Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/27_zFB_BLE45pkfja2yPq2xya7c.roa
File:                     27_zFB_BLE45pkfja2yPq2xya7c.roa (raw, json)
Hash identifier:          fh2VAUv+/1MZCN9pBATFwRx37sDdqTgb2yDyfqS+Qcs=
Subject key identifier:   DB:BF:F3:14:1F:C1:2C:4E:39:A6:47:E3:6B:6C:8F:AB:6C:72:6B:B7
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E77548C1ECAB787A999490DBD310D0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/27_zFB_BLE45pkfja2yPq2xya7c.roa
Signing time:             Mon 02 Jan 2023 05:14:54 +0000
ROA not before:           Mon 02 Jan 2023 05:14:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a0e:b107:19a0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:75:48:c1:ec:ab:78:7a:99:94:90:db:d3:10:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:14:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dbbff3141fc12c4e39a647e36b6c8fab6c726bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:99:94:7d:ea:c4:53:47:32:04:b7:31:2e:
                    ae:8a:5f:4f:3e:86:48:7a:ae:18:4e:0a:7f:2b:a7:
                    5b:b0:d9:48:c8:ab:59:0b:6c:9c:81:df:7a:d9:ed:
                    32:b4:f4:ba:1a:52:db:d4:72:a2:b3:6c:6e:c4:3e:
                    40:90:44:b1:35:b1:d9:66:28:3d:1a:50:55:df:98:
                    d1:3b:6e:51:93:be:60:88:77:de:40:23:6b:0b:50:
                    45:5b:04:48:58:90:d6:5a:c4:7f:e8:98:cb:f9:39:
                    41:c9:17:f0:bf:71:c2:23:b0:fe:64:89:79:52:66:
                    b8:b6:83:93:93:a5:be:f4:cb:a0:17:16:14:d9:ab:
                    7a:5d:f3:6a:54:2c:37:c1:36:f4:0e:c4:2c:72:05:
                    83:e9:ab:b9:2f:e6:2c:3c:0b:04:4b:b2:e7:72:4a:
                    00:7b:86:d3:cf:6c:ef:f6:1c:78:1f:e3:ea:23:4b:
                    4b:18:d6:e9:78:48:f9:92:67:34:16:0e:ae:d4:35:
                    ac:05:4b:a8:4e:f7:55:2b:1e:c4:73:c7:cf:a2:eb:
                    13:2c:63:fb:22:0f:24:51:34:22:ec:26:bb:86:81:
                    98:bf:89:80:a2:56:74:24:fb:39:21:ee:38:c1:7c:
                    72:a9:28:27:74:b4:71:3e:92:c8:b5:cf:1d:14:f5:
                    2a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BF:F3:14:1F:C1:2C:4E:39:A6:47:E3:6B:6C:8F:AB:6C:72:6B:B7
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/27_zFB_BLE45pkfja2yPq2xya7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:19a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:3c:03:5e:1d:94:96:04:4b:41:d1:68:6d:3d:13:71:ae:a5:
         96:d1:5b:ac:0c:e4:e5:78:c6:10:c6:8d:8b:d0:60:c2:f7:78:
         9b:dd:c6:e1:f6:9d:ee:b4:9d:a5:38:0d:7c:98:ed:cb:cd:1d:
         e7:99:45:e8:36:37:c0:ef:82:41:4e:86:b0:56:26:2e:0c:ce:
         d0:e5:c5:9b:fb:3d:f3:61:d9:b5:ef:c9:44:13:f0:29:c8:cb:
         7d:26:18:44:e2:3a:33:d8:6d:81:f1:88:f1:04:d3:06:db:b8:
         09:2a:9c:41:61:57:9e:2f:d0:46:0f:ca:5c:36:3a:6d:5d:8b:
         e5:5b:a6:03:82:39:05:cf:dd:d7:e6:bd:78:25:7d:38:1e:84:
         bb:44:39:34:e4:e9:a3:c2:8a:c4:8f:e4:a2:19:69:a1:f4:88:
         31:dd:e1:1f:a9:72:a0:12:92:c8:ff:cc:b4:c0:62:11:ff:b3:
         2a:22:5e:52:9e:b1:ff:d2:cf:ac:3e:35:d2:be:59:fb:41:8a:
         39:ae:40:f2:64:a6:27:82:f2:39:0c:e0:1a:fe:5f:51:92:4c:
         0d:b7:d9:37:19:34:93:bd:f5:8c:b1:30:d3:30:5e:bd:80:55:
         1f:59:f9:51:b9:b7:cc:a3:69:20:dc:f7:2d:b4:c4:f8:8c:f1:
         fe:c4:c4:f2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw53VIweyreHqZlJDb0xDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmJmZjMxNDFmYzEyYzRlMzlhNjQ3ZTM2YjZjOGZhYjZjNzI2YmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPqZlH3qxFNHMgS3MS6uil9PPoZI
eq4YTgp/K6dbsNlIyKtZC2ycgd962e0ytPS6GlLb1HKis2xuxD5AkESxNbHZZig9
GlBV35jRO25Rk75giHfeQCNrC1BFWwRIWJDWWsR/6JjL+TlByRfwv3HCI7D+ZIl5
Uma4toOTk6W+9MugFxYU2at6XfNqVCw3wTb0DsQscgWD6au5L+YsPAsES7LnckoA
e4bTz2zv9hx4H+PqI0tLGNbpeEj5kmc0Fg6u1DWsBUuoTvdVKx7Ec8fPousTLGP7
Ig8kUTQi7Ca7hoGYv4mAolZ0JPs5Ie44wXxyqSgndLRxPpLItc8dFPUqgQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNu/8xQfwSxOOaZH42tsj6tscmu3MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMjdfekZCX0JMRTQ1cGtmamEyeVBxMnh5YTdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxmg
MA0GCSqGSIb3DQEBCwUAA4IBAQCfPANeHZSWBEtB0WhtPRNxrqWW0VusDOTleMYQ
xo2L0GDC93ib3cbh9p3utJ2lOA18mO3LzR3nmUXoNjfA74JBToawViYuDM7Q5cWb
+z3zYdm178lEE/ApyMt9JhhE4joz2G2B8YjxBNMG27gJKpxBYVeeL9BGD8pcNjpt
XYvlW6YDgjkFz93X5r14JX04HoS7RDk05OmjworEj+SiGWmh9Igx3eEfqXKgEpLI
/8y0wGIR/7MqIl5SnrH/0s+sPjXSvln7QYo5rkDyZKYngvI5DOAa/l9RkkwNt9k3
GTSTvfWMsTDTMF69gFUfWflRubfMo2kg3PcttMT4jPH+xMTy
-----END CERTIFICATE-----