Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7QgOrZ14TB97bYacXO2CtA4NgF4.roa
File:                     7QgOrZ14TB97bYacXO2CtA4NgF4.roa (raw, json)
Hash identifier:          /X9TwSge0Wvxv6QC5R5s5W0bfXveNy4Qom/hWRwLzSQ=
Subject key identifier:   ED:08:0E:AD:9D:78:4C:1F:7B:6D:86:9C:5C:ED:82:B4:0E:0D:80:5E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187DC629F4B8EB69012CAAF85A99740CF1A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7QgOrZ14TB97bYacXO2CtA4NgF4.roa
Signing time:             Tue 02 May 2023 12:14:23 +0000
ROA not before:           Tue 02 May 2023 12:14:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203333
IP address blocks:        2a0e:b107:cb0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:dc:62:9f:4b:8e:b6:90:12:ca:af:85:a9:97:40:cf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May  2 12:14:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed080ead9d784c1f7b6d869c5ced82b40e0d805e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:68:71:5f:26:ee:8c:07:b4:93:cc:61:0e:78:
                    32:d0:e0:02:af:09:b1:bb:54:32:07:4a:d8:5b:64:
                    11:ef:41:87:e9:01:62:ee:a6:3e:5d:86:6f:aa:36:
                    7c:83:5f:70:c1:59:52:0e:2f:32:95:2d:cc:dc:e0:
                    b2:32:78:b1:fb:ad:7d:a6:44:0b:1e:cf:29:ff:34:
                    6c:76:4e:ec:e1:75:b2:92:58:71:71:88:ec:6d:ff:
                    d7:9f:fc:bb:9a:25:9c:35:f3:8b:23:47:80:6a:a3:
                    e0:14:77:7e:e7:b6:42:00:56:a7:c1:cd:e0:62:12:
                    0e:b1:41:6d:c5:41:06:ad:53:a0:65:36:c4:03:82:
                    43:25:19:7d:85:06:bb:01:6b:34:57:f5:fe:53:5b:
                    7e:71:fc:15:b9:09:78:9d:af:7b:4c:32:2d:c4:13:
                    2e:2a:d6:a4:70:b3:92:2f:99:50:43:da:d4:f2:50:
                    15:81:19:40:f9:e1:8a:a2:eb:c7:e5:b3:0b:e5:31:
                    e1:84:8d:7b:58:79:86:37:e9:a4:52:e0:06:c9:6c:
                    ac:f6:a0:56:c8:85:90:fb:0d:b6:78:79:1c:af:70:
                    bc:cc:67:67:69:ce:37:71:cd:1c:7c:b9:d2:c2:5e:
                    4d:7f:a6:c6:16:7e:09:1a:b2:e2:e9:d4:0d:f3:b0:
                    74:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:08:0E:AD:9D:78:4C:1F:7B:6D:86:9C:5C:ED:82:B4:0E:0D:80:5E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7QgOrZ14TB97bYacXO2CtA4NgF4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:cb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1b:dc:f4:98:4a:81:86:60:3b:e2:51:21:5f:d6:f1:a4:e3:78:
         5c:1b:d5:4c:96:8d:54:3a:24:18:0e:5f:8c:d0:12:53:9b:92:
         4a:c1:27:45:b4:8e:af:96:85:b1:01:02:53:c5:a4:32:fb:87:
         75:d6:3b:b6:a5:5d:3e:58:04:07:d6:ac:b5:b7:46:60:06:7e:
         73:1f:05:ae:31:41:0f:bd:94:d9:04:bf:b1:c7:11:a8:6d:49:
         74:3e:6c:33:6e:74:0b:a3:c9:86:0e:6f:0d:f2:a2:12:5e:b2:
         21:0b:a1:24:db:a5:5f:2e:2e:9d:d7:b0:8f:f3:e6:e1:86:e5:
         6f:8d:21:58:71:80:08:69:d8:44:1a:2d:35:3b:98:83:8a:61:
         43:a6:16:ce:59:69:aa:66:21:ac:f9:90:5d:9d:ff:2d:c7:28:
         b8:db:9f:42:bf:81:36:97:52:70:58:88:82:eb:9c:67:23:61:
         f5:7c:94:b8:73:4f:38:81:a5:f3:5d:24:54:5a:39:e3:38:50:
         8e:f2:4c:b0:2c:31:f1:bd:3c:42:47:a2:c6:da:69:47:0c:5a:
         74:d3:91:8f:68:91:a7:a3:bc:d2:9d:73:97:35:81:2c:07:4b:
         bf:72:bb:b8:7c:df:fe:44:49:2f:88:ae:c2:00:cd:43:d0:39:
         e3:2b:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----