Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C4dElxBG8MQ8cHasix_J2naDlNM.roa
File:                     C4dElxBG8MQ8cHasix_J2naDlNM.roa (raw, json)
Hash identifier:          uJRFFJx6xWisnLf1Nei1d8gReSi+Q3oTAs5F/TiCXPM=
Subject key identifier:   0B:87:44:97:10:46:F0:C4:3C:70:76:AC:8B:1F:C9:DA:76:83:94:D3
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BEC08CE56194837B57D3B12D825C6FDE1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C4dElxBG8MQ8cHasix_J2naDlNM.roa
Signing time:             Mon 20 Nov 2023 09:21:21 +0000
ROA not before:           Mon 20 Nov 2023 09:21:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134666
IP address blocks:        2a0e:b107:30f::/48 maxlen: 48
                          2a10:2f01:3dc::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ec:08:ce:56:19:48:37:b5:7d:3b:12:d8:25:c6:fd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 20 09:21:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0b8744971046f0c43c7076ac8b1fc9da768394d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:65:00:55:47:eb:64:72:b1:da:d7:eb:44:
                    e6:33:c8:06:48:1a:04:47:5e:10:a0:50:da:65:ca:
                    c0:a3:2a:92:e3:71:c2:3f:6e:52:cd:cb:22:d5:ff:
                    7c:71:91:84:f9:8b:b1:fc:1c:2f:e6:ef:34:20:e3:
                    c6:41:c3:26:aa:78:0e:28:56:e3:da:1d:f1:f7:3d:
                    24:67:b0:93:57:4b:68:97:d2:8f:8f:18:ab:03:7b:
                    c7:5e:c0:67:6c:5a:f6:e5:4d:bc:d2:d2:fe:5f:ff:
                    11:50:f3:79:ff:f7:ac:03:e7:7d:f3:5d:1d:f6:fe:
                    bb:18:07:f1:a5:20:a1:0e:f2:9e:dc:c9:bd:c6:09:
                    13:5c:ee:2a:99:5f:1b:af:3e:ad:d8:f9:f2:a8:f8:
                    1d:6f:83:a6:a2:3e:20:65:95:8e:67:87:e7:54:d1:
                    ee:53:6f:00:1b:cd:60:95:37:0e:c0:84:ff:01:d3:
                    45:4e:82:52:c3:cd:c9:4e:09:b5:d2:69:73:a7:65:
                    9e:1f:f7:8b:53:d1:d1:bf:22:b4:45:ca:76:bd:2c:
                    6b:48:de:e9:c4:e3:9e:60:46:b7:b0:c8:ea:fd:53:
                    ab:9f:96:4e:e3:81:fc:33:de:5a:58:92:63:97:7f:
                    8b:30:c6:e3:46:f8:60:f7:84:d8:22:ef:7c:31:48:
                    5c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:87:44:97:10:46:F0:C4:3C:70:76:AC:8B:1F:C9:DA:76:83:94:D3
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C4dElxBG8MQ8cHasix_J2naDlNM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:30f::/48
                  2a10:2f01:3dc::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:40:cf:d6:2e:2c:ae:4f:f7:55:89:07:36:e7:e9:10:f9:c4:
         6d:43:b8:97:ab:43:df:84:4c:8c:90:7e:08:09:d7:48:11:d1:
         0a:8b:dc:91:fb:a3:5f:dd:47:8e:d4:6f:40:30:8c:78:e1:68:
         6a:73:72:bc:4f:2c:26:1f:6c:23:6b:ef:d6:54:bd:2a:3e:a8:
         fd:f5:f2:1b:a8:08:20:c5:4f:4e:64:15:5b:cd:ba:72:fb:de:
         80:32:05:69:83:c3:39:52:e9:e1:16:87:35:1b:2c:d8:a8:c3:
         7a:39:b3:95:a3:c5:cb:48:cd:f5:b9:e3:7f:8b:76:f5:3d:3c:
         17:e1:f2:5f:11:a0:bf:5d:10:81:66:cd:c0:ab:b3:c8:03:7f:
         43:9f:67:af:92:9a:13:fd:e6:06:94:dc:73:cd:12:d3:ae:88:
         77:34:89:45:60:1a:fa:d3:4f:fc:87:1b:54:cb:aa:8d:70:34:
         5b:92:94:dc:2d:25:80:1a:72:94:00:01:54:59:c5:26:59:6b:
         13:08:ae:1a:21:0d:47:8d:81:e4:15:7c:fa:5e:96:33:b0:57:
         62:fe:69:1e:f7:14:9d:5f:6f:0e:25:c3:1e:0c:55:16:85:0b:
         f2:97:e8:a0:57:6c:2a:53:d1:da:23:56:61:10:23:6c:5b:a8:
         ab:30:43:de
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYvsCM5WGUg3tX07Etglxv3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMxMTIwMDkyMTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjg3NDQ5NzEwNDZmMGM0M2M3MDc2YWM4YjFmYzlkYTc2ODM5NGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TRlAFVH62RysdrX60TmM8gGSBoE
R14QoFDaZcrAoyqS43HCP25Szcsi1f98cZGE+Yux/Bwv5u80IOPGQcMmqngOKFbj
2h3x9z0kZ7CTV0tol9KPjxirA3vHXsBnbFr25U280tL+X/8RUPN5//esA+d9810d
9v67GAfxpSChDvKe3Mm9xgkTXO4qmV8brz6t2PnyqPgdb4Omoj4gZZWOZ4fnVNHu
U28AG81glTcOwIT/AdNFToJSw83JTgm10mlzp2WeH/eLU9HRvyK0Rcp2vSxrSN7p
xOOeYEa3sMjq/VOrn5ZO44H8M95aWJJjl3+LMMbjRvhg94TYIu98MUhcIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAuHRJcQRvDEPHB2rIsfydp2g5TTMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQzRkRWx4Qkc4TVE4Y0hhc2l4X0oybmFEbE5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6xBwMP
AwcAKhAvAQPcMA0GCSqGSIb3DQEBCwUAA4IBAQAGQM/WLiyuT/dViQc25+kQ+cRt
Q7iXq0PfhEyMkH4ICddIEdEKi9yR+6Nf3UeO1G9AMIx44Whqc3K8TywmH2wja+/W
VL0qPqj99fIbqAggxU9OZBVbzbpy+96AMgVpg8M5UunhFoc1GyzYqMN6ObOVo8XL
SM31ueN/i3b1PTwX4fJfEaC/XRCBZs3Aq7PIA39Dn2evkpoT/eYGlNxzzRLTroh3
NIlFYBr600/8hxtUy6qNcDRbkpTcLSWAGnKUAAFUWcUmWWsTCK4aIQ1HjYHkFXz6
XpYzsFdi/mke9xSdX28OJcMeDFUWhQvyl+igV2wqU9HaI1ZhECNsW6irMEPe
-----END CERTIFICATE-----