Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w-JqlFlWRA0-0OvC8N6fhKEJe8Y.roa
File:                     w-JqlFlWRA0-0OvC8N6fhKEJe8Y.roa (raw, json)
Hash identifier:          mol0eObmi4t7qjYqb1jA3Zy4Sbi1JXiuq1Wh89nDmlo=
Subject key identifier:   C3:E2:6A:94:59:56:44:0D:3E:D0:EB:C2:F0:DE:9F:84:A1:09:7B:C6
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187B8B4B12D8249CDB9E0E6D5F69FFD723C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w-JqlFlWRA0-0OvC8N6fhKEJe8Y.roa
Signing time:             Tue 25 Apr 2023 13:57:41 +0000
ROA not before:           Tue 25 Apr 2023 13:57:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207401
IP address blocks:        2a0e:b107:4e0::/48 maxlen: 48
                          2a0e:b107:4e2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b8:b4:b1:2d:82:49:cd:b9:e0:e6:d5:f6:9f:fd:72:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 25 13:57:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3e26a945956440d3ed0ebc2f0de9f84a1097bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:99:a2:7b:cd:59:a6:5e:fb:c3:12:23:dc:90:
                    53:86:19:fc:6d:e8:d7:2a:63:d3:fd:b7:33:3d:31:
                    c2:78:8d:f7:3e:36:68:15:fb:00:fa:c9:94:55:56:
                    ed:26:52:5b:6e:48:0f:1e:ee:15:fc:02:d2:ab:22:
                    0a:84:71:b8:20:6c:7f:9a:c7:f7:55:3f:01:8a:ca:
                    e8:f2:38:80:80:7e:2c:70:ae:51:aa:02:e4:02:97:
                    7e:ca:20:f9:44:df:b0:14:eb:c4:0e:a6:02:c2:3c:
                    c3:ea:21:47:b4:11:7c:e5:e1:b6:a6:9b:16:82:38:
                    46:9e:41:5e:d5:96:15:96:75:5a:3d:22:8d:f0:9d:
                    6d:09:2e:88:7d:ca:f7:9b:c6:c9:84:81:a2:54:34:
                    1a:46:bb:e0:04:6c:6a:a9:ca:98:a9:08:3d:41:72:
                    7d:12:e0:00:f9:6c:cb:b3:80:d2:a7:60:11:78:95:
                    79:39:a9:b5:4f:1d:e4:89:91:eb:cd:b5:9f:32:92:
                    26:b2:c2:6e:3b:07:89:b0:64:8c:14:03:d8:f2:ff:
                    ef:a7:53:d5:3f:04:e9:b1:0a:0f:b8:26:8f:87:0d:
                    40:71:93:f1:1b:09:b6:71:13:3e:b2:d8:b5:c4:99:
                    e0:6a:75:27:c9:a9:32:fe:67:be:ae:a2:4e:20:0e:
                    82:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E2:6A:94:59:56:44:0D:3E:D0:EB:C2:F0:DE:9F:84:A1:09:7B:C6
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w-JqlFlWRA0-0OvC8N6fhKEJe8Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:4e0::/48
                  2a0e:b107:4e2::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:5e:6a:a5:57:6d:9d:b2:f4:ce:75:24:3b:8a:d9:fe:44:ce:
         77:ad:32:bf:07:a5:66:24:62:66:df:94:0d:63:09:fa:96:b5:
         48:dd:9e:53:32:c8:f7:e7:f6:5c:16:b2:42:ba:7a:6c:81:b6:
         cd:b0:a0:d9:34:c2:83:bd:ca:4e:59:66:9f:1e:52:d7:27:25:
         ea:99:21:08:4a:f4:8b:29:94:c6:43:6a:1e:ad:4f:d1:52:1b:
         e7:fa:d5:65:5f:32:98:96:9b:f0:a9:ee:ca:97:b7:a7:0b:a1:
         19:db:08:2e:9f:2a:b1:0c:0b:07:b4:b7:45:ee:0c:58:1f:9d:
         d5:d5:a2:bc:6d:fe:c5:df:3e:df:99:51:19:fe:a7:c9:66:27:
         52:71:53:62:2b:f9:24:01:54:22:a0:ca:b6:f1:68:6c:a3:63:
         14:a4:0e:95:7f:80:df:b8:c2:37:3e:9d:cf:15:1b:7c:fe:2b:
         93:8c:a6:42:fd:0d:18:6e:a7:d6:20:11:5c:d7:d7:85:e6:a8:
         48:0e:4a:f9:04:d5:2e:40:bb:ba:44:0e:26:1c:3e:0f:a6:d4:
         de:c9:2c:5b:4b:ca:34:cb:11:0d:03:70:8b:4d:af:de:e8:d5:
         51:5c:c8:e2:17:85:17:08:70:2e:32:76:c6:05:27:2a:aa:4e:
         26:13:7f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----