Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0gGvoSTLVSY3nl6RjJhDhvUislc.roa
File:                     0gGvoSTLVSY3nl6RjJhDhvUislc.roa (raw, json)
Hash identifier:          hJC1DvGBZZmoUZmaEHpCouxWta4AL69xebBuP4dLWe8=
Subject key identifier:   D2:01:AF:A1:24:CB:55:26:37:9E:5E:91:8C:98:43:86:F5:22:B2:57
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187CCCCAEE2CD29A6B93026085CBA255AF6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0gGvoSTLVSY3nl6RjJhDhvUislc.roa
Signing time:             Sat 29 Apr 2023 11:36:18 +0000
ROA not before:           Sat 29 Apr 2023 11:36:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199310
IP address blocks:        2a0e:97c0:220::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:cc:cc:ae:e2:cd:29:a6:b9:30:26:08:5c:ba:25:5a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 29 11:36:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d201afa124cb5526379e5e918c984386f522b257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:17:a2:ef:a9:f4:49:6e:c0:ed:09:df:5b:da:
                    83:db:ff:57:e6:75:ac:94:56:c3:06:93:19:2d:06:
                    ae:e6:d9:83:db:0a:23:90:21:f9:d4:9e:b3:5a:3e:
                    9c:21:74:11:56:c9:f5:ba:cb:4d:7b:cb:78:19:97:
                    00:50:a7:f6:23:cd:80:34:1e:a5:94:0d:ae:6e:c7:
                    61:50:6c:a4:34:02:67:1c:0b:13:22:ad:c1:6b:04:
                    ee:00:ee:ee:4d:d0:a2:90:f2:09:4f:6f:58:bc:fd:
                    70:53:0b:76:9b:bc:bd:26:a7:32:8d:ba:91:5d:ab:
                    b4:af:90:5b:9b:96:3a:df:16:f3:91:17:54:69:a9:
                    ed:c7:72:ec:be:db:51:4a:e2:18:58:98:3a:9d:0b:
                    4e:da:1a:be:41:39:6f:66:b9:5b:ed:e0:5a:28:90:
                    4e:da:39:fc:f2:10:ee:2c:21:f7:6f:f6:67:2a:8a:
                    0c:df:ec:5c:b1:98:da:05:c9:2b:58:cd:2c:86:c9:
                    d3:87:87:be:04:4d:9e:ef:2b:27:b4:e8:b3:61:73:
                    96:f7:1c:4d:d1:8e:20:01:fb:81:b4:d9:7c:1e:8d:
                    c4:ad:f9:8d:fe:ea:7d:ab:68:4b:cc:69:fc:ab:0b:
                    76:06:a0:a4:29:84:5e:0a:5c:0c:a8:35:d2:c9:34:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:01:AF:A1:24:CB:55:26:37:9E:5E:91:8C:98:43:86:F5:22:B2:57
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0gGvoSTLVSY3nl6RjJhDhvUislc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:220::/44

    Signature Algorithm: sha256WithRSAEncryption
         3f:2b:71:5d:7c:b7:05:93:28:64:eb:97:ee:9e:67:0f:71:68:
         4b:66:80:bd:3d:26:b6:a6:de:d6:2d:0b:59:fa:4d:bd:74:3c:
         24:7d:d7:4e:ad:e5:0e:b3:38:07:f1:9c:fa:79:51:17:ba:ec:
         7b:91:ed:18:bb:88:fb:e0:fe:64:64:23:de:93:93:d9:73:9d:
         9a:d3:77:5e:83:0b:59:86:4c:2d:de:8e:fd:69:97:f3:c9:34:
         c1:bf:30:46:c0:ff:63:85:58:e6:a8:99:28:cd:75:d3:8b:0c:
         12:2e:1f:61:b6:41:d5:81:18:00:92:e0:17:fc:b0:12:25:8f:
         34:1b:50:e9:74:5c:82:b4:9e:88:c6:98:eb:82:1f:5a:d5:d7:
         12:86:3d:aa:e9:71:0d:55:2e:f7:17:a9:3d:91:11:12:f4:8e:
         3f:c4:ea:f3:6e:01:4d:bd:fe:ee:94:f3:59:2e:67:95:98:a4:
         c1:09:81:68:66:6f:ec:6f:90:3e:aa:a0:3b:36:0e:be:ef:a4:
         fc:04:0b:b9:16:c4:38:11:0f:17:b6:d2:78:5c:e8:b9:f3:45:
         be:c3:d2:a6:30:98:d1:af:ba:41:ed:30:ae:ee:c3:61:dd:7d:
         9e:e3:19:c5:ed:ca:aa:5d:57:61:a7:ac:96:bf:41:33:4c:16:
         e2:7e:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----