Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x7z-yecv2k6_LUeVxhlhsdnJ4yg.roa
File:                     x7z-yecv2k6_LUeVxhlhsdnJ4yg.roa (raw, json)
Hash identifier:          yT8d2gXKGvxY+mNyVVRyOEcwtuRvGm2cQ5O/Z8NAq5I=
Subject key identifier:   C7:BC:FE:C9:E7:2F:DA:4E:BF:2D:47:95:C6:19:61:B1:D9:C9:E3:28
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CAEC954D8F8D999F5E93D31470D184F63
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x7z-yecv2k6_LUeVxhlhsdnJ4yg.roa
Signing time:             Thu 28 Dec 2023 04:57:59 +0000
ROA not before:           Thu 28 Dec 2023 04:57:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400904
IP address blocks:        2a06:de01:501::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ae:c9:54:d8:f8:d9:99:f5:e9:3d:31:47:0d:18:4f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec 28 04:57:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c7bcfec9e72fda4ebf2d4795c61961b1d9c9e328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:f5:df:8c:6b:9f:2a:99:83:19:7d:eb:7a:
                    ea:1e:58:b8:13:f7:b2:c5:f9:13:a3:b8:de:c8:ce:
                    63:50:12:e5:06:ba:77:2a:1b:d3:01:24:59:c4:70:
                    3e:15:b8:26:f7:96:2a:08:94:b0:de:98:6c:96:cf:
                    42:12:0f:92:28:fe:64:d0:e7:20:86:0d:f6:f5:dd:
                    57:2c:4b:a9:2d:ba:39:25:3c:c2:8f:65:4d:1e:07:
                    6a:32:83:34:90:86:10:11:71:c4:55:f4:ed:17:63:
                    69:46:e9:44:c2:c3:98:a9:11:b3:45:9f:c7:2e:fa:
                    c8:65:42:2c:1d:f8:8e:95:e9:9a:19:29:69:ba:c1:
                    a3:09:82:7e:c7:e3:2b:b6:f9:2d:f8:9a:4a:8c:91:
                    32:b3:73:1f:6a:48:c0:18:44:9e:df:6a:c7:83:09:
                    87:cc:d0:9c:c7:d3:cf:f3:d3:f6:30:9a:11:6e:64:
                    8d:c2:d8:30:1e:1c:4d:29:33:ff:01:8d:58:1e:2c:
                    e6:48:1d:11:ca:45:a0:23:9d:62:9c:1e:af:94:2d:
                    97:d7:35:94:d4:57:19:a6:12:e0:ef:68:a0:cf:2c:
                    2a:ca:45:db:db:b5:5e:3e:56:bb:a1:f6:b5:a4:95:
                    cf:c3:6a:20:46:11:4e:ab:fe:d0:f8:90:4c:e8:b5:
                    48:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BC:FE:C9:E7:2F:DA:4E:BF:2D:47:95:C6:19:61:B1:D9:C9:E3:28
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x7z-yecv2k6_LUeVxhlhsdnJ4yg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de01:501::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:6e:e2:3a:4c:15:87:b8:74:b8:87:36:0e:1a:40:c0:00:
         0d:e5:56:92:75:af:af:98:f7:fc:4d:30:86:9a:43:f2:3a:c2:
         55:0c:53:95:f4:d9:56:4f:81:28:26:89:b3:3d:8a:9c:2f:ea:
         a0:b8:84:da:e4:78:3e:0b:1c:3e:55:43:aa:0f:eb:69:1e:20:
         63:c3:06:29:3a:09:8d:7f:2b:3f:49:a8:f5:3d:29:35:22:f4:
         b5:fd:60:c0:e6:5a:44:9d:1f:79:b9:f6:57:eb:bb:f0:46:3d:
         3d:a1:2c:7c:5f:a5:c3:7c:1a:77:20:ce:3b:4e:7f:4d:ff:cd:
         f7:48:73:ca:5b:8f:eb:29:23:17:a0:86:30:30:35:89:17:6a:
         c9:c5:bb:4c:fd:d4:18:cc:3d:5e:9e:2c:dd:f4:ea:4a:f5:8e:
         15:e4:68:08:2a:67:31:b9:0f:d2:05:ce:ab:7d:d1:53:81:f5:
         4b:57:8f:7b:66:f1:85:ff:04:06:75:4b:fb:a4:8d:21:a2:e8:
         53:49:69:c4:a5:bc:e3:6c:b5:a0:bd:87:0b:28:ff:92:df:68:
         b4:33:62:87:54:53:d5:54:5a:87:52:c0:1e:21:4c:09:17:b6:
         95:e5:52:49:1d:78:ee:39:c4:40:0b:bb:aa:58:63:56:86:bd:
         a5:3e:06:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----