Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wPHOaYOWnwp-51hea8ZcFinmTxs.roa
File:                     wPHOaYOWnwp-51hea8ZcFinmTxs.roa (raw, json)
Hash identifier:          JeyqO3tqRsRpixaCWo8qHw3J90IywqBTjAh4Se9ghIc=
Subject key identifier:   C0:F1:CE:69:83:96:9F:0A:7E:E7:58:5E:6B:C6:5C:16:29:E6:4F:1B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01867A7ADD3A601ABB5AD15BBA175A818827
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wPHOaYOWnwp-51hea8ZcFinmTxs.roa
Signing time:             Wed 22 Feb 2023 18:55:17 +0000
ROA not before:           Wed 22 Feb 2023 18:55:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210397
IP address blocks:        2a0e:97c0:78f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7a:7a:dd:3a:60:1a:bb:5a:d1:5b:ba:17:5a:81:88:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 22 18:55:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0f1ce6983969f0a7ee7585e6bc65c1629e64f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:62:ff:5e:ad:30:58:c0:30:a6:bc:5c:e9:
                    1c:59:c4:d9:b3:bf:c9:71:16:3b:0f:7b:03:ff:0a:
                    54:1a:a8:15:98:3f:a4:94:85:71:6d:4e:1d:dd:cc:
                    84:a8:f2:9d:92:df:42:e7:93:ff:26:0e:f6:72:4c:
                    2c:24:c3:bb:b4:31:a3:3b:ef:82:d1:54:64:1e:27:
                    7b:9c:bc:66:45:50:1a:f5:07:46:8c:fc:48:08:86:
                    d6:7e:a4:95:8f:8b:fe:2f:c9:90:c8:77:51:18:14:
                    14:1c:44:cb:87:64:35:a7:e2:f4:48:df:12:f4:0f:
                    3d:bd:14:a0:0c:c7:f1:c3:34:33:52:db:d3:b5:cf:
                    01:16:21:bf:0c:3d:f4:ba:64:2a:9f:37:9b:62:a3:
                    4f:c3:37:79:d8:b7:78:73:3e:c4:4f:d5:79:47:77:
                    f8:aa:ff:73:84:b2:c0:d1:02:41:27:13:be:f5:6f:
                    1b:29:0a:b9:d8:45:c0:6a:2a:70:b5:aa:af:2f:5d:
                    6b:6d:7b:6b:a7:2a:5c:b5:97:a7:11:eb:45:10:e1:
                    34:a0:f1:42:27:12:2e:83:14:3f:74:3a:65:41:79:
                    6e:23:5f:32:4d:0b:f3:30:76:e8:55:63:c3:0c:3e:
                    11:42:d2:fc:5c:68:33:a9:b5:3e:04:2e:72:08:d5:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F1:CE:69:83:96:9F:0A:7E:E7:58:5E:6B:C6:5C:16:29:E6:4F:1B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wPHOaYOWnwp-51hea8ZcFinmTxs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:78f::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:b7:02:a9:53:95:74:a5:61:2d:ce:a8:ad:0e:61:b0:15:50:
         6d:6b:09:70:4d:a5:e2:94:b8:db:0a:4d:0e:60:3c:aa:4d:e9:
         80:9b:30:3c:d9:cb:c5:09:8f:6f:19:50:fa:da:22:b2:4a:b9:
         a3:67:0d:71:88:db:5a:c8:7b:94:be:d1:8e:fe:bc:60:da:b0:
         3a:a4:0d:05:04:e3:dc:15:9b:70:02:23:13:61:0a:fa:d2:b4:
         9c:6f:8b:20:a9:9b:45:ed:62:fe:f0:4b:6c:aa:1f:e6:33:7f:
         25:41:10:22:2d:b3:59:e9:3b:2e:42:a6:9b:be:d8:81:9a:21:
         64:b1:5a:b6:92:3f:00:32:3a:8a:8e:20:84:cd:ea:60:b8:9d:
         dd:83:69:e3:f8:e4:94:96:e0:0c:b2:3a:55:7a:d7:2a:2f:1b:
         77:d8:4d:06:75:65:09:9a:2f:9e:d1:53:98:4c:d1:69:77:a2:
         cc:14:cf:0c:e0:dd:93:25:02:53:5d:e6:7b:60:02:86:dd:41:
         6b:d9:ed:ac:42:6c:a4:80:08:aa:3d:25:be:6f:3d:f3:73:68:
         f1:db:95:59:cf:a0:f1:ce:6f:83:ea:a7:6b:d0:7e:8d:84:72:
         6f:9e:ed:48:74:fa:83:12:d9:74:f1:4f:12:05:66:cb:66:0b:
         14:27:d4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----