Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0pvpDyIqypkdi7QTq_DA4QDLGz8.roa
File:                     0pvpDyIqypkdi7QTq_DA4QDLGz8.roa (raw, json)
Hash identifier:          YchBMitcCQ6NkCpXmXhAMFPen8GcliZPM1RCDSsugus=
Subject key identifier:   D2:9B:E9:0F:22:2A:CA:99:1D:8B:B4:13:AB:F0:C0:E1:00:CB:1B:3F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AE1F008029EA87CC6D2DF80F6686F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0pvpDyIqypkdi7QTq_DA4QDLGz8.roa
Signing time:             Tue 24 Jan 2023 16:09:45 +0000
ROA not before:           Tue 24 Jan 2023 16:09:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208985
IP address blocks:        2a0e:b107:18f0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:e1:f0:08:02:9e:a8:7c:c6:d2:df:80:f6:68:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d29be90f222aca991d8bb413abf0c0e100cb1b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:cf:c0:24:5c:63:31:ec:4d:c9:1c:21:53:
                    51:8c:d0:1a:16:03:a8:0b:e3:14:e5:09:bc:dd:09:
                    61:49:8e:8d:71:68:65:fb:fb:d3:35:8f:1f:81:02:
                    8d:19:35:f2:88:31:9f:04:55:55:cb:b0:7d:4e:3c:
                    75:f2:bd:6a:67:78:71:f3:56:70:1e:e5:4c:cd:fa:
                    ff:b8:12:32:49:cc:8a:58:87:d1:3d:93:17:64:20:
                    e6:e3:b8:59:32:8f:88:0c:3f:3f:3e:11:45:57:93:
                    57:52:fa:e1:10:57:46:22:3f:b0:2c:d2:17:69:32:
                    10:2f:f2:00:ba:eb:f5:a9:df:f2:3a:06:63:4d:9d:
                    6b:31:2a:8c:86:e6:c9:3d:5a:d6:c6:94:2f:49:03:
                    16:c5:81:de:cc:2c:8b:31:dc:4d:57:62:f2:e6:fc:
                    aa:c2:42:7a:36:1a:23:27:d3:90:15:4e:63:93:ad:
                    cd:e8:ef:8a:9e:03:6a:66:05:03:ab:55:99:a9:6f:
                    c9:ed:73:bb:d7:1c:bc:57:aa:b8:1c:cf:46:11:8c:
                    46:e1:55:67:6a:57:8a:3c:a3:85:00:4c:ba:bd:8c:
                    0e:a8:89:6d:d4:0a:d1:0b:0c:cb:e9:d7:ae:2b:89:
                    e7:c1:77:41:78:84:5f:fd:60:e0:51:db:78:dc:a6:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9B:E9:0F:22:2A:CA:99:1D:8B:B4:13:AB:F0:C0:E1:00:CB:1B:3F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0pvpDyIqypkdi7QTq_DA4QDLGz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:18f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5e:55:c3:8f:8f:72:b0:76:f8:04:2f:df:2e:48:c1:40:16:dc:
         ba:2d:ae:51:d1:e2:6c:38:30:b7:87:32:73:f6:8b:4c:ca:0f:
         44:19:a1:e6:27:ec:f8:81:58:d9:fc:d2:3e:a3:60:d4:93:5f:
         8f:4b:00:f8:0f:cc:74:95:57:6f:d5:ba:de:2b:c5:57:7a:12:
         d7:19:4f:30:29:1c:ff:5d:96:80:5a:b8:97:34:0b:29:8a:3b:
         0f:1f:36:ae:b5:cd:8d:73:1b:70:82:f4:eb:42:da:b7:f6:40:
         b6:8c:b2:21:0e:aa:a2:0a:d6:3f:c2:50:cd:81:ed:dd:43:cf:
         e9:cf:8f:bc:25:6a:23:ab:af:8a:b4:e0:3c:f8:00:6c:8f:a4:
         18:5a:9a:66:6d:cb:6c:d5:2c:23:21:ee:66:09:88:24:a7:bb:
         63:f0:36:ba:25:52:45:59:ad:b4:21:84:e7:d7:40:54:40:49:
         05:34:c7:a5:14:b8:2f:6b:e1:45:10:6a:e0:19:fa:6d:9f:62:
         f1:cb:62:10:bd:25:c7:83:e9:63:89:6e:b8:69:a7:d0:57:f4:
         b0:0e:56:96:11:ca:2b:36:39:2c:ce:ae:d6:d6:a5:95:61:3b:
         0d:8f:ee:88:c9:61:ac:47:00:78:6f:fc:bd:ab:5e:cf:dd:a2:
         75:17:bf:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXkiuHwCAKeqHzG0t+A9mhvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjliZTkwZjIyMmFjYTk5MWQ4YmI0MTNhYmYwYzBlMTAwY2IxYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTHPwCRcYzHsTckcIVNRjNAaFgOo
C+MU5Qm83QlhSY6NcWhl+/vTNY8fgQKNGTXyiDGfBFVVy7B9Tjx18r1qZ3hx81Zw
HuVMzfr/uBIyScyKWIfRPZMXZCDm47hZMo+IDD8/PhFFV5NXUvrhEFdGIj+wLNIX
aTIQL/IAuuv1qd/yOgZjTZ1rMSqMhubJPVrWxpQvSQMWxYHezCyLMdxNV2Ly5vyq
wkJ6NhojJ9OQFU5jk63N6O+KngNqZgUDq1WZqW/J7XO71xy8V6q4HM9GEYxG4VVn
aleKPKOFAEy6vYwOqIlt1ArRCwzL6deuK4nnwXdBeIRf/WDgUdt43KYfLwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNKb6Q8iKsqZHYu0E6vwwOEAyxs/MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMHB2cER5SXF5cGtkaTdRVHFfREE0UURMR3o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxjw
MA0GCSqGSIb3DQEBCwUAA4IBAQBeVcOPj3KwdvgEL98uSMFAFty6La5R0eJsODC3
hzJz9otMyg9EGaHmJ+z4gVjZ/NI+o2DUk1+PSwD4D8x0lVdv1breK8VXehLXGU8w
KRz/XZaAWriXNAspijsPHzautc2NcxtwgvTrQtq39kC2jLIhDqqiCtY/wlDNge3d
Q8/pz4+8JWojq6+KtOA8+ABsj6QYWppmbcts1SwjIe5mCYgkp7tj8Da6JVJFWa20
IYTn10BUQEkFNMelFLgva+FFEGrgGfptn2Lxy2IQvSXHg+ljiW64aafQV/SwDlaW
EcorNjkszq7W1qWVYTsNj+6IyWGsRwB4b/y9q17P3aJ1F79h
-----END CERTIFICATE-----