Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xo9-QcvgowmskMUY7_gZQHRrQcA.roa
File:                     xo9-QcvgowmskMUY7_gZQHRrQcA.roa (raw, json)
Hash identifier:          k493jOeQ5/bet/8eqCpvUxqE4i/x/WY6a2sHoKvfRsE=
Subject key identifier:   C6:8F:7E:41:CB:E0:A3:09:AC:90:C5:18:EF:F8:19:40:74:6B:41:C0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185ABECEF1A1BA04861F9935A0186E8B74B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xo9-QcvgowmskMUY7_gZQHRrQcA.roa
Signing time:             Fri 13 Jan 2023 16:18:29 +0000
ROA not before:           Fri 13 Jan 2023 16:18:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a0e:b107:19a0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ab:ec:ef:1a:1b:a0:48:61:f9:93:5a:01:86:e8:b7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 13 16:18:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c68f7e41cbe0a309ac90c518eff81940746b41c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:92:df:fd:01:9a:70:27:05:8c:b8:d0:b0:
                    cf:ca:12:2a:07:53:0a:53:5b:f3:17:4a:c5:6c:db:
                    94:21:82:a3:1e:37:45:98:4c:3c:96:91:fb:9d:41:
                    02:1d:60:40:f3:55:b3:e7:da:f2:e1:31:04:36:6c:
                    bc:e4:8b:0a:97:38:24:59:b9:9b:44:35:d7:ff:65:
                    86:e4:df:3e:e3:82:4f:7b:6d:45:39:09:6d:1c:ce:
                    b6:d7:41:2f:21:f5:df:dc:9e:4a:dc:5b:18:5a:ac:
                    fb:38:40:ce:c5:e8:d6:2d:16:70:b1:17:b3:b1:18:
                    45:32:38:db:d3:c9:06:60:ba:85:e6:aa:86:0f:02:
                    e9:52:13:60:91:c0:75:01:4b:d1:1c:02:48:71:dd:
                    c3:62:38:ab:db:c7:34:01:c2:8e:da:75:dd:d9:5b:
                    8b:c6:67:13:5c:a3:56:6f:cc:49:6c:7b:d3:91:a1:
                    f0:4c:f9:b4:08:7f:76:30:76:bd:49:81:51:d9:5c:
                    76:7a:43:bc:56:f6:2d:f2:3b:37:e4:76:8c:e0:30:
                    c6:4e:48:1e:c1:57:a4:e4:4f:01:5c:f6:21:46:92:
                    60:52:89:0c:cf:a2:6a:46:dd:dc:bb:93:c3:7a:bf:
                    1b:9b:73:e1:f9:17:3d:7e:2c:88:44:54:6a:bc:40:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8F:7E:41:CB:E0:A3:09:AC:90:C5:18:EF:F8:19:40:74:6B:41:C0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xo9-QcvgowmskMUY7_gZQHRrQcA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:19a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:f8:43:a4:76:f7:c8:4f:a5:43:c8:5e:95:bb:f1:37:8f:b1:
         d7:4a:4f:3b:3d:32:9c:c9:c0:ef:53:e5:8b:82:01:fb:67:57:
         41:d6:05:44:4d:31:37:93:28:d5:8a:7f:4b:84:d0:44:02:5d:
         d9:58:b1:a2:35:5c:ec:4b:8e:e0:17:f4:00:48:b6:4b:f0:6f:
         05:c3:26:28:82:6d:23:cc:6d:8c:56:dd:8f:a6:0a:70:1b:2d:
         e0:88:da:f2:91:fc:01:6b:20:d5:1d:32:5e:64:1c:e4:86:df:
         e3:c9:c5:52:5a:29:2e:4a:0b:5d:a3:54:ef:a6:37:e9:7d:ce:
         13:fe:68:8f:5e:aa:23:ee:be:9b:43:39:6c:4e:9a:7b:19:0b:
         64:7f:8f:aa:bb:29:7c:0a:0c:13:52:27:50:fc:53:4d:26:ed:
         df:13:8a:93:ed:05:53:82:95:24:5a:cf:57:76:ae:30:13:70:
         cb:64:5a:de:84:68:fd:d0:e5:8b:f9:40:c5:76:3f:e6:3c:72:
         2b:35:45:df:e9:6d:64:7b:ed:9a:02:e9:f0:fc:9f:98:df:0e:
         dc:57:d8:f8:3b:b9:4c:b0:22:5f:0a:a5:58:8d:20:ae:ea:4a:
         8e:dc:24:f3:b2:3f:de:87:af:c1:ed:6d:77:42:99:c6:18:90:
         a5:5d:8b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----