Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zYEmHm53OO7azJGpNP27rb72EDM.roa
File:                     zYEmHm53OO7azJGpNP27rb72EDM.roa (raw, json)
Hash identifier:          HfMR35WvAAsbVXqjr2Bk4j8wtUjIHLOK3C/PHwArs9g=
Subject key identifier:   CD:81:26:1E:6E:77:38:EE:DA:CC:91:A9:34:FD:BB:AD:BE:F6:10:33
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018B1E6DD3F74EB9D7CA1A390AEBB6199A31
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zYEmHm53OO7azJGpNP27rb72EDM.roa
Signing time:             Wed 11 Oct 2023 11:09:55 +0000
ROA not before:           Wed 11 Oct 2023 11:09:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216182
IP address blocks:        2a0e:97c0:dd0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1e:6d:d3:f7:4e:b9:d7:ca:1a:39:0a:eb:b6:19:9a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 11 11:09:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cd81261e6e7738eedacc91a934fdbbadbef61033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:87:83:74:6e:0c:7f:ab:be:bb:f7:ce:40:
                    52:fe:25:85:43:b6:17:49:37:92:fa:12:e9:c9:a4:
                    87:74:cc:29:6e:cf:b9:4e:8c:10:04:c9:5c:d6:1c:
                    62:62:3a:8e:16:b3:80:17:c4:30:37:b3:40:10:ab:
                    fa:f0:dc:c8:33:00:5e:e5:39:b9:13:1a:34:0d:9e:
                    31:22:c8:9e:c3:20:8b:f0:3a:63:e4:9a:8e:a1:05:
                    63:1d:c6:4c:b0:06:fd:20:7d:56:ad:cf:72:03:bc:
                    07:9c:9c:1b:ca:9b:d1:51:35:bf:da:69:e3:95:76:
                    dc:ad:9f:11:ec:fc:c2:54:d7:cd:71:1d:72:34:d0:
                    fd:54:77:76:54:78:0a:6c:35:00:f2:3c:99:1b:1a:
                    57:c8:b1:94:c0:4f:4a:a6:15:0a:cb:3a:22:8f:d4:
                    4a:b3:a1:92:7e:8d:95:63:db:53:a7:0d:35:43:66:
                    c5:5a:b2:cc:f4:bf:00:b6:eb:09:a4:7e:c2:9a:9a:
                    a8:ad:9c:c2:55:e5:05:3a:bd:d3:fe:8c:2b:57:6e:
                    90:2b:6b:6e:2e:05:e6:9a:e9:29:a7:97:e3:c6:62:
                    f0:29:b6:4d:69:cf:95:44:1d:88:6e:a9:bd:81:c0:
                    90:ff:f1:46:9f:bf:d0:9f:9d:3d:f2:76:6f:a1:79:
                    02:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:81:26:1E:6E:77:38:EE:DA:CC:91:A9:34:FD:BB:AD:BE:F6:10:33
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zYEmHm53OO7azJGpNP27rb72EDM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:dd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4c:5a:cd:25:65:ee:ab:1b:58:5b:e5:7f:57:2d:ab:c2:30:41:
         69:c5:c9:6a:56:72:88:eb:be:6b:bc:cc:c2:5c:05:36:6d:fb:
         a7:b8:52:b9:35:ab:41:53:f5:44:34:16:39:7c:97:d1:e4:7a:
         4a:5b:ef:aa:6b:45:03:4a:da:16:4f:5d:9a:09:da:6a:15:fe:
         4d:42:a7:ca:cd:2b:e1:68:6f:b9:5c:f3:12:0f:72:8b:da:7e:
         70:9f:ba:3d:03:1c:0c:f8:e9:f0:c8:56:14:7f:be:26:7d:48:
         4e:f3:3f:d8:b3:90:c8:7c:a9:f0:0d:2b:56:c3:38:eb:f8:62:
         92:67:42:ac:a6:ee:73:28:3c:9d:06:79:0a:44:66:94:44:a1:
         a8:0b:77:a3:c4:7a:0a:08:b2:51:64:18:76:d2:8a:d4:48:e5:
         91:66:1e:a4:31:3a:ac:b3:82:2a:8f:b0:36:d3:5b:e1:ef:9b:
         a4:e4:f8:c7:c9:e3:00:c8:70:a0:14:e1:06:7b:87:48:ab:41:
         be:ed:0d:da:7e:0c:ef:21:7a:99:66:e3:3a:d1:43:5f:6f:f3:
         86:87:82:5b:95:dc:07:65:1c:54:66:a4:ae:80:ab:b2:31:24:
         9b:b5:b7:9b:45:10:69:11:58:f5:ef:77:1f:84:3e:80:50:21:
         d2:eb:54:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----