Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zqCs99ntnRS53VBOvSkTQBTmaYY.roa
File:                     zqCs99ntnRS53VBOvSkTQBTmaYY.roa (raw, json)
Hash identifier:          8GAEQEGUZCkkTcXOqJETuAt9amEUJJEkN7gX4AxzioA=
Subject key identifier:   CE:A0:AC:F7:D9:ED:9D:14:B9:DD:50:4E:BD:29:13:40:14:E6:69:86
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AB6D1CB5E7ED50AB5F4A1C85273E8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zqCs99ntnRS53VBOvSkTQBTmaYY.roa
Signing time:             Tue 24 Jan 2023 16:09:34 +0000
ROA not before:           Tue 24 Jan 2023 16:09:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        2a0e:b107:5c8::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:b6:d1:cb:5e:7e:d5:0a:b5:f4:a1:c8:52:73:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cea0acf7d9ed9d14b9dd504ebd29134014e66986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:90:9c:78:4b:fa:e3:a8:c4:82:16:58:26:
                    9b:5a:75:96:ba:d6:9f:21:fd:3d:f4:97:04:4c:e2:
                    03:ed:3b:ab:92:c3:45:06:06:67:72:45:e1:f8:00:
                    11:da:dc:6d:c2:c9:a1:83:e8:eb:39:5a:7b:e1:dc:
                    7a:b2:96:a0:08:e8:fd:9d:6f:a1:44:44:48:2a:ef:
                    8d:ed:fb:7d:0a:06:e9:58:bd:38:77:64:69:eb:75:
                    cd:f4:58:99:71:35:67:dd:05:14:5a:7b:9d:00:70:
                    f4:5b:10:03:0a:87:ad:e1:7a:da:14:57:00:51:78:
                    c1:5b:e4:61:3f:e0:60:47:43:da:ab:9d:22:33:d1:
                    8d:18:ec:8a:e1:d3:91:df:19:a6:56:33:29:cd:1e:
                    42:c1:70:af:10:b7:e6:fb:04:5e:36:e1:a6:00:96:
                    02:5b:9f:f8:f3:42:b4:51:16:d0:cc:f4:6a:7e:ce:
                    09:27:d4:5a:54:2c:d2:01:ea:a4:f7:82:ac:4a:70:
                    ee:f4:03:d5:d1:f4:e6:c4:e0:b4:cb:41:fa:ba:69:
                    6f:1c:17:d6:d0:2f:bf:6e:af:68:10:26:a7:60:16:
                    5e:e9:3e:3f:5b:d2:8e:28:bf:fe:0a:1a:ec:ce:0a:
                    e7:ec:c5:4d:77:27:be:f6:25:c8:24:d1:d2:54:4f:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A0:AC:F7:D9:ED:9D:14:B9:DD:50:4E:BD:29:13:40:14:E6:69:86
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zqCs99ntnRS53VBOvSkTQBTmaYY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:5c8::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:a6:d4:4c:c7:16:38:e6:2e:11:ae:39:53:d6:d8:01:b4:8c:
         12:f1:9e:7a:9a:29:b9:c4:d3:12:cd:02:77:a7:c6:54:70:c1:
         9d:a0:b0:1c:21:36:29:9e:41:72:65:4d:c2:f1:49:54:51:b0:
         fb:5a:3f:d0:af:98:c1:1c:67:47:14:d0:76:a7:4d:fd:e2:dd:
         13:f7:6a:fb:89:3f:33:a7:58:e6:e7:bb:57:3e:bc:db:d2:89:
         92:d0:5f:8f:c2:7a:07:a6:d5:4a:66:74:8d:af:eb:a3:93:2a:
         f4:26:f5:a1:2f:ac:7b:50:d2:f3:b8:96:f0:a4:91:2e:fa:fc:
         72:2f:36:11:51:0e:d8:02:0e:ee:69:f6:23:69:f5:64:77:77:
         c6:81:1c:85:32:16:ae:7d:96:09:83:f5:04:58:e5:4b:e7:77:
         34:67:c9:98:7f:cd:b2:5f:bc:98:d0:f0:d6:1e:4b:d0:e3:5b:
         a1:bd:47:b2:65:74:88:d6:b7:18:35:db:65:90:93:4f:f0:99:
         23:7b:a7:49:99:13:95:6f:d6:4e:d7:07:b7:20:8c:0b:d9:1f:
         4b:cf:60:ec:27:b6:9b:3d:f0:41:19:96:1d:14:2a:f1:9a:ab:
         91:8d:8b:39:d8:ac:5c:f5:1d:b7:86:ee:ca:ad:2a:12:98:63:
         59:54:ee:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----