Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8cvJHfvrFZ8erm82__onPsGIhCs.roa
File:                     8cvJHfvrFZ8erm82__onPsGIhCs.roa (raw, json)
Hash identifier:          13dcTbcEhAtxDnyO+qU8aevh3G10E1lOLw79nHoBy3g=
Subject key identifier:   F1:CB:C9:1D:FB:EB:15:9F:1E:AE:6F:36:FF:FA:27:3E:C1:88:84:2B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CC9BCFB090859D45BA41A28E24DBDB406
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8cvJHfvrFZ8erm82__onPsGIhCs.roa
Signing time:             Tue 02 Jan 2024 10:34:14 +0000
ROA not before:           Tue 02 Jan 2024 10:34:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200993
IP address blocks:        2a0e:97c0:5d0::/44 maxlen: 48
                          2a0e:b107:279d::/48 maxlen: 48
                          2a0e:b107:279a::/48 maxlen: 48
                          2a0e:b107:278a::/48 maxlen: 48
                          2a0e:b107:279f::/48 maxlen: 48
                          2a0e:97c1::/40 maxlen: 48
                          2a0e:b107:2691::/48 maxlen: 48
                          2a0e:b107:2799::/48 maxlen: 48
                          2a0e:b107:279e::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 21:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:fb:09:08:59:d4:5b:a4:1a:28:e2:4d:bd:b4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 10:34:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f1cbc91dfbeb159f1eae6f36fffa273ec188842b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:37:10:80:2b:7b:45:67:73:2c:08:3d:a0:
                    80:14:eb:45:ad:7c:66:81:46:2b:0d:c0:e4:3a:9f:
                    7c:87:49:88:27:fb:ef:52:f5:b0:e7:12:aa:f5:86:
                    3d:ee:b0:58:1c:bf:a6:c1:0d:4b:b2:5a:1d:b7:8e:
                    0e:e3:1d:8e:0a:1b:de:27:f2:65:37:67:52:87:4e:
                    61:f4:23:bd:f1:75:89:2c:60:53:04:d6:4e:16:59:
                    11:58:5a:e2:a3:79:20:d2:93:43:8e:fb:dd:67:9c:
                    6f:f9:41:22:fc:a2:28:b1:4d:1d:07:c5:fd:63:55:
                    a5:ec:2a:4c:d1:b3:15:7e:50:2a:6c:f0:33:5b:15:
                    1b:e8:d7:d2:2a:af:91:40:52:26:f8:8a:45:d8:2b:
                    52:11:ef:2c:5f:e6:a5:24:6e:ad:39:e1:1e:84:eb:
                    d6:89:32:c6:8d:62:c2:c5:66:cf:ee:03:11:7a:b3:
                    af:95:03:c6:4b:9b:87:e6:88:7f:d7:b4:ab:85:f9:
                    fb:1a:45:20:f3:50:ce:55:2d:0f:95:93:ff:ae:d2:
                    ed:77:48:ba:11:c2:0c:9e:5c:ae:fb:6b:36:74:09:
                    44:0f:7e:dd:73:fc:82:93:ed:21:93:b9:68:38:80:
                    cc:68:f8:82:fc:05:27:ab:39:e9:21:77:f6:de:14:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CB:C9:1D:FB:EB:15:9F:1E:AE:6F:36:FF:FA:27:3E:C1:88:84:2B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8cvJHfvrFZ8erm82__onPsGIhCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:5d0::/44
                  2a0e:97c1::/40
                  2a0e:b107:2691::/48
                  2a0e:b107:278a::/48
                  2a0e:b107:2799::-2a0e:b107:279a:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:279d::-2a0e:b107:279f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4e:c5:ae:21:11:ee:91:a5:f8:0b:dd:d1:0e:19:cf:f3:22:a4:
         33:89:ff:d3:fe:d7:24:e6:c6:dd:c0:68:28:3c:d1:b1:ad:78:
         c9:ba:84:17:72:2c:b8:ed:10:33:42:4b:c2:79:6f:40:bc:be:
         e8:1e:98:da:97:09:80:c3:ba:f2:38:df:2f:74:42:39:64:25:
         54:a4:8e:45:00:2a:f3:1a:54:e6:56:ae:bd:b0:45:ae:58:59:
         6f:35:f2:32:73:7f:2b:20:35:3a:cb:da:0f:3b:e6:44:b6:5d:
         0b:0c:35:ae:08:d6:c2:69:26:10:c1:39:d7:ac:16:ae:18:94:
         f4:49:b2:8a:fa:3c:40:06:a7:cd:f0:13:55:28:14:41:ed:89:
         97:f4:64:fe:49:b4:3c:60:4e:fc:54:ad:f2:d9:4e:ac:43:2b:
         08:c8:e3:c0:68:98:a2:7f:8b:0f:ad:57:95:46:2f:d0:31:e7:
         c7:e8:1d:12:39:0f:18:42:71:6a:a3:6e:04:ea:81:43:a2:44:
         07:d3:da:5e:7f:a1:ad:46:40:5f:b3:05:6c:4b:7f:1f:b0:82:
         6e:2c:6d:a5:6e:b8:62:15:2f:4c:2d:ab:ed:da:7c:82:43:9b:
         10:9b:10:01:12:fb:09:98:b9:0e:24:70:b1:a3:be:ca:74:22:
         08:55:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----