Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5Wiv6Ksp48pAMrl6-S6epHh6VtA.roa
File:                     5Wiv6Ksp48pAMrl6-S6epHh6VtA.roa (raw, json)
Hash identifier:          6P1qHLUi/5lbnINj6cShgaJnOzu//ZSG3b71ygYcLVM=
Subject key identifier:   E5:68:AF:E8:AB:29:E3:CA:40:32:B9:7A:F9:2E:9E:A4:78:7A:56:D0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189C6BCF247CFE72DAB15CE3257B36E5F7D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5Wiv6Ksp48pAMrl6-S6epHh6VtA.roa
Signing time:             Sat 05 Aug 2023 17:26:58 +0000
ROA not before:           Sat 05 Aug 2023 17:26:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8075
IP address blocks:        2a0e:b107:27ac::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:c6:bc:f2:47:cf:e7:2d:ab:15:ce:32:57:b3:6e:5f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  5 17:26:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e568afe8ab29e3ca4032b97af92e9ea4787a56d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:db:cb:af:ab:cf:aa:fd:d8:62:27:09:29:67:
                    82:85:31:d4:bf:f2:1e:1b:2a:b8:ff:a2:3c:58:c3:
                    49:22:27:23:ad:70:00:77:69:d8:6f:c9:56:21:d1:
                    cb:8d:9f:0a:3f:70:74:96:de:11:ac:bc:72:74:d8:
                    b7:01:05:ef:12:b7:5a:fc:40:42:82:39:50:ae:59:
                    85:48:9d:41:df:7a:2c:8c:24:64:82:d4:c2:2d:a2:
                    1c:3b:77:3b:1a:6e:90:a3:19:70:97:13:bd:73:0b:
                    27:c6:05:91:1d:bf:49:04:1f:9f:c7:a7:21:40:17:
                    9d:fd:51:57:e0:6d:4b:b9:23:95:18:b5:0b:a0:bb:
                    f3:9d:08:b4:31:8e:2c:e6:e1:a2:43:f7:2d:85:87:
                    25:f5:c6:55:66:c2:f0:66:d5:d2:cf:c9:3a:f1:52:
                    07:76:d5:09:32:3c:cd:ba:91:55:84:71:b4:1d:ee:
                    07:99:c8:4c:ed:9c:ef:92:c6:2d:11:b7:ab:14:92:
                    9b:f0:c0:e0:77:65:75:5a:4d:68:fa:a3:c1:23:8d:
                    e7:87:42:c5:42:fd:b1:26:38:b1:df:c4:cc:fb:9a:
                    90:0c:c5:a9:46:f8:ac:3c:45:48:ea:2c:e0:64:3d:
                    bc:ee:64:bc:38:fc:d7:e6:22:c9:1b:c5:ed:10:71:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:68:AF:E8:AB:29:E3:CA:40:32:B9:7A:F9:2E:9E:A4:78:7A:56:D0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5Wiv6Ksp48pAMrl6-S6epHh6VtA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:c7:f1:81:9d:c2:d2:7a:c8:2c:0f:0a:9d:8c:74:6a:ca:1e:
         63:e1:7d:e0:4d:d0:4b:44:72:3f:1c:20:08:8f:de:a3:2d:c3:
         36:e0:41:f5:d6:b9:58:27:43:5d:db:86:99:0d:8c:44:ee:e7:
         d6:26:44:49:59:1a:ef:e9:99:cd:b8:a8:37:ef:25:53:ca:b6:
         67:39:62:91:a1:e8:00:d7:c0:3b:b3:e7:19:01:1f:1e:ed:46:
         7e:98:5d:70:8d:34:e9:f9:12:6d:05:55:ec:0f:f9:5e:9a:3b:
         3a:a3:91:6f:c0:2c:d3:1a:4a:e1:2a:0e:0f:f5:7d:54:85:d2:
         61:9e:8c:16:b6:3a:77:6b:a0:35:2a:3e:74:ba:99:56:7c:3c:
         fd:41:ff:e0:6c:c2:f1:35:bc:09:94:51:48:13:57:5e:f9:17:
         9f:18:4c:b3:fc:9a:41:b3:16:33:06:8d:d0:28:84:48:c7:78:
         c9:92:53:06:2c:f8:7a:67:96:11:bf:ac:5a:36:17:d7:b3:ec:
         8d:0e:4b:d1:02:c7:0f:90:2e:b7:87:3c:53:88:a0:46:64:a8:
         dd:b0:a6:19:4c:7a:e3:1a:7e:7d:53:54:0f:c4:16:71:5a:81:
         a5:e3:73:c9:3c:34:e0:fc:e9:73:d1:b1:04:80:26:e2:e4:47:
         71:57:11:db
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYnGvPJHz+ctqxXOMlezbl99MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwODA1MTcyNjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTY4YWZlOGFiMjllM2NhNDAzMmI5N2FmOTJlOWVhNDc4N2E1NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9vLr6vPqv3YYicJKWeChTHUv/Ie
Gyq4/6I8WMNJIicjrXAAd2nYb8lWIdHLjZ8KP3B0lt4RrLxydNi3AQXvErda/EBC
gjlQrlmFSJ1B33osjCRkgtTCLaIcO3c7Gm6QoxlwlxO9cwsnxgWRHb9JBB+fx6ch
QBed/VFX4G1LuSOVGLULoLvznQi0MY4s5uGiQ/cthYcl9cZVZsLwZtXSz8k68VIH
dtUJMjzNupFVhHG0He4HmchM7ZzvksYtEberFJKb8MDgd2V1Wk1o+qPBI43nh0LF
Qv2xJjix38TM+5qQDMWpRvisPEVI6izgZD287mS8OPzX5iLJG8XtEHGCuQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOVor+irKePKQDK5evkunqR4elbQMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNVdpdjZLc3A0OHBBTXJsNi1TNmVwSGg2VnRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xByes
MA0GCSqGSIb3DQEBCwUAA4IBAQCwx/GBncLSesgsDwqdjHRqyh5j4X3gTdBLRHI/
HCAIj96jLcM24EH11rlYJ0Nd24aZDYxE7ufWJkRJWRrv6ZnNuKg37yVTyrZnOWKR
oegA18A7s+cZAR8e7UZ+mF1wjTTp+RJtBVXsD/lemjs6o5FvwCzTGkrhKg4P9X1U
hdJhnowWtjp3a6A1Kj50uplWfDz9Qf/gbMLxNbwJlFFIE1de+RefGEyz/JpBsxYz
Bo3QKIRIx3jJklMGLPh6Z5YRv6xaNhfXs+yNDkvRAscPkC63hzxTiKBGZKjdsKYZ
THrjGn59U1QPxBZxWoGl43PJPDTg/Olz0bEEgCbi5EdxVxHb