Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6uP5LwcqFHWin_Ph05CHtPWzBzw.roa
File:                     6uP5LwcqFHWin_Ph05CHtPWzBzw.roa (raw, json)
Hash identifier:          Tn82/2Ef1iZUIlZT2nOJnhCuAYfN0hXddwji84ctNoY=
Subject key identifier:   EA:E3:F9:2F:07:2A:14:75:A2:9F:F3:E1:D3:90:87:B4:F5:B3:07:3C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E786BD29C22836905276954554E991
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6uP5LwcqFHWin_Ph05CHtPWzBzw.roa
Signing time:             Mon 02 Jan 2023 05:14:59 +0000
ROA not before:           Mon 02 Jan 2023 05:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57429
IP address blocks:        2a0e:b107:1340::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:86:bd:29:c2:28:36:90:52:76:95:45:54:e9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eae3f92f072a1475a29ff3e1d39087b4f5b3073c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:18:4f:58:2e:63:3e:e7:50:eb:a4:07:c8:
                    77:89:68:5b:71:7d:37:a8:75:ef:d8:30:06:a9:82:
                    63:29:c5:4e:27:19:01:86:0b:c5:77:3c:c1:a6:a9:
                    7d:77:39:31:81:fe:90:6c:5b:d0:49:b0:bf:46:31:
                    a6:e4:54:a2:07:a0:75:4f:d4:0f:d0:51:64:09:07:
                    25:90:66:15:3c:65:55:fb:44:8f:ee:7a:5c:6d:e8:
                    e5:6c:b0:4e:da:0e:42:43:45:e3:f0:7d:70:a6:10:
                    61:57:c2:6b:c4:a1:f0:f7:cf:1b:61:5a:1e:a3:6b:
                    2e:87:56:9d:37:28:84:ca:0a:08:f7:f9:7c:89:f7:
                    03:0b:ec:45:ea:94:60:80:93:ad:46:15:86:71:8c:
                    ae:28:e2:a1:49:c3:af:ae:cc:88:79:67:93:f8:0a:
                    5c:db:d7:c6:f6:67:5b:79:3c:b9:0d:af:79:a5:1d:
                    a0:9b:7a:89:60:54:34:5a:00:d8:59:2f:94:4c:dd:
                    62:ec:65:69:bb:1b:01:9f:59:c9:5f:87:13:df:61:
                    69:69:60:12:a2:5c:4c:75:0d:27:bf:7b:c1:b8:33:
                    64:1c:95:a7:ab:4c:c5:f1:8d:09:09:81:98:c7:d6:
                    3e:5f:17:d2:96:00:48:8e:29:34:49:d4:9d:8b:1d:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E3:F9:2F:07:2A:14:75:A2:9F:F3:E1:D3:90:87:B4:F5:B3:07:3C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6uP5LwcqFHWin_Ph05CHtPWzBzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1340::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:71:a7:fa:c2:89:93:8f:28:79:46:de:7b:30:41:3a:11:4f:
         4e:fd:e6:3f:47:a9:1c:7c:23:16:aa:a0:6d:04:2c:87:ed:bd:
         1c:bd:73:8c:44:a6:cf:e7:f5:c5:f3:d7:37:bd:17:ed:20:0f:
         28:9e:65:da:3f:4a:23:6e:79:ec:6d:eb:a4:59:0d:c7:bc:b4:
         4e:16:b1:31:2d:bf:a8:11:ef:f7:21:09:f0:bb:40:f1:b2:f4:
         69:2c:77:94:b7:7c:eb:c4:da:ce:df:0a:b0:55:d4:90:f8:62:
         93:cb:05:4d:7b:55:d9:3e:fe:fd:0a:11:44:4f:42:cd:be:78:
         c3:20:5d:5f:70:46:f9:d9:22:68:5f:96:7c:e1:77:b6:75:6b:
         1f:4b:a8:de:be:e7:bc:66:54:98:15:56:e4:60:0b:9b:58:25:
         a9:97:1b:43:6f:d9:8e:fb:bd:c1:3d:bd:45:f7:e8:16:f2:ee:
         dc:88:32:21:97:e6:e2:ed:6a:bc:8e:7f:e1:84:38:ad:75:70:
         9e:ca:b2:b9:65:f6:cd:5e:6b:d5:2e:5f:cc:1b:b8:65:01:03:
         51:36:2a:e5:15:72:55:c7:d4:ec:2f:2e:bb:1b:eb:ed:d5:ca:
         b2:2a:e4:af:01:be:02:f4:3f:9b:88:cf:c0:2e:e1:a7:9f:a8:
         37:92:29:ef
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw54a9KcIoNpBSdpVFVOmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWUzZjkyZjA3MmExNDc1YTI5ZmYzZTFkMzkwODdiNGY1YjMwNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8AYT1guYz7nUOukB8h3iWhbcX03
qHXv2DAGqYJjKcVOJxkBhgvFdzzBpql9dzkxgf6QbFvQSbC/RjGm5FSiB6B1T9QP
0FFkCQclkGYVPGVV+0SP7npcbejlbLBO2g5CQ0Xj8H1wphBhV8JrxKHw988bYVoe
o2suh1adNyiEygoI9/l8ifcDC+xF6pRggJOtRhWGcYyuKOKhScOvrsyIeWeT+Apc
29fG9mdbeTy5Da95pR2gm3qJYFQ0WgDYWS+UTN1i7GVpuxsBn1nJX4cT32FpaWAS
olxMdQ0nv3vBuDNkHJWnq0zF8Y0JCYGYx9Y+XxfSlgBIjik0SdSdix3YYwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOrj+S8HKhR1op/z4dOQh7T1swc8MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNnVQNUx3Y3FGSFdpbl9QaDA1Q0h0UFd6Qnp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxNA
MA0GCSqGSIb3DQEBCwUAA4IBAQA4caf6womTjyh5Rt57MEE6EU9O/eY/R6kcfCMW
qqBtBCyH7b0cvXOMRKbP5/XF89c3vRftIA8onmXaP0ojbnnsbeukWQ3HvLROFrEx
Lb+oEe/3IQnwu0DxsvRpLHeUt3zrxNrO3wqwVdSQ+GKTywVNe1XZPv79ChFET0LN
vnjDIF1fcEb52SJoX5Z84Xe2dWsfS6jevue8ZlSYFVbkYAubWCWplxtDb9mO+73B
Pb1F9+gW8u7ciDIhl+bi7Wq8jn/hhDitdXCeyrK5ZfbNXmvVLl/MG7hlAQNRNirl
FXJVx9TsLy67G+vt1cqyKuSvAb4C9D+biM/ALuGnn6g3kinv
-----END CERTIFICATE-----