Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sCRbIaQoBQiZSzH2VKwoCuOck_0.roa
File:                     sCRbIaQoBQiZSzH2VKwoCuOck_0.roa (raw, json)
Hash identifier:          WkWuHbOz5RS8ZMrtYL3xZcz8bOukVhFB5ZK+uvyATzg=
Subject key identifier:   B0:24:5B:21:A4:28:05:08:99:4B:31:F6:54:AC:28:0A:E3:9C:93:FD
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A7A28DCD385E034D0A7922BB8890D6E71
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sCRbIaQoBQiZSzH2VKwoCuOck_0.roa
Signing time:             Sat 09 Sep 2023 13:36:52 +0000
ROA not before:           Sat 09 Sep 2023 13:36:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31898
IP address blocks:        2a0e:b107:f50::/44 maxlen: 48
                          2a0e:b107:361::/48 maxlen: 48
                          2a0e:97c0:aba::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7a:28:dc:d3:85:e0:34:d0:a7:92:2b:b8:89:0d:6e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep  9 13:36:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b0245b21a4280508994b31f654ac280ae39c93fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:08:c0:db:79:0d:6f:44:b1:a4:2a:32:c8:
                    03:b5:83:b9:d8:71:c9:a5:40:9a:c3:6e:a7:71:3c:
                    cb:ad:f2:d2:ff:c0:5c:3c:9d:26:a6:49:6c:9d:3d:
                    7b:60:f5:d8:4c:d5:44:a6:75:b6:e8:c7:24:d0:1d:
                    34:3c:f8:cd:41:ac:33:74:18:82:6d:40:d9:79:f2:
                    cd:78:49:7e:52:2d:9e:50:d7:f9:3b:aa:4b:fa:67:
                    83:62:8b:98:8e:36:cd:fa:1e:7f:36:0e:20:0a:f1:
                    1a:55:ae:00:fe:7b:77:d3:b5:72:04:52:cd:27:9a:
                    cc:ea:e9:f0:77:07:c0:af:16:59:43:c0:b3:c0:c3:
                    22:d2:d9:60:0c:5b:7b:5d:7c:28:34:ae:9a:8b:fb:
                    9a:b6:30:01:7f:4d:28:25:6a:6e:af:a9:60:0e:2c:
                    63:84:ce:db:ba:67:c5:61:d9:98:db:ae:b3:1d:59:
                    76:ff:8d:81:f3:45:56:69:f3:a8:f7:8a:cf:19:f1:
                    a5:85:7c:51:75:fe:08:7d:4a:08:af:49:25:cf:f7:
                    60:76:4d:d0:b7:89:68:3c:ca:c1:1e:de:94:ac:9d:
                    9c:df:09:f9:2a:fe:24:e2:77:c0:f2:1e:66:ca:85:
                    db:fd:1b:81:09:7b:ec:a4:00:dc:98:65:33:e8:3f:
                    0e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:24:5B:21:A4:28:05:08:99:4B:31:F6:54:AC:28:0A:E3:9C:93:FD
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sCRbIaQoBQiZSzH2VKwoCuOck_0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:aba::/48
                  2a0e:b107:361::/48
                  2a0e:b107:f50::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:16:8c:2f:e2:98:3c:48:ed:75:05:57:da:b7:5a:af:4c:f1:
         16:29:9a:5e:fa:1a:87:58:28:b3:0e:8d:26:f3:5c:ed:f3:d3:
         11:88:8b:76:a1:2e:50:35:fa:fe:58:6d:fc:2f:49:42:4b:5d:
         91:d5:c6:1e:00:a9:41:9b:cf:21:8a:5c:9d:4c:1a:ca:00:6f:
         96:69:5a:47:99:bf:bc:2c:fe:ae:8e:86:9d:b1:16:d0:51:2d:
         e4:25:0d:f9:f0:6d:47:be:39:0a:96:8c:82:93:79:10:20:8f:
         9a:33:f8:a2:2d:a8:ba:03:57:f2:2e:44:db:fb:5d:ce:b9:c8:
         83:16:8f:d5:80:59:a6:bd:81:76:43:c9:f2:d3:3a:2f:15:0e:
         1d:50:7d:1c:3f:b2:15:71:13:7c:3f:d6:8f:e9:bc:2f:c3:07:
         61:bf:43:26:50:c4:9a:f3:8c:a4:91:d2:34:ce:a9:98:76:ba:
         c0:32:bf:da:84:61:ab:db:6a:6f:f6:82:1e:a9:fd:4c:83:58:
         12:52:42:a7:35:fb:6f:e8:87:a2:e9:8e:63:c9:4a:5f:19:ba:
         84:ed:97:75:80:4d:fd:2c:11:8e:92:5f:92:6e:26:f9:25:2b:
         63:ca:1f:83:93:3f:19:8b:e1:20:57:d9:a7:b2:37:c2:60:cf:
         5c:39:94:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----