Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7RmmE-dXIKu4yfcgWExlz1PvHwE.roa
File:                     7RmmE-dXIKu4yfcgWExlz1PvHwE.roa (raw, json)
Hash identifier:          d4WIRh0TqdKdVvDhkj3JMKzkl2Z6G1RrliFLnDsXdKY=
Subject key identifier:   ED:19:A6:13:E7:57:20:AB:B8:C9:F7:20:58:4C:65:CF:53:EF:1F:01
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CC9BD3EE95CE21DD9E58636B4AE456FFB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7RmmE-dXIKu4yfcgWExlz1PvHwE.roa
Signing time:             Tue 02 Jan 2024 10:34:31 +0000
ROA not before:           Tue 02 Jan 2024 10:34:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212034
IP address blocks:        2a0e:b107:3e0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 12 Apr 2024 16:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bd:3e:e9:5c:e2:1d:d9:e5:86:36:b4:ae:45:6f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 10:34:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ed19a613e75720abb8c9f720584c65cf53ef1f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:63:fe:46:b8:91:5a:87:ab:c7:3f:7b:99:99:
                    87:61:fa:95:66:e9:42:a5:9a:a1:90:5d:3a:7b:06:
                    ae:49:19:e5:22:4e:24:41:85:39:76:b2:5f:68:2e:
                    95:cc:16:17:ef:48:93:f3:39:8f:83:26:09:3e:17:
                    7c:99:98:e3:47:b1:a0:38:7e:53:83:6d:72:c0:1d:
                    25:c7:ed:e6:21:d8:f7:fe:c8:3c:1e:b9:4c:39:2f:
                    e3:10:e1:77:9e:3c:2e:41:06:90:03:b7:83:ad:3e:
                    9f:4c:dc:82:cc:7d:e9:d2:17:ad:03:59:f0:9e:46:
                    ba:47:d9:dd:11:f2:94:4a:60:57:a5:c3:6f:26:5f:
                    c1:7d:ad:d9:e0:e5:86:7a:30:17:af:20:9d:f0:44:
                    0b:3b:55:cc:cf:3c:74:02:14:d5:9c:66:22:1b:b2:
                    bf:05:29:11:6c:58:5c:c6:7f:f6:0f:e3:53:c5:86:
                    06:f9:31:ef:e7:e1:b4:23:3e:41:3e:37:5d:7b:96:
                    a0:a3:aa:2a:98:37:7c:a4:67:fb:ef:81:5a:e2:d7:
                    76:63:94:23:7c:d3:1d:a8:03:0d:dd:00:a3:cb:18:
                    e2:e1:31:4e:ee:d7:95:b4:a4:ae:d8:8c:3c:f1:8c:
                    cd:25:06:a6:de:c8:b1:6f:4c:be:1c:cf:a2:1d:9a:
                    8a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:19:A6:13:E7:57:20:AB:B8:C9:F7:20:58:4C:65:CF:53:EF:1F:01
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7RmmE-dXIKu4yfcgWExlz1PvHwE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:3e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:c9:d2:c1:20:e1:35:f9:23:5f:b0:8f:8d:7c:7f:14:e3:36:
         b1:a8:49:9b:11:3c:04:2f:fd:d0:1f:7e:eb:29:07:e4:ce:67:
         2f:04:5e:5e:e8:4d:14:99:e7:b4:b5:36:9c:d1:c3:2b:cd:10:
         51:37:18:96:a8:a2:82:75:f5:21:fa:bb:85:8c:58:b0:bb:23:
         c3:91:9e:50:d5:a7:53:87:e2:ca:b8:72:bd:64:82:1a:dc:ad:
         53:fb:a6:3e:e3:75:21:2f:ae:04:a9:36:42:d7:88:11:e2:cf:
         f1:f8:37:7d:90:af:9b:0e:85:bf:d4:04:5b:cd:0b:ac:de:44:
         78:ba:24:98:59:3e:1d:39:e4:31:1f:31:d5:9a:35:8d:47:23:
         e7:dd:af:09:7d:ed:a3:d8:e0:f3:c1:b7:86:e0:88:7d:01:ef:
         84:98:ff:57:cb:4c:62:63:65:55:14:63:67:38:aa:05:83:e4:
         19:f4:f2:82:aa:40:61:b9:ab:7f:2c:98:a8:ff:c4:cc:20:03:
         84:63:a4:81:0d:d7:7a:83:73:67:f3:f9:7b:5a:9e:ef:3d:ed:
         d7:81:9d:e8:69:2d:54:b1:f7:7f:34:12:37:67:bc:d4:ff:49:
         ad:d4:7f:f0:87:e9:07:de:34:d8:37:76:d0:fa:1b:0c:28:b5:
         de:6b:9d:d3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvT7pXOId2eWGNrSuRW/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDE5YTYxM2U3NTcyMGFiYjhjOWY3MjA1ODRjNjVjZjUzZWYxZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2P+RriRWoerxz97mZmHYfqVZulC
pZqhkF06ewauSRnlIk4kQYU5drJfaC6VzBYX70iT8zmPgyYJPhd8mZjjR7GgOH5T
g21ywB0lx+3mIdj3/sg8HrlMOS/jEOF3njwuQQaQA7eDrT6fTNyCzH3p0hetA1nw
nka6R9ndEfKUSmBXpcNvJl/Bfa3Z4OWGejAXryCd8EQLO1XMzzx0AhTVnGYiG7K/
BSkRbFhcxn/2D+NTxYYG+THv5+G0Iz5BPjdde5ago6oqmDd8pGf774Fa4td2Y5Qj
fNMdqAMN3QCjyxji4TFO7teVtKSu2Iw88YzNJQam3sixb0y+HM+iHZqKCwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO0ZphPnVyCruMn3IFhMZc9T7x8BMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvN1JtbUUtZFhJS3U0eWZjZ1dFeGx6MVB2SHdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwPg
MA0GCSqGSIb3DQEBCwUAA4IBAQBjydLBIOE1+SNfsI+NfH8U4zaxqEmbETwEL/3Q
H37rKQfkzmcvBF5e6E0Umee0tTac0cMrzRBRNxiWqKKCdfUh+ruFjFiwuyPDkZ5Q
1adTh+LKuHK9ZIIa3K1T+6Y+43UhL64EqTZC14gR4s/x+Dd9kK+bDoW/1ARbzQus
3kR4uiSYWT4dOeQxHzHVmjWNRyPn3a8Jfe2j2ODzwbeG4Ih9Ae+EmP9Xy0xiY2VV
FGNnOKoFg+QZ9PKCqkBhuat/LJio/8TMIAOEY6SBDdd6g3Nn8/l7Wp7vPe3XgZ3o
aS1Usfd/NBI3Z7zU/0mt1H/wh+kH3jTYN3bQ+hsMKLXea53T
-----END CERTIFICATE-----