Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8-M1KIA8LjjZ7tlioxAYhUHepZk.roa
File:                     8-M1KIA8LjjZ7tlioxAYhUHepZk.roa (raw, json)
Hash identifier:          SZZB/seLiqrMJkK/jhdGt8lI4AX/wY23UsoVdurL9QI=
Subject key identifier:   F3:E3:35:28:80:3C:2E:38:D9:EE:D9:62:A3:10:18:85:41:DE:A5:99
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7DE62BED62BF3C019287A4818A0DB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8-M1KIA8LjjZ7tlioxAYhUHepZk.roa
Signing time:             Mon 02 Jan 2023 05:15:21 +0000
ROA not before:           Mon 02 Jan 2023 05:15:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209556
IP address blocks:        2a0e:b107:30f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:de:62:be:d6:2b:f3:c0:19:28:7a:48:18:a0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f3e33528803c2e38d9eed962a310188541dea599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:94:1c:00:9d:12:34:e5:44:2d:6d:7e:dd:
                    e0:9c:f9:a6:73:67:0e:67:46:62:38:e3:80:fe:12:
                    71:bf:29:42:9a:1f:8a:36:55:d3:78:56:4f:8e:3e:
                    c8:8d:43:f3:41:cb:28:1a:e0:12:d2:b6:40:4b:d8:
                    8b:2b:83:32:f7:90:fa:81:f6:56:a2:b2:81:03:ee:
                    51:a9:7b:86:00:b0:69:e1:06:ab:b9:01:f5:dc:4b:
                    28:57:b3:5c:b1:63:04:03:3c:fd:5b:c6:73:68:14:
                    80:54:53:97:45:fe:8e:18:e9:1c:57:13:76:5f:14:
                    f2:e5:eb:3b:98:67:f1:64:a8:60:35:25:c3:96:f5:
                    c5:f3:30:24:be:7a:3e:dc:47:5e:97:e2:09:e6:f5:
                    86:02:9c:c3:dc:94:c3:fa:37:a8:5b:87:c6:1a:e9:
                    ae:07:09:fe:b6:ff:e5:e6:12:02:4a:5f:76:90:5c:
                    e9:70:01:e7:9c:31:e9:f2:89:86:81:14:62:df:91:
                    56:4d:8c:09:fb:81:00:ae:c2:fb:31:8f:f1:bb:dc:
                    58:99:ac:6e:63:7e:e9:72:49:5f:36:13:b3:ee:64:
                    ce:e8:5f:04:30:1b:ed:33:4f:61:1b:72:ca:95:96:
                    f5:0a:9a:07:44:be:ca:eb:4f:b9:68:0d:2e:10:4c:
                    e6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E3:35:28:80:3C:2E:38:D9:EE:D9:62:A3:10:18:85:41:DE:A5:99
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8-M1KIA8LjjZ7tlioxAYhUHepZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:30f::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:5d:b2:d7:d8:43:50:ef:8b:ba:e8:62:fb:72:c6:4c:95:8e:
         55:dd:60:ab:43:c0:53:12:95:92:d2:9d:11:88:99:af:ed:fd:
         33:07:f9:5f:42:b0:98:d8:b8:0d:09:d6:e0:4f:1a:27:af:c9:
         ec:c3:fb:ad:de:d8:ee:78:d2:81:f1:35:6c:e9:d1:cc:f2:6c:
         e5:d9:31:b7:e8:1d:60:a7:4d:75:d6:32:6e:0e:62:fe:93:d0:
         d7:bc:7d:a1:6a:a4:40:7f:0e:de:e1:5d:7c:de:49:bb:c0:69:
         92:1f:dc:fd:cb:2e:64:cd:1c:55:e7:fe:29:bc:2b:5d:f1:29:
         07:69:04:58:2b:59:78:d3:47:2c:2a:78:7e:7f:d3:57:f1:c1:
         04:cd:8b:b7:96:38:2a:74:5e:2f:37:f0:5e:a7:e9:a0:6d:b6:
         a0:04:07:30:35:5f:6c:b7:53:05:03:55:f8:61:19:a1:c9:5a:
         73:b5:de:3d:28:6d:f0:3c:6d:d2:3c:b9:20:2f:f6:44:23:ae:
         c4:11:cf:9c:11:66:4f:0f:77:a0:3b:ab:37:0b:e5:11:ce:83:
         e1:5f:3e:3c:b2:6d:0d:6e:c1:be:b6:55:20:2d:f2:a2:3e:78:
         71:5a:0a:0d:6e:83:e8:1c:b5:96:f5:0d:c0:54:0e:48:28:9d:
         f7:3c:d3:26
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw595ivtYr88AZKHpIGKDbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2UzMzUyODgwM2MyZTM4ZDllZWQ5NjJhMzEwMTg4NTQxZGVhNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrqUHACdEjTlRC1tft3gnPmmc2cO
Z0ZiOOOA/hJxvylCmh+KNlXTeFZPjj7IjUPzQcsoGuAS0rZAS9iLK4My95D6gfZW
orKBA+5RqXuGALBp4QaruQH13EsoV7NcsWMEAzz9W8ZzaBSAVFOXRf6OGOkcVxN2
XxTy5es7mGfxZKhgNSXDlvXF8zAkvno+3Edel+IJ5vWGApzD3JTD+jeoW4fGGumu
Bwn+tv/l5hICSl92kFzpcAHnnDHp8omGgRRi35FWTYwJ+4EArsL7MY/xu9xYmaxu
Y37pcklfNhOz7mTO6F8EMBvtM09hG3LKlZb1CpoHRL7K60+5aA0uEEzmUQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPPjNSiAPC442e7ZYqMQGIVB3qWZMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvOC1NMUtJQThMampaN3RsaW94QVloVUhlcFprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwMP
MA0GCSqGSIb3DQEBCwUAA4IBAQAEXbLX2ENQ74u66GL7csZMlY5V3WCrQ8BTEpWS
0p0RiJmv7f0zB/lfQrCY2LgNCdbgTxonr8nsw/ut3tjueNKB8TVs6dHM8mzl2TG3
6B1gp0111jJuDmL+k9DXvH2haqRAfw7e4V183km7wGmSH9z9yy5kzRxV5/4pvCtd
8SkHaQRYK1l400csKnh+f9NX8cEEzYu3ljgqdF4vN/Bep+mgbbagBAcwNV9st1MF
A1X4YRmhyVpztd49KG3wPG3SPLkgL/ZEI67EEc+cEWZPD3egO6s3C+URzoPhXz48
sm0NbsG+tlUgLfKiPnhxWgoNboPoHLWW9Q3AVA5IKJ33PNMm
-----END CERTIFICATE-----