e8:e0:31:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3B:71:A8:8D:B2:73:9C:FE:71:61:06:1A:8D:48:6F:B4:FB:AE:DC
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vDtxqI2yc5z-cWEGGo1Ib7T7rtw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de01:80::/44
                  2a0e:97c0:dd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:6d:e3:9a:af:d2:4c:9b:cd:fa:94:e6:f6:0f:9d:65:bb:af:
         fd:6b:a6:cb:4f:63:73:3b:f9:5a:f0:11:a4:34:3e:8e:a9:8c:
         65:db:03:c9:7e:fd:3e:d5:db:50:cd:a7:ce:2a:3a:ea:15:9e:
         99:4c:25:20:ad:cd:72:9a:28:43:9c:ad:e4:53:1d:bd:02:4c:
         c7:87:a0:32:1f:81:cb:65:80:1e:e6:c9:57:40:57:e8:61:ab:
         3a:c9:c4:ac:08:c5:b6:d4:71:61:77:df:c8:a1:a2:1c:b5:80:
         99:e3:70:d4:78:0c:3c:84:ca:a9:c9:68:98:b4:c9:e2:82:e7:
         bc:e3:7b:7f:d9:df:63:2e:1e:6a:65:63:b0:92:64:b2:70:57:
         22:63:94:ef:9d:a3:01:d3:a0:5e:8f:19:c8:95:a2:62:05:e2:
         39:d6:0b:f9:f1:33:7c:f9:9f:01:57:b4:77:95:82:b6:a0:82:
         50:2b:5e:43:a1:17:be:73:66:f8:95:6f:d3:df:38:26:93:1d:
         2e:78:9f:43:11:e7:80:5e:54:e6:db:1e:1d:32:68:07:c8:5b:
         4c:f4:d3:91:d8:18:22:d3:fa:4c:c6:4a:28:3d:31:6e:c7:46:
         cd:2c:66:8f:fa:e7:68:57:b3:be:9a:37:99:ef:1e:61:eb:1b:
         05:5d:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----