Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6nIAkjXPgA49pEBKa7pV6_0aL_Y.roa
File:                     6nIAkjXPgA49pEBKa7pV6_0aL_Y.roa (raw, json)
Hash identifier:          I5TVe6Ke5Gt3LCEdjXFVzNeFUygonizvnC6I4AYAuaM=
Subject key identifier:   EA:72:00:92:35:CF:80:0E:3D:A4:40:4A:6B:BA:55:EB:FD:1A:2F:F6
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018C48E5B16F87E0BDB7CB4E3E4D55828ED0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6nIAkjXPgA49pEBKa7pV6_0aL_Y.roa
Signing time:             Fri 08 Dec 2023 10:07:41 +0000
ROA not before:           Fri 08 Dec 2023 10:07:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49581
IP address blocks:        2a0e:b107:27d0::/45 maxlen: 48
                          2a0e:b107:2800::/45 maxlen: 48
                          2a0e:b107:27f8::/45 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:48:e5:b1:6f:87:e0:bd:b7:cb:4e:3e:4d:55:82:8e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec  8 10:07:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea72009235cf800e3da4404a6bba55ebfd1a2ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:09:23:bb:d5:73:2b:4a:97:ae:4c:3d:26:77:
                    3a:7b:a2:fc:a5:1a:79:a0:de:f3:6e:b4:dc:67:54:
                    f1:58:68:b5:10:e2:a1:e4:28:e8:ef:15:35:85:64:
                    66:b2:96:c6:ee:88:44:ba:bf:f8:6a:9d:76:d1:88:
                    b3:28:49:26:a3:da:f7:ae:d3:a8:c0:94:29:70:a8:
                    e3:32:96:42:97:fb:19:83:e1:f6:20:21:6f:8f:1b:
                    bd:fe:11:a4:85:03:fe:70:ef:f8:88:61:e0:3c:f8:
                    c4:ad:e7:35:e5:48:df:ed:09:08:f0:e8:76:94:56:
                    6f:28:ea:a8:ee:4c:16:d3:4d:ee:40:85:71:e3:a9:
                    4b:95:09:23:98:2b:c3:ef:0c:0a:5d:34:7b:51:96:
                    77:2a:55:f6:4e:11:c2:4b:38:f0:a7:a3:f5:b9:b5:
                    1a:0b:ac:7d:a0:5f:85:30:db:89:14:41:14:01:2e:
                    00:54:a0:c5:a2:be:85:09:b5:73:11:ac:c9:7e:5d:
                    88:7f:85:25:02:c1:e0:53:57:fa:5b:4b:1f:fc:d0:
                    44:47:32:00:54:e7:ec:eb:53:67:ac:a9:c2:c6:b6:
                    b2:a8:40:6e:29:91:ec:ad:7d:da:2e:32:bd:58:30:
                    e8:fd:73:b1:15:63:61:8b:ae:3c:88:d1:b1:01:84:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:72:00:92:35:CF:80:0E:3D:A4:40:4A:6B:BA:55:EB:FD:1A:2F:F6
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6nIAkjXPgA49pEBKa7pV6_0aL_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27d0::/45
                  2a0e:b107:27f8::-2a0e:b107:2807:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         7c:c3:d7:d0:65:c6:df:6a:ad:1f:3a:ca:69:8c:3f:64:f1:b5:
         fc:3f:4d:5a:fd:78:a9:5c:e0:0f:c1:6a:a1:67:b7:e0:12:0c:
         21:f3:51:74:04:8b:69:d0:07:ae:67:66:f9:53:a6:1e:1a:53:
         fd:a5:30:9e:48:90:ea:ec:43:a4:06:06:f5:f0:b3:f5:9f:93:
         bb:4b:e4:b6:67:df:83:a2:e5:bb:77:26:bc:d5:68:6b:12:f9:
         9a:58:cd:6b:f5:78:61:2f:c8:3e:3b:19:27:03:75:7b:b3:f2:
         56:c5:be:7b:99:6a:4f:03:b5:82:a9:01:9e:e5:cc:38:41:76:
         34:80:2b:27:93:93:ed:f3:f2:81:34:42:75:20:b9:9a:f4:c6:
         4d:6e:15:f6:02:cc:0a:60:2c:02:9f:a4:37:16:e6:d8:a5:09:
         e8:30:dd:1e:da:fe:55:c3:71:cd:bd:52:b0:39:e7:c8:53:f9:
         3a:28:79:fc:a7:79:65:64:90:ea:4c:ba:0a:10:59:94:65:00:
         62:ad:90:50:b2:55:66:74:d7:5c:cd:c7:14:43:39:98:5e:2b:
         c8:6b:d7:68:4f:b2:1d:9f:c7:1d:ec:65:1e:a8:ea:12:c3:dc:
         c7:73:63:ff:d4:c9:5f:5d:59:6d:e4:84:7e:c6:fd:84:9c:00:
         01:99:67:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----