Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6RmjYWX0uNT_rQRq9XZJBdkl8pc.roa
File:                     6RmjYWX0uNT_rQRq9XZJBdkl8pc.roa (raw, json)
Hash identifier:          rfHTR4tYGhfG+tpzvNhXdqysUmUi/UMPCsczj2VBy54=
Subject key identifier:   E9:19:A3:61:65:F4:B8:D4:FF:AD:04:6A:F5:76:49:05:D9:25:F2:97
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018C6D4F0DB422C1B4B55EB5C4C02BB7B81C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6RmjYWX0uNT_rQRq9XZJBdkl8pc.roa
Signing time:             Fri 15 Dec 2023 11:49:06 +0000
ROA not before:           Fri 15 Dec 2023 11:49:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29632
IP address blocks:        2a0e:b107:27da::/48 maxlen: 48
                          2a0e:b107:27de::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6d:4f:0d:b4:22:c1:b4:b5:5e:b5:c4:c0:2b:b7:b8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec 15 11:49:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e919a36165f4b8d4ffad046af5764905d925f297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:be:f6:52:1e:4d:7e:50:2d:43:ce:c9:8d:
                    7e:a2:b3:c2:33:6d:a3:09:ff:2b:82:17:53:6c:45:
                    52:d8:de:b3:65:1e:3c:d5:60:67:2e:16:20:41:57:
                    97:0d:9c:38:bb:48:d4:e1:74:2b:3a:ef:51:a4:3d:
                    36:12:a2:d3:b3:ca:d6:cd:cb:78:cc:f8:b1:32:78:
                    db:e3:ec:d2:17:ac:9c:9a:4a:1b:5a:b9:33:31:73:
                    e2:66:66:00:30:20:52:56:69:3d:73:ff:dd:1a:e1:
                    7d:1f:4f:27:4c:b3:9f:c7:85:52:e7:56:1a:61:2a:
                    d6:e7:d0:35:b7:31:fb:7b:b1:58:0c:64:c2:e8:a4:
                    4c:9c:5f:d3:9c:dd:d2:9b:2a:fa:09:00:6b:93:12:
                    b3:a6:1b:fc:cf:b9:7c:1b:0b:fc:06:16:36:ad:09:
                    a6:56:89:e0:6e:52:99:d2:b2:d1:a6:d9:18:eb:8d:
                    3e:a9:cc:a2:42:cb:f9:c5:9e:0e:6f:40:38:0e:8c:
                    2f:b9:bc:80:6c:cd:c5:5b:40:2b:11:5f:eb:e9:c4:
                    af:ef:bc:db:f5:f1:a4:68:1f:3b:6b:93:1f:58:04:
                    d9:a3:c1:4b:95:d8:cf:c6:64:ae:9c:31:7f:cb:8c:
                    52:14:1c:92:01:51:b8:c0:a1:be:c8:8d:f9:82:d2:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:19:A3:61:65:F4:B8:D4:FF:AD:04:6A:F5:76:49:05:D9:25:F2:97
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6RmjYWX0uNT_rQRq9XZJBdkl8pc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27da::/48
                  2a0e:b107:27de::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:b6:02:56:f8:10:1a:ee:0f:48:e3:27:3f:0c:4e:db:b9:ce:
         5a:5f:c1:22:a9:46:75:93:bf:1b:d9:6c:5e:63:26:16:d0:74:
         22:f0:34:cb:24:10:91:15:17:d0:e6:6d:cc:78:fb:54:b7:3b:
         87:0c:63:16:73:b3:17:79:f9:7d:be:93:94:70:ee:b8:46:88:
         5a:22:cd:c7:47:fa:49:25:60:63:3f:2f:05:f9:43:60:01:22:
         38:f1:7b:de:43:a9:e8:6f:6a:28:37:77:de:16:67:23:45:42:
         ce:3f:a5:ce:7a:66:c7:42:28:3c:37:ec:51:48:53:71:48:11:
         e8:ba:21:69:7f:eb:cd:45:3d:bf:d2:bb:30:1a:91:19:fa:60:
         ea:17:67:2f:08:33:0e:cb:17:d4:81:e4:31:22:9c:4f:ff:8e:
         cb:0a:f9:8e:a4:f4:f7:15:8b:70:28:82:71:66:90:80:ac:f8:
         2b:f6:5a:81:6e:d3:3d:76:a9:6f:15:f8:b1:9e:b0:e4:ff:15:
         56:49:8b:9d:78:ba:39:62:91:2e:16:86:d5:f1:4b:3e:9a:fa:
         b7:9a:da:52:04:ec:2f:e8:fe:32:13:5f:de:ef:2f:99:5e:d9:
         1e:86:6e:31:11:b0:92:69:cd:f2:a8:4e:f5:38:48:c8:66:71:
         4a:f6:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----