Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-APgbjebupULvaj006ZbFwUSE2k.roa
File:                     1-APgbjebupULvaj006ZbFwUSE2k.roa (raw, json)
Hash identifier:          i3hbpgLDwMiVnfoUioceqzrTMK/H3s2Eo9ZnQpAjO7o=
Subject key identifier:   F8:03:E0:6E:37:9B:BA:95:0B:BD:A8:F4:D3:A6:5B:17:05:12:13:69
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E818155E2B2ACBCFA91C45C5091160
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-APgbjebupULvaj006ZbFwUSE2k.roa
Signing time:             Mon 02 Jan 2023 05:15:36 +0000
ROA not before:           Mon 02 Jan 2023 05:15:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212360
IP address blocks:        2a0e:b107:1350::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:18:15:5e:2b:2a:cb:cf:a9:1c:45:c5:09:11:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f803e06e379bba950bbda8f4d3a65b1705121369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:86:ce:13:98:82:1b:c5:f3:19:a7:a8:11:
                    fa:40:93:2e:48:fa:78:a5:6a:de:cb:d9:a5:90:0b:
                    f8:62:8f:50:95:36:89:79:08:11:91:bc:c0:d0:aa:
                    1b:63:0f:a9:19:a8:5f:69:3c:2c:4e:01:32:ce:45:
                    ec:d7:f2:f7:c7:3b:f9:ac:a3:1a:aa:ef:8d:05:4d:
                    e5:68:57:09:84:d2:4b:fc:fd:90:58:c6:24:b9:fa:
                    8f:23:19:45:9c:83:bd:90:85:f5:98:94:60:ec:28:
                    39:62:2f:55:51:fe:41:8e:17:d9:89:31:f7:3b:a7:
                    d9:e0:57:3d:20:30:5c:8b:a9:21:05:b5:78:12:7a:
                    e9:c3:c4:f6:ad:1b:9a:99:1d:de:41:2b:00:e7:89:
                    ca:cc:33:65:20:de:92:90:71:8c:35:eb:ea:95:62:
                    3f:ef:a7:30:e3:15:a6:26:79:c1:18:ed:e2:78:bb:
                    df:4c:a9:78:d8:7e:fd:86:85:f4:29:d8:fd:13:55:
                    d8:b6:f1:db:78:27:9d:0c:dc:7e:13:cb:ac:b0:84:
                    a8:07:a0:a4:af:f0:cd:7e:81:d2:60:3e:8a:86:00:
                    7c:46:de:59:73:39:d3:55:98:b4:32:d9:6a:67:c5:
                    a8:d4:27:95:27:3e:11:05:de:2c:f1:39:73:42:af:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:03:E0:6E:37:9B:BA:95:0B:BD:A8:F4:D3:A6:5B:17:05:12:13:69
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-APgbjebupULvaj006ZbFwUSE2k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1350::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:11:e7:2a:f0:47:6d:2c:ab:24:21:9e:83:3a:b4:4e:a9:
         1f:31:c2:92:0f:83:69:30:f6:3c:ff:b6:b4:ff:1f:e7:0c:ea:
         41:3d:b2:fc:76:64:e4:55:8c:c3:76:0f:93:1a:1f:09:0d:1f:
         da:fc:8b:d4:bf:68:6c:05:6d:9d:89:02:6e:d8:19:b5:50:d7:
         92:66:fd:19:22:37:f8:f2:a2:8d:1c:15:fc:b4:e4:99:da:43:
         51:9b:6c:82:1f:f8:5c:53:38:83:7d:96:78:73:f2:a8:7d:50:
         99:fa:bd:1f:9f:34:66:93:b8:94:67:30:79:e9:44:9c:7c:ae:
         2a:11:19:6b:4d:3f:1f:8c:37:18:03:e4:c5:b7:a3:b0:e5:d0:
         2a:12:54:b2:ce:7c:d4:a5:40:0d:90:bf:29:7e:90:43:d8:a5:
         ad:02:b6:f3:e9:64:74:95:e5:93:c9:fe:ac:32:9a:4b:80:38:
         68:77:a3:1e:4f:e6:74:7e:22:7a:fa:5b:ae:cd:7e:e6:f6:69:
         77:7b:4d:88:52:92:6f:c4:ba:bf:cd:19:b2:3f:39:6c:9a:ea:
         88:5f:ae:e1:ec:a5:11:fa:d6:fc:5e:54:89:f2:bc:4d:e0:d2:
         73:d2:79:84:f2:da:1c:32:f7:71:99:5b:d4:8d:fd:15:45:cb:
         79:44:57:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----