Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1--kss_fp1bX9Ap_V4Sbs7sdz_Hs.roa
File:                     1--kss_fp1bX9Ap_V4Sbs7sdz_Hs.roa (raw, json)
Hash identifier:          Txo/Si6Mrkau0NJ5Qp2OBqog67rpkW7LG+KT7RACqHY=
Subject key identifier:   FB:E9:2C:B3:F7:E9:D5:B5:FD:02:9F:D5:E1:26:EC:EE:C7:73:FC:7B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A103C5BFB1350A56FED1DF7A4A28288BA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1--kss_fp1bX9Ap_V4Sbs7sdz_Hs.roa
Signing time:             Sat 19 Aug 2023 23:58:25 +0000
ROA not before:           Sat 19 Aug 2023 23:58:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203446
IP address blocks:        2a0e:97c0:470::/48 maxlen: 48
                          2a0e:97c0:471::/48 maxlen: 48
                          2a0e:97c0:3ea::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:10:3c:5b:fb:13:50:a5:6f:ed:1d:f7:a4:a2:82:88:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 19 23:58:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fbe92cb3f7e9d5b5fd029fd5e126eceec773fc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:c3:80:8f:78:db:6b:a8:8f:9e:ac:00:09:
                    0f:96:7b:17:f1:89:2a:48:6e:63:d6:e3:7d:22:8a:
                    59:5a:cd:c5:54:bc:5c:88:88:93:25:4c:e5:32:da:
                    e1:89:e6:f6:3b:02:34:d6:14:74:a8:fb:8c:6b:06:
                    de:61:5b:10:11:2f:ed:ca:9d:60:01:88:ae:b6:51:
                    10:25:ae:5d:49:a7:96:a3:5e:82:5e:b1:dd:68:c0:
                    8a:ae:19:88:29:53:4c:1d:4f:0a:c0:cb:86:e4:7d:
                    48:27:69:9f:21:74:56:ff:dd:d4:b6:e7:f0:92:f6:
                    ca:80:de:bf:80:02:d1:75:8c:f1:0e:3f:39:c6:e6:
                    de:2d:a1:3a:ce:a3:84:27:43:fe:18:be:81:b2:00:
                    7b:f5:e7:34:57:db:69:77:e7:76:99:39:75:42:8f:
                    4c:ca:5d:f0:77:87:38:50:67:9c:5e:86:59:86:35:
                    81:a6:83:a1:64:95:8e:3d:a6:b6:36:7f:1e:85:2c:
                    f3:17:53:37:85:06:bb:17:26:40:be:03:6d:e6:72:
                    99:28:93:d8:a3:80:68:a2:0d:ac:be:c7:1d:f6:c1:
                    b0:9c:f9:50:94:1d:c0:d6:68:ea:1a:52:85:c1:a7:
                    12:88:17:e9:87:32:74:27:e7:b1:cb:0a:b9:89:90:
                    d2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E9:2C:B3:F7:E9:D5:B5:FD:02:9F:D5:E1:26:EC:EE:C7:73:FC:7B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1--kss_fp1bX9Ap_V4Sbs7sdz_Hs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:3ea::/48
                  2a0e:97c0:470::/47

    Signature Algorithm: sha256WithRSAEncryption
         4b:ee:5c:33:7a:0b:96:49:36:49:00:64:63:ad:b5:ef:30:34:
         8e:43:ed:b8:02:99:5d:e3:f5:02:37:cb:19:d5:a8:3a:db:49:
         5f:ad:1e:ec:d8:5c:a3:61:d5:fe:65:ef:23:82:06:70:cf:58:
         bd:ed:64:27:62:ba:12:3e:e2:27:4a:12:a3:88:3b:f2:9d:fb:
         71:9f:95:94:a7:ad:95:0f:e1:76:9f:c5:ef:2d:62:c8:8a:cc:
         ac:c6:16:33:a5:4a:43:ec:11:62:17:89:c6:71:2d:f3:22:4f:
         78:ef:23:b9:a2:25:65:ae:c2:80:aa:a0:d4:ce:9c:44:a4:b0:
         96:17:d6:9c:b4:8e:4a:ea:98:7a:91:e2:8f:59:ce:db:c7:41:
         b7:42:23:cd:c6:8f:eb:6e:8f:20:4a:a7:d7:13:eb:2f:19:dd:
         3d:39:c6:c1:de:f6:46:f3:b2:0d:40:83:4d:4d:fe:87:6f:43:
         02:f2:64:d0:66:02:89:68:7b:c9:43:93:16:a2:60:dd:5c:76:
         92:db:49:55:bb:a9:22:fb:07:a6:00:8d:90:8a:15:36:6e:d3:
         4d:0e:24:de:83:bb:4a:cc:93:2d:e7:cc:17:70:7a:2a:5b:95:
         23:d7:9d:12:dc:82:72:7f:0a:e0:1c:03:69:51:80:ff:ae:b9:
         2d:82:e1:42
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAYoQPFv7E1Clb+0d96Sigoi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwODE5MjM1ODI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmU5MmNiM2Y3ZTlkNWI1ZmQwMjlmZDVlMTI2ZWNlZWM3NzNmYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE/DgI9422uoj56sAAkPlnsX8Ykq
SG5j1uN9IopZWs3FVLxciIiTJUzlMtrhieb2OwI01hR0qPuMawbeYVsQES/typ1g
AYiutlEQJa5dSaeWo16CXrHdaMCKrhmIKVNMHU8KwMuG5H1IJ2mfIXRW/93Utufw
kvbKgN6/gALRdYzxDj85xubeLaE6zqOEJ0P+GL6BsgB79ec0V9tpd+d2mTl1Qo9M
yl3wd4c4UGecXoZZhjWBpoOhZJWOPaa2Nn8ehSzzF1M3hQa7FyZAvgNt5nKZKJPY
o4Boog2svscd9sGwnPlQlB3A1mjqGlKFwacSiBfphzJ0J+exywq5iZDSmQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPvpLLP36dW1/QKf1eEm7O7Hc/x7MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMS0ta3NzX2ZwMWJYOUFwX1Y0U2JzN3Nkel9Icy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZh
NS8xL1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoOl8AD
6gMHASoOl8AEcDANBgkqhkiG9w0BAQsFAAOCAQEAS+5cM3oLlkk2SQBkY6217zA0
jkPtuAKZXeP1AjfLGdWoOttJX60e7Nhco2HV/mXvI4IGcM9Yve1kJ2K6Ej7iJ0oS
o4g78p37cZ+VlKetlQ/hdp/F7y1iyIrMrMYWM6VKQ+wRYheJxnEt8yJPeO8juaIl
Za7CgKqg1M6cRKSwlhfWnLSOSuqYepHij1nO28dBt0IjzcaP626PIEqn1xPrLxnd
PTnGwd72RvOyDUCDTU3+h29DAvJk0GYCiWh7yUOTFqJg3Vx2kttJVbupIvsHpgCN
kIoVNm7TTQ4k3oO7SsyTLefMF3B6KluVI9edEtyCcn8K4BwDaVGA/665LYLhQg==
-----END CERTIFICATE-----