Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5u51vghtYttDWv-883USa8zxPE0.roa
File:                     5u51vghtYttDWv-883USa8zxPE0.roa (raw, json)
Hash identifier:          irSSP50t77iX+ri8vzQcXmVUt9YNqB8y/Us3tjrf4YE=
Subject key identifier:   E6:EE:75:BE:08:6D:62:DB:43:5A:FF:BC:F3:75:12:6B:CC:F1:3C:4D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018DE7EE93F29981326D1766DE8FEC817739
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5u51vghtYttDWv-883USa8zxPE0.roa
Signing time:             Tue 27 Feb 2024 00:19:48 +0000
ROA not before:           Tue 27 Feb 2024 00:19:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212196
IP address blocks:        2a0e:b107:ec0::/44 maxlen: 48
                          2a0e:b107:ec0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 28 Feb 2024 00:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:e7:ee:93:f2:99:81:32:6d:17:66:de:8f:ec:81:77:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 27 00:19:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e6ee75be086d62db435affbcf375126bccf13c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:69:2e:e0:a0:14:30:f0:33:29:e0:eb:3e:
                    07:5e:cb:86:54:20:50:c3:a6:0e:3f:f4:f0:f1:ee:
                    55:1a:42:87:25:ee:fc:83:15:6f:3a:a3:0f:6e:c8:
                    91:bc:76:32:04:c5:09:e7:3f:56:0a:1a:90:f9:88:
                    15:67:1c:31:d1:52:b6:d3:a3:0a:53:33:dc:33:3a:
                    8a:1a:14:4a:0f:4c:40:82:ad:20:ff:9f:2e:45:0e:
                    98:ad:ee:35:eb:28:7c:66:27:df:7b:71:e1:2a:15:
                    bd:c1:a2:80:15:64:ff:e8:d2:34:45:c2:43:25:d1:
                    59:8e:84:03:e9:ad:1a:9a:10:3c:f2:03:13:c5:e5:
                    4b:d8:1e:ce:85:5c:27:17:86:19:02:95:07:fc:1c:
                    ce:ec:2c:d0:c6:19:85:d5:7c:51:62:a3:67:5a:eb:
                    2a:78:a4:b1:b9:36:3f:29:62:14:6f:45:17:81:c7:
                    1c:6a:e6:5b:b6:1b:c1:43:e9:49:12:77:8f:8e:90:
                    4b:c7:15:16:3a:8d:72:a9:ae:75:12:2c:0b:9c:77:
                    76:c1:89:f0:c3:c7:19:43:e4:8a:bf:b3:44:93:57:
                    dd:ed:49:da:32:55:49:92:72:97:a3:a0:17:5e:05:
                    02:92:01:2f:2b:7e:5d:02:6a:78:51:ad:d8:57:aa:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EE:75:BE:08:6D:62:DB:43:5A:FF:BC:F3:75:12:6B:CC:F1:3C:4D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5u51vghtYttDWv-883USa8zxPE0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:ec0::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:96:a7:b8:5e:e8:49:10:02:a5:e1:35:6a:e6:9d:ee:b3:bc:
         04:3c:e4:0b:65:da:82:70:35:39:01:2d:f5:ab:1e:9d:9c:7c:
         ec:35:71:17:d8:b5:bc:be:c9:70:58:3c:e4:09:f8:3d:56:72:
         88:13:88:fb:44:87:90:ed:80:11:c8:44:5e:61:e6:39:09:48:
         c0:4b:14:15:a1:23:cd:28:03:99:a0:23:a6:1f:e3:9d:72:ec:
         30:01:2b:91:c7:da:c6:1b:8c:c1:f1:13:0a:0a:72:a0:d5:1c:
         2e:0e:d2:8d:c9:6a:78:33:97:f1:d0:1b:ff:91:46:44:27:dc:
         f8:0d:6c:98:77:fa:90:2e:4f:cd:07:78:47:62:87:2e:94:65:
         53:fa:52:57:be:39:b9:b4:97:ed:3b:d0:4b:96:19:43:c6:81:
         96:d0:ec:bb:56:58:ea:74:9a:48:bf:02:48:f0:04:78:9a:40:
         43:d6:3b:97:d4:6e:4f:50:3a:db:6c:a0:c5:2f:86:31:c7:54:
         f1:ea:fd:b6:c1:c0:6b:26:44:ff:d1:7c:2e:88:57:8d:52:92:
         dc:79:3d:6e:74:14:96:a5:e8:3a:6f:7c:f5:38:fe:2e:fd:b1:
         f2:44:e2:84:7a:cb:23:72:22:1f:53:59:53:cc:56:3f:a8:29:
         b3:95:92:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----