Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z6P1Y2w9euqEG-c1VWCXYIn3DyY.roa
File:                     z6P1Y2w9euqEG-c1VWCXYIn3DyY.roa (raw, json)
Hash identifier:          Zsa0+dBvLHX89nx7X3c+45vdyw5kOhQJ1YkcX1JAqIs=
Subject key identifier:   CF:A3:F5:63:6C:3D:7A:EA:84:1B:E7:35:55:60:97:60:89:F7:0F:26
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48B05C9162E10E3B0E388B3A58C5BA4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z6P1Y2w9euqEG-c1VWCXYIn3DyY.roa
Signing time:             Tue 24 Jan 2023 16:09:54 +0000
ROA not before:           Tue 24 Jan 2023 16:09:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212483
IP address blocks:        2a0e:b107:1be0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8b:05:c9:16:2e:10:e3:b0:e3:88:b3:a5:8c:5b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cfa3f5636c3d7aea841be7355560976089f70f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:15:70:b6:0b:cb:ac:ff:0b:d3:f7:eb:a5:
                    23:21:81:94:d3:91:4a:f5:b1:d4:0b:90:ba:66:f1:
                    ef:20:82:0b:23:21:b6:8e:b8:84:63:ef:6e:55:6e:
                    f7:d4:ba:74:84:94:20:e0:48:ec:68:84:b9:5f:f6:
                    a5:f0:27:79:b1:00:5d:08:d3:ed:eb:f4:19:a1:31:
                    6d:2a:af:45:30:75:9a:a0:1a:cf:b0:d0:a9:57:21:
                    9c:34:d0:cc:92:8b:de:4a:42:61:0d:04:19:f2:14:
                    dd:e6:eb:30:2c:8b:31:13:2c:f4:de:93:8a:33:a4:
                    31:0d:3c:18:94:49:d7:35:15:d6:dc:17:86:25:74:
                    20:c7:8a:43:ad:98:25:3f:90:d5:36:8c:67:43:28:
                    cc:40:47:a6:fc:07:56:d7:85:96:3e:28:81:8e:c2:
                    6d:a8:9a:d9:4d:71:d9:53:77:20:6e:cf:ce:14:a3:
                    7c:d1:9a:17:91:f0:94:66:24:6b:f2:2f:7c:d6:3a:
                    58:3f:73:95:f4:4e:a1:69:0a:20:76:81:52:b6:89:
                    4b:2e:ce:e2:08:0e:39:42:86:70:1f:9c:14:d4:45:
                    b4:b7:6f:b4:cc:cd:50:b9:e2:06:20:6a:28:5c:87:
                    9a:2f:c7:7e:84:a0:c3:e6:d7:46:4d:82:2d:60:1c:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A3:F5:63:6C:3D:7A:EA:84:1B:E7:35:55:60:97:60:89:F7:0F:26
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z6P1Y2w9euqEG-c1VWCXYIn3DyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1be0::/44

    Signature Algorithm: sha256WithRSAEncryption
         01:3c:d2:23:4e:6f:d1:75:6d:2d:c0:36:c6:85:44:74:b3:c1:
         64:be:54:03:18:af:dd:2b:8d:14:17:81:6a:24:4d:42:aa:38:
         8e:57:a8:aa:a9:89:ee:06:22:0c:2f:d6:33:cb:33:f4:f2:10:
         d4:28:9d:38:a9:8f:56:08:02:90:21:1d:23:17:b4:c1:78:2f:
         bc:c4:c3:3a:e6:a9:56:be:4f:d7:bd:a6:22:9a:ba:24:75:aa:
         09:0e:68:48:f9:0e:57:23:9c:23:35:81:78:80:c5:00:d4:2d:
         85:54:7d:51:12:79:39:f7:dc:9e:94:5e:7e:12:f1:9e:c4:1a:
         45:8f:5a:65:2c:66:36:25:bc:e3:46:02:97:94:ae:f2:f7:a7:
         eb:b8:55:a5:e4:e1:8a:04:6d:40:46:b5:1f:0f:91:20:f6:16:
         54:4b:db:68:17:6c:01:ed:9b:a5:2a:c2:37:b7:54:0a:82:1f:
         e8:f9:8c:29:13:95:88:15:f3:cd:de:24:0d:b1:b1:18:78:4a:
         48:3d:d5:04:fb:a9:5e:ec:61:44:40:24:0c:19:0b:1d:2e:b5:
         d3:6b:e6:7a:08:85:1a:5d:57:71:e3:ff:cf:a4:53:47:e2:8c:
         91:ef:a3:40:bf:c5:09:2f:37:7e:b4:84:f6:c3:76:24:86:c3:
         f5:77:84:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----