Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wBQMiiso2NERUMUx4K_q38VCvyA.roa
File:                     wBQMiiso2NERUMUx4K_q38VCvyA.roa (raw, json)
Hash identifier:          A/s5/8VzJJNoSQr6p30St4mwnwng5iXTvM2GHEZGalI=
Subject key identifier:   C0:14:0C:8A:2B:28:D8:D1:11:50:C5:31:E0:AF:EA:DF:C5:42:BF:20
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187B3033059883D15BFDC355455637EA67A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wBQMiiso2NERUMUx4K_q38VCvyA.roa
Signing time:             Mon 24 Apr 2023 11:25:43 +0000
ROA not before:           Mon 24 Apr 2023 11:25:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204160
IP address blocks:        2a0e:97c0:b70::/44 maxlen: 48
                          2a0e:97c0:b77::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b3:03:30:59:88:3d:15:bf:dc:35:54:55:63:7e:a6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 24 11:25:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0140c8a2b28d8d11150c531e0afeadfc542bf20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:d2:2c:c7:36:2a:13:03:4f:5b:62:a5:cd:
                    52:04:5b:dd:ff:66:d1:e8:f8:a9:ad:3a:e1:69:ea:
                    0d:20:44:66:c3:bc:79:00:60:16:e6:f9:07:d7:d0:
                    3a:24:af:11:23:50:d8:96:42:46:b9:76:8b:e9:23:
                    ab:7f:6c:e6:35:80:0c:a3:f5:ae:db:b5:7d:76:c7:
                    ef:02:90:cd:ec:31:86:d1:d6:0c:2f:5d:3a:da:1d:
                    6d:b8:52:4c:f3:f1:9e:ee:80:19:05:17:68:79:ab:
                    d4:c3:48:52:b0:95:24:c3:7e:c6:ab:30:94:ee:a9:
                    81:aa:32:a1:a6:87:77:77:e7:bb:15:bb:e8:ba:4e:
                    82:31:96:8e:fa:7e:7b:cf:ac:e5:21:35:5c:7c:3a:
                    1f:44:39:7e:9d:d9:3b:68:33:b6:60:72:19:32:69:
                    53:80:b5:5d:77:22:af:7f:7f:da:40:d5:de:dd:de:
                    88:35:95:d6:59:8d:f0:f5:86:f2:4c:a0:28:c3:ba:
                    23:d6:84:13:01:d3:f1:e1:51:d1:13:3a:b9:cf:c6:
                    c0:2f:db:d9:35:9c:ab:60:77:bd:30:31:52:ff:b1:
                    09:21:bd:92:04:e6:67:6e:c3:7c:ce:b9:3e:fa:07:
                    5b:9d:03:d3:cd:0a:b3:8b:9e:05:c8:da:95:d2:a3:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:0C:8A:2B:28:D8:D1:11:50:C5:31:E0:AF:EA:DF:C5:42:BF:20
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wBQMiiso2NERUMUx4K_q38VCvyA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:b70::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:dc:9b:d5:d7:45:68:f0:04:a5:0b:d1:a5:fe:32:2a:b2:4e:
         4b:5c:be:cd:58:42:c0:16:dc:2f:6b:58:12:74:54:7c:e1:27:
         d6:28:91:cc:7b:0e:69:2c:d7:ea:d8:da:8d:c0:a2:f0:e5:30:
         1e:42:e6:ea:50:8f:fe:d8:ed:c0:2e:17:72:26:d9:ea:fe:34:
         2b:4b:27:2c:1e:05:7b:d0:75:af:e8:40:e7:39:2c:7f:08:14:
         e4:fb:a5:b0:05:c0:f3:a2:b5:c2:7f:28:93:06:04:ae:fe:87:
         c9:e2:50:01:45:9d:a9:27:67:cb:53:6c:38:7e:fb:83:5c:e7:
         4b:15:63:58:d1:5b:26:57:f2:96:a3:bc:08:4e:44:98:50:b4:
         c8:e5:0e:25:be:53:6a:82:52:cf:c1:71:45:08:6e:07:d1:0d:
         27:20:f1:73:ee:c7:32:87:e5:3c:2c:71:c7:cb:e1:1c:1c:62:
         94:07:f0:28:69:2a:0d:e7:b9:89:8f:31:4c:72:03:eb:09:92:
         5e:c0:75:d5:ff:8c:f3:6e:b5:8f:e7:9f:f6:60:87:8c:f7:25:
         52:7e:6b:7f:61:97:a3:a0:1f:b1:91:71:53:c0:5e:b5:de:50:
         cf:29:3e:5f:f3:dd:e2:ef:17:2b:22:fd:0c:77:26:c1:0d:d4:
         e7:26:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----