Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1g5A4CoskPACSI6eLmDCwvreZ4E.roa
File:                     1g5A4CoskPACSI6eLmDCwvreZ4E.roa (raw, json)
Hash identifier:          Fu6TAeOvhjhrRRJeDMfbWFoIOctWMyZN7M/NAZSz00I=
Subject key identifier:   D6:0E:40:E0:2A:2C:90:F0:02:48:8E:9E:2E:60:C2:C2:FA:DE:67:81
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7D0A920E8148099403981A56FFF46
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1g5A4CoskPACSI6eLmDCwvreZ4E.roa
Signing time:             Mon 02 Jan 2023 05:15:18 +0000
ROA not before:           Mon 02 Jan 2023 05:15:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207740
IP address blocks:        2a0e:b107:198::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:d0:a9:20:e8:14:80:99:40:39:81:a5:6f:ff:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d60e40e02a2c90f002488e9e2e60c2c2fade6781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a4:86:f4:ca:f4:e3:bf:e1:2c:ce:45:ac:0b:
                    42:32:84:a4:75:99:d4:24:34:95:43:a0:ca:ac:72:
                    48:7e:1c:73:45:14:59:96:ef:f1:82:91:4d:03:fa:
                    42:42:e0:f3:7e:df:67:0c:66:40:5a:02:1e:c3:6b:
                    c1:5f:26:51:cc:ff:2a:c7:31:66:b0:d5:9c:42:6f:
                    c4:ae:56:25:ea:30:ff:58:10:68:85:75:b9:ed:36:
                    a6:59:32:61:03:25:ce:83:e6:81:68:75:de:a7:9b:
                    9e:40:11:cf:18:6f:1b:4b:77:9b:a4:66:39:3c:fa:
                    fc:f3:c2:a1:27:6e:ae:d8:2f:8f:3c:9b:2e:0a:2b:
                    61:14:f4:06:68:15:13:87:c0:9c:db:c1:93:82:b6:
                    3d:1d:f3:87:fd:24:28:d6:af:03:62:e0:dd:c7:5a:
                    24:05:af:2d:9d:66:d8:67:b4:26:47:f4:6e:c7:16:
                    f7:c3:2d:c7:c6:78:7e:58:27:9a:ea:6a:12:d1:ef:
                    e7:bf:a1:0b:2d:8d:be:b6:97:ca:47:af:10:e0:fd:
                    43:fc:82:c7:9f:fd:33:7b:e5:64:fa:82:9a:84:0c:
                    75:db:3a:e3:89:f8:fb:cf:3e:e5:c8:8c:e0:9f:87:
                    92:38:fe:2e:4e:ed:1f:0d:4e:b8:c4:2e:54:d1:5b:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0E:40:E0:2A:2C:90:F0:02:48:8E:9E:2E:60:C2:C2:FA:DE:67:81
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1g5A4CoskPACSI6eLmDCwvreZ4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:198::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:e8:c0:53:78:4c:11:59:a4:18:3b:c0:d5:e1:2c:ba:dc:1e:
         0e:78:da:09:73:1c:a2:74:d9:d1:1d:67:a8:90:6b:7a:13:fe:
         7a:10:5a:b2:f9:04:91:06:08:2f:57:9a:f9:a9:81:cd:50:46:
         10:09:91:69:c0:8a:03:57:b5:49:26:22:d0:65:6f:cc:0c:e8:
         39:19:57:3f:cf:39:8a:1e:51:1c:b9:b9:fc:3b:46:22:5c:21:
         8e:41:af:04:7f:68:f7:f3:7a:9b:e5:1c:55:cc:0c:19:71:4a:
         44:c2:d6:61:e5:7c:a1:89:db:28:7f:44:98:e6:1e:d4:e1:37:
         9f:d8:36:93:7f:e9:05:be:02:9e:e8:b7:b0:88:e7:94:36:83:
         45:33:6e:2c:d8:d1:2d:35:c2:e1:f2:de:95:54:0c:2c:ba:10:
         b8:d7:69:f5:5a:ec:5d:f9:6d:fc:9b:32:e0:6c:ef:d2:7e:07:
         8e:37:b4:54:62:59:ad:9d:46:9a:f3:a4:e3:2c:bf:ca:ed:89:
         b5:14:94:f0:56:16:55:e4:85:79:78:b0:f7:05:bc:1f:64:80:
         41:dd:f7:8c:ef:80:6a:e2:63:15:58:b0:7b:f7:af:8c:e3:ab:
         6a:70:fe:e0:35:a2:78:ef:d0:e6:24:8a:bd:3c:43:22:8a:68:
         f9:f0:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----