Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-mlkREOU43iHIaEr3O_yU6aYXHM.roa
File:                     1-mlkREOU43iHIaEr3O_yU6aYXHM.roa (raw, json)
Hash identifier:          o38zTTAZQ9OAjg7lxYuGE4GBQj7zw8S5Ta8LYYmYJdc=
Subject key identifier:   FA:69:64:44:43:94:E3:78:87:21:A1:2B:DC:EF:F2:53:A6:98:5C:73
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01886EE21E818317CEA92755233D436C1765
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-mlkREOU43iHIaEr3O_yU6aYXHM.roa
Signing time:             Tue 30 May 2023 22:58:12 +0000
ROA not before:           Tue 30 May 2023 22:58:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211659
IP address blocks:        2a0e:97c0:261::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6e:e2:1e:81:83:17:ce:a9:27:55:23:3d:43:6c:17:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 30 22:58:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa6964444394e3788721a12bdceff253a6985c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4a:75:36:ba:78:bc:2c:e1:d6:12:64:5a:8e:
                    67:d4:ba:8e:84:df:53:18:5c:91:30:bb:03:60:d0:
                    92:94:a8:bf:38:81:71:6e:2e:f3:bf:da:b1:85:0d:
                    e7:7f:a0:16:7d:3d:b7:ab:0f:a0:e5:94:92:35:ca:
                    13:19:3e:a1:2e:6e:f2:41:88:84:99:4c:c9:e2:03:
                    d5:1d:3d:40:42:1f:73:9e:b6:d0:8a:48:9f:4e:c2:
                    ea:a5:30:e2:52:bd:a9:9c:e4:09:d3:db:0f:48:e0:
                    08:03:fc:5d:a1:f1:e0:66:c4:98:2a:32:be:46:de:
                    78:e9:e3:71:24:dc:cc:cd:21:61:93:df:e6:ba:d6:
                    cc:c6:cd:24:54:b8:7e:47:14:a8:13:14:fb:90:c6:
                    9f:af:89:fd:22:42:f2:88:fd:6b:00:ed:19:2a:92:
                    05:50:4b:46:6d:1e:a5:21:1c:50:1e:ea:0a:b5:8f:
                    df:dd:b8:9c:5c:af:10:fe:aa:0d:e7:fb:8a:a6:55:
                    e0:4e:cc:37:4d:e0:31:ce:5e:ed:fc:e4:da:cf:c8:
                    75:8c:dc:30:4b:4e:e3:cd:30:b9:80:25:08:35:e0:
                    51:26:44:6c:fc:da:0e:dd:4b:e7:60:db:62:d7:72:
                    d9:e7:62:a2:c6:cc:15:0c:cb:16:5c:97:4f:01:27:
                    72:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:69:64:44:43:94:E3:78:87:21:A1:2B:DC:EF:F2:53:A6:98:5C:73
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-mlkREOU43iHIaEr3O_yU6aYXHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:261::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:9d:24:d4:97:75:2a:5d:07:5c:d0:43:34:b4:2a:c6:d5:33:
         27:8e:06:ba:40:f1:99:a7:bd:18:94:1f:93:9e:90:e8:d0:8a:
         1a:b3:cb:bb:04:bb:97:08:36:23:6c:25:c5:5b:4c:25:af:ee:
         b8:9b:f4:e8:3c:26:4e:be:9a:e7:e8:e0:7b:64:9d:f0:4c:15:
         0e:ff:f1:35:66:06:44:1c:f5:32:e4:e4:38:df:8a:7b:c6:6a:
         f5:f8:87:3f:d7:07:95:27:22:e4:1f:77:73:0e:31:4b:28:9c:
         65:15:c0:e7:19:0a:cf:33:67:90:1c:4b:00:c9:cb:ba:64:02:
         f4:78:c1:09:2f:1c:0d:79:49:77:8d:bb:08:2d:eb:a6:1a:a2:
         4e:73:02:f5:95:40:ee:36:4d:65:4c:c0:c5:b3:08:42:1a:d8:
         94:bd:18:f7:a7:e2:86:6f:b8:85:e7:19:9b:53:c2:a1:82:49:
         b3:df:2c:2d:0f:61:6e:e9:24:8e:b8:45:35:56:4e:bb:97:f9:
         90:0c:5f:c8:e4:de:90:33:ab:57:1d:81:07:6a:b8:33:d1:0c:
         ca:e6:59:b7:95:c7:ce:9b:18:05:28:66:b1:6d:da:6d:c5:16:
         f6:a5:5d:14:26:ba:b1:2e:85:66:9f:1b:58:8b:1c:c8:32:b5:
         7b:8d:d0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----