Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y8jVn2KLC5QFxxGuDGDgwr6vc28.roa
File:                     y8jVn2KLC5QFxxGuDGDgwr6vc28.roa (raw, json)
Hash identifier:          DAgv5E+hcSS9E4hkyCns4DDqJDkojD0Xvm86JfZoMZ0=
Subject key identifier:   CB:C8:D5:9F:62:8B:0B:94:05:C7:11:AE:0C:60:E0:C2:BE:AF:73:6F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7E415C3FA45E1E82C8BAE97B09192
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y8jVn2KLC5QFxxGuDGDgwr6vc28.roa
Signing time:             Mon 02 Jan 2023 05:15:23 +0000
ROA not before:           Mon 02 Jan 2023 05:15:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210076
IP address blocks:        2a0e:97c0:6b0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:e4:15:c3:fa:45:e1:e8:2c:8b:ae:97:b0:91:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cbc8d59f628b0b9405c711ae0c60e0c2beaf736f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ea:33:8a:28:08:b8:83:2b:d6:9e:ee:86:46:
                    72:f2:27:26:4f:a7:b1:64:84:ca:37:eb:c1:a4:6c:
                    ff:b7:8b:00:bd:95:43:ac:0e:c2:ee:de:44:05:69:
                    54:43:dd:8d:3f:18:9a:b5:b7:c9:1d:5a:3f:f0:64:
                    3c:d2:26:04:89:00:c1:00:0a:c3:dc:89:71:26:a5:
                    59:11:19:9a:d9:ec:e3:59:f4:db:f4:61:f6:52:79:
                    a8:12:c0:b5:06:1f:4a:55:22:39:aa:23:ca:71:85:
                    78:b5:e5:ae:4d:e0:84:be:f3:4a:f6:b7:a7:47:9a:
                    a7:09:18:f4:a8:56:ce:e0:e3:fe:75:af:7c:f5:53:
                    94:8a:5d:50:30:83:50:7d:9d:92:8c:43:b4:da:ae:
                    b5:c2:64:f1:3a:e2:fd:41:7b:d6:89:d6:51:3c:ed:
                    a6:f1:63:4f:9e:fb:b6:23:ed:3a:87:ae:b8:02:ce:
                    6a:06:e0:6d:61:ec:fd:cb:99:dc:b7:4d:b6:73:fa:
                    f3:11:5d:29:27:32:c9:f2:63:b2:6e:38:50:46:66:
                    25:33:24:f3:1b:ce:33:a1:ce:e6:de:11:a5:f6:8b:
                    9b:05:31:d6:94:d5:2d:f1:be:ef:d2:64:2a:20:01:
                    7f:bd:df:7e:b2:9a:4f:fe:4b:75:14:40:14:50:a2:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C8:D5:9F:62:8B:0B:94:05:C7:11:AE:0C:60:E0:C2:BE:AF:73:6F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y8jVn2KLC5QFxxGuDGDgwr6vc28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:6b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:ae:c5:7f:9b:30:5b:4d:ab:e2:56:f1:0d:64:6e:bd:01:
         94:2f:2f:4f:6f:9d:20:e3:40:f8:9c:bd:bb:63:74:e5:da:c0:
         15:24:00:c6:fb:a6:ef:10:74:c6:7a:08:08:94:c1:de:26:12:
         70:57:02:78:12:45:84:e4:ad:82:f9:9d:09:2c:8e:3b:10:ec:
         b0:13:b3:7e:2e:ab:ce:eb:10:18:5d:6b:e6:d4:d8:d5:ae:4d:
         fa:83:da:80:67:51:d3:61:b6:b9:77:98:5d:b8:fa:45:29:7a:
         cb:ab:64:a1:ec:3f:01:f8:32:c2:a7:ba:40:dc:3e:0e:7a:83:
         b2:99:62:ca:6e:d3:0e:50:12:c2:95:e9:5a:17:33:17:6b:cb:
         9f:23:8d:88:0f:78:45:07:49:bc:fe:11:85:aa:e1:3f:9a:d3:
         a9:80:2d:e3:e8:2c:c3:35:fa:5b:f9:73:d8:e9:de:d1:7a:6d:
         41:36:3b:e6:d0:11:08:3b:52:cf:4a:de:41:8c:ba:c4:72:8a:
         90:82:5a:80:12:f9:8a:bc:39:c2:65:11:db:b4:8b:02:e1:65:
         82:51:b4:62:b2:bf:ec:db:4c:60:40:57:34:32:2e:d9:58:74:
         98:8e:d2:83:ce:fa:bc:31:35:77:9a:84:88:9a:c2:92:9c:44:
         5a:2a:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----