Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/31ewpdtNRm-AVUancz4z0EjTv-s.roa
File:                     31ewpdtNRm-AVUancz4z0EjTv-s.roa (raw, json)
Hash identifier:          X22XCw7hu1YleiKxR/58UnRjuFglWJcq7i4PPgRLWSg=
Subject key identifier:   DF:57:B0:A5:DB:4D:46:6F:80:55:46:A7:73:3E:33:D0:48:D3:BF:EB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189B9451146ED0161B21817FECD1E829EC0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/31ewpdtNRm-AVUancz4z0EjTv-s.roa
Signing time:             Thu 03 Aug 2023 02:40:58 +0000
ROA not before:           Thu 03 Aug 2023 02:40:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198879
IP address blocks:        2a0e:97c0:bf0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b9:45:11:46:ed:01:61:b2:18:17:fe:cd:1e:82:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  3 02:40:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=df57b0a5db4d466f805546a7733e33d048d3bfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:42:1e:05:c6:1e:62:b5:d7:29:4d:a1:b7:
                    b5:5e:db:09:dd:ce:f2:5e:99:68:e0:3a:45:29:11:
                    51:2f:f9:1b:dd:33:fa:fc:d7:ed:95:84:6d:4b:8c:
                    b8:66:17:53:c6:3a:c7:89:d0:fe:16:19:45:72:c2:
                    ae:d8:e3:1a:0a:fa:dc:25:dc:80:5c:94:0b:8c:0e:
                    53:04:18:1f:13:c0:fb:df:05:15:25:da:fe:a0:07:
                    11:9b:d2:b4:8e:f0:fb:19:02:51:44:56:01:56:0c:
                    a6:23:2d:19:c0:5f:fd:d9:3e:ec:50:c8:42:8d:07:
                    cb:c4:29:06:31:24:08:d4:1e:0b:cd:69:6e:cc:6a:
                    c6:e1:ec:ac:72:e6:76:9c:e9:63:f0:f2:c9:ea:8d:
                    98:66:e5:20:0f:21:cb:37:5d:f2:1a:49:b0:85:68:
                    04:02:7e:03:95:2d:c9:5d:4c:84:c8:4b:9c:6c:32:
                    97:44:e1:dc:5c:87:8e:44:e0:ae:af:ad:a4:5c:d1:
                    82:e8:ed:c1:cc:b6:cb:59:ac:93:08:16:66:c7:5a:
                    05:a6:93:0d:48:67:10:08:68:30:a9:15:72:c4:5e:
                    c8:c7:f0:a5:c4:54:e6:6b:7c:d2:8b:65:12:55:18:
                    bf:26:ab:83:c8:6f:3d:7a:e5:17:45:45:4c:08:c6:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:57:B0:A5:DB:4D:46:6F:80:55:46:A7:73:3E:33:D0:48:D3:BF:EB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/31ewpdtNRm-AVUancz4z0EjTv-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:bf0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ac:c2:2e:9a:e4:01:2b:15:e6:0c:e9:68:fd:0d:9f:96:d4:5c:
         0f:81:d6:09:65:c9:47:45:92:84:e5:29:19:95:ed:e9:95:aa:
         15:3e:f4:de:4d:c4:3c:89:28:6f:39:92:df:b5:9e:40:21:96:
         22:6c:7c:89:85:31:e2:d3:c6:16:04:c6:07:f8:6a:42:ea:af:
         02:ff:d8:2d:d9:a2:70:04:f2:5e:74:2e:89:e4:c4:5d:ed:62:
         24:ed:27:ee:e9:29:d3:f8:a2:a8:ba:07:0c:b0:a3:ee:96:a3:
         c3:2a:f9:38:c7:cb:6e:1a:1b:ac:62:38:76:1a:1b:30:1d:92:
         37:42:95:57:ce:aa:3d:2c:6d:7d:e5:d1:fc:6e:b0:b1:0c:92:
         a1:4b:54:c4:e2:c1:c5:a1:9d:7a:d7:87:6a:1b:7c:ae:5c:b6:
         52:d8:39:05:0d:26:7c:e6:84:f8:8c:70:d0:dc:58:df:02:96:
         77:ad:4b:48:cb:ba:7a:90:85:08:a4:bc:e6:da:f6:88:a1:5d:
         c6:de:36:a3:88:32:d0:19:81:af:7e:38:5b:45:7d:c1:d6:91:
         74:07:34:e7:61:36:c2:a1:f7:af:8d:84:62:54:01:97:61:78:
         85:a6:30:3d:f1:03:9d:2c:95:58:5f:96:9d:6b:25:24:6e:0b:
         d7:9a:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----