Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5WS1vqqHL2j61niAQilLzKRHtTQ.roa
File:                     5WS1vqqHL2j61niAQilLzKRHtTQ.roa (raw, json)
Hash identifier:          dayqg4X2RL2Km/BC9Pk+AxWg1c2li45YdVEVybO/F14=
Subject key identifier:   E5:64:B5:BE:AA:87:2F:68:FA:D6:78:80:42:29:4B:CC:A4:47:B5:34
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189894463F5987AD7B3C7F8C73CA966F7A2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5WS1vqqHL2j61niAQilLzKRHtTQ.roa
Signing time:             Mon 24 Jul 2023 18:58:27 +0000
ROA not before:           Mon 24 Jul 2023 18:58:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211293
IP address blocks:        2a0e:b107:2220::/45 maxlen: 48
                          2a0e:b107:2228::/45 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:89:44:63:f5:98:7a:d7:b3:c7:f8:c7:3c:a9:66:f7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul 24 18:58:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e564b5beaa872f68fad6788042294bcca447b534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:16:ac:f4:07:6f:c6:1e:1b:4f:57:fc:95:
                    3f:7c:39:c8:d2:40:68:e7:a6:41:d3:35:db:d0:3c:
                    3b:0c:1c:eb:1c:bc:36:8c:0f:11:46:6c:ca:35:60:
                    b7:6b:e0:e5:c9:eb:71:62:0c:2b:60:28:bb:31:f7:
                    6f:d9:86:18:21:6c:52:34:1f:0c:41:41:c4:e5:25:
                    19:1c:6f:c9:46:d3:f7:e7:12:d1:a6:ab:d2:d8:f2:
                    ba:c9:13:d2:0f:c1:c4:6e:af:c1:f1:50:3b:59:02:
                    14:c1:71:7b:20:d1:a6:55:93:42:3d:59:e9:10:45:
                    1d:bd:1d:4b:dd:b8:f5:3b:7a:08:43:e1:76:85:a4:
                    72:5f:7a:1d:07:18:70:0d:a1:78:87:12:f1:19:fd:
                    8b:e6:f7:e1:77:a2:66:e6:b1:4a:12:72:03:18:f0:
                    a1:ae:4a:d6:60:00:f2:54:5b:66:68:9e:6a:4e:cb:
                    80:1d:fa:32:70:97:4b:60:68:3c:8f:72:4a:c6:80:
                    a6:c2:6d:c4:d5:df:cd:d1:d6:c1:80:81:f4:ee:26:
                    61:d2:0e:0f:a7:20:0f:95:b0:e6:43:1f:87:60:6a:
                    71:25:98:88:db:73:e2:6d:5d:05:54:49:1d:52:da:
                    44:dd:2c:15:b3:47:16:4a:da:d6:69:2e:04:6f:ac:
                    5c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:64:B5:BE:AA:87:2F:68:FA:D6:78:80:42:29:4B:CC:A4:47:B5:34
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5WS1vqqHL2j61niAQilLzKRHtTQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:2220::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:b7:ab:74:7f:a1:e6:77:a4:4a:74:4c:25:5c:95:b7:ef:c2:
         6b:4f:84:17:60:13:01:ce:38:54:79:b5:10:82:03:31:a6:62:
         59:fd:60:b7:63:bd:fe:f9:ff:18:bb:f0:18:b9:99:91:f0:2e:
         70:ee:51:89:70:d3:e8:18:94:d3:56:ed:d1:d5:7f:3e:aa:f9:
         89:e2:64:e4:1d:58:15:ed:05:f3:36:60:30:6b:48:27:5e:92:
         05:99:dc:59:43:a9:d2:29:1f:21:d6:a7:ea:a7:91:91:fb:f5:
         21:c0:bd:b9:11:21:86:72:7f:42:6e:dc:c9:0c:e5:4d:91:5d:
         3e:0c:8f:4e:0e:64:14:12:bf:e5:f7:e7:51:55:0e:a5:0e:78:
         9f:ac:d8:9b:8f:5a:70:28:92:7f:e2:d3:31:7a:12:a1:af:9b:
         41:8d:f6:55:00:2d:db:35:fa:fe:fa:bb:bd:af:b7:c9:15:44:
         05:99:97:1f:41:5f:26:0d:d7:07:3a:82:41:30:7e:d1:ac:ff:
         af:b7:58:3f:03:76:12:12:6b:14:12:2b:ae:ac:c5:85:d9:c6:
         1f:e4:97:72:20:3a:51:41:30:be:94:ae:4f:7f:ad:48:9d:d5:
         9e:b4:c1:20:4d:62:27:48:9d:56:26:57:96:13:c5:a4:24:5f:
         5b:68:d7:64
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYmJRGP1mHrXs8f4xzypZveiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNzI0MTg1ODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTY0YjViZWFhODcyZjY4ZmFkNjc4ODA0MjI5NGJjY2E0NDdiNTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPEWrPQHb8YeG09X/JU/fDnI0kBo
56ZB0zXb0Dw7DBzrHLw2jA8RRmzKNWC3a+DlyetxYgwrYCi7Mfdv2YYYIWxSNB8M
QUHE5SUZHG/JRtP35xLRpqvS2PK6yRPSD8HEbq/B8VA7WQIUwXF7INGmVZNCPVnp
EEUdvR1L3bj1O3oIQ+F2haRyX3odBxhwDaF4hxLxGf2L5vfhd6Jm5rFKEnIDGPCh
rkrWYADyVFtmaJ5qTsuAHfoycJdLYGg8j3JKxoCmwm3E1d/N0dbBgIH07iZh0g4P
pyAPlbDmQx+HYGpxJZiI23PibV0FVEkdUtpE3SwVs0cWStrWaS4Eb6xcdQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOVktb6qhy9o+tZ4gEIpS8ykR7U0MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNVdTMXZxcUhMMmo2MW5pQVFpbEx6S1JIdFRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xByIg
MA0GCSqGSIb3DQEBCwUAA4IBAQApt6t0f6Hmd6RKdEwlXJW378JrT4QXYBMBzjhU
ebUQggMxpmJZ/WC3Y73++f8Yu/AYuZmR8C5w7lGJcNPoGJTTVu3R1X8+qvmJ4mTk
HVgV7QXzNmAwa0gnXpIFmdxZQ6nSKR8h1qfqp5GR+/UhwL25ESGGcn9CbtzJDOVN
kV0+DI9ODmQUEr/l9+dRVQ6lDnifrNibj1pwKJJ/4tMxehKhr5tBjfZVAC3bNfr+
+ru9r7fJFUQFmZcfQV8mDdcHOoJBMH7RrP+vt1g/A3YSEmsUEiuurMWF2cYf5Jdy
IDpRQTC+lK5Pf61IndWetMEgTWInSJ1WJleWE8WkJF9baNdk
-----END CERTIFICATE-----