Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9jHa5I_YowaD5bpkQ__vr-uDV88.roa
File:                     9jHa5I_YowaD5bpkQ__vr-uDV88.roa (raw, json)
Hash identifier:          pgnbP3Pvu/4un1minCKvvpHnZFfc6RYDJaXLquEZeLA=
Subject key identifier:   F6:31:DA:E4:8F:D8:A3:06:83:E5:BA:64:43:FF:EF:AF:EB:83:57:CF
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CC9BD315C27B3FF065034A20294A549EF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9jHa5I_YowaD5bpkQ__vr-uDV88.roa
Signing time:             Tue 02 Jan 2024 10:34:28 +0000
ROA not before:           Tue 02 Jan 2024 10:34:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211169
IP address blocks:        2a0e:b107:15b0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Jan 2024 20:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bd:31:5c:27:b3:ff:06:50:34:a2:02:94:a5:49:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 10:34:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f631dae48fd8a30683e5ba6443ffefafeb8357cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e4:0e:b6:10:19:ac:80:40:87:80:7d:38:15:
                    dd:7c:ce:5c:47:ca:07:c2:cb:cc:78:f9:58:e8:63:
                    d7:a2:d4:1c:db:52:5b:15:fd:84:29:6c:7a:b3:4c:
                    03:3b:dd:bd:eb:f6:26:81:93:43:d5:b7:71:ef:31:
                    bf:86:b9:ea:ae:f8:a4:bc:1f:ca:ee:5b:3e:3d:ce:
                    fa:b1:84:e3:a4:8a:61:f2:34:63:e6:36:d8:44:c1:
                    c6:37:1c:15:f0:dd:92:5b:2b:ba:dc:70:3b:bb:91:
                    67:c3:25:b2:ce:00:d6:10:10:3b:da:04:ff:9d:88:
                    0f:bb:f2:21:e9:61:89:f9:92:1a:e5:46:2e:bd:77:
                    7c:ec:9b:67:48:66:21:b5:c4:5a:e6:d2:78:56:2e:
                    1e:f5:df:78:c5:18:ce:2d:37:58:72:36:33:22:e2:
                    bc:c7:07:f4:c1:d6:9b:61:10:17:b5:31:7a:a7:d0:
                    95:94:ee:14:ea:58:c4:42:03:1a:ac:e6:3f:71:33:
                    0e:d6:26:63:fc:70:2a:0a:c3:59:35:6c:8e:dc:f4:
                    46:fa:1d:db:1a:59:0a:b3:8e:fa:73:36:31:f6:dc:
                    94:63:89:df:d0:d7:a4:7b:0b:a4:b0:e2:66:82:4f:
                    a9:51:b3:32:1f:0f:c5:a2:25:9c:e2:e6:b6:3f:e9:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:31:DA:E4:8F:D8:A3:06:83:E5:BA:64:43:FF:EF:AF:EB:83:57:CF
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9jHa5I_YowaD5bpkQ__vr-uDV88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:15b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:01:48:78:df:e4:07:21:88:dd:fa:07:82:92:ea:7e:7a:75:
         7f:31:69:e3:20:d0:f7:d2:a1:ca:8d:d3:bd:d6:ae:de:eb:81:
         50:0d:d2:59:f5:76:cd:7a:31:72:da:30:0d:6d:59:ce:9e:d9:
         9e:33:e2:ec:e7:fc:90:b1:c6:bd:e5:03:3e:73:55:f6:3d:e2:
         d8:11:81:c1:c8:f5:5e:f2:ca:97:92:9a:71:8d:83:de:76:e1:
         83:6d:6a:42:a0:e6:ac:af:95:fb:ec:0e:e4:c1:df:f9:e2:15:
         5f:19:4f:90:f3:0a:74:13:25:7b:dd:62:39:1f:b8:6d:d5:89:
         a7:9f:80:b3:3b:d3:d3:68:d8:0d:7d:06:dd:7d:bd:4b:22:9c:
         bc:f4:b8:39:f4:c3:ae:3b:72:5d:73:c9:24:26:f7:4f:3b:e9:
         d7:87:63:ab:17:73:22:90:21:a4:99:74:0b:88:6c:b0:b9:cc:
         cf:1b:78:69:99:43:8e:86:4b:23:f5:47:2d:94:b3:70:a8:4b:
         19:b2:35:ae:90:5a:9b:04:c3:1e:ed:1f:f5:c4:a8:35:d3:c4:
         18:fc:f1:d0:11:37:76:9b:c8:30:4b:31:ec:a3:cd:f9:24:0a:
         50:46:89:1f:d2:13:24:f7:e0:65:16:c0:41:dc:b4:32:01:44:
         6b:7c:a6:93
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvTFcJ7P/BlA0ogKUpUnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjMxZGFlNDhmZDhhMzA2ODNlNWJhNjQ0M2ZmZWZhZmViODM1N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuQOthAZrIBAh4B9OBXdfM5cR8oH
wsvMePlY6GPXotQc21JbFf2EKWx6s0wDO9296/YmgZND1bdx7zG/hrnqrvikvB/K
7ls+Pc76sYTjpIph8jRj5jbYRMHGNxwV8N2SWyu63HA7u5FnwyWyzgDWEBA72gT/
nYgPu/Ih6WGJ+ZIa5UYuvXd87JtnSGYhtcRa5tJ4Vi4e9d94xRjOLTdYcjYzIuK8
xwf0wdabYRAXtTF6p9CVlO4U6ljEQgMarOY/cTMO1iZj/HAqCsNZNWyO3PRG+h3b
GlkKs476czYx9tyUY4nf0NekewuksOJmgk+pUbMyHw/FoiWc4ua2P+mAOwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPYx2uSP2KMGg+W6ZEP/76/rg1fPMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvOWpIYTVJX1lvd2FENWJwa1FfX3ZyLXVEVjg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxWw
MA0GCSqGSIb3DQEBCwUAA4IBAQC/AUh43+QHIYjd+geCkup+enV/MWnjIND30qHK
jdO91q7e64FQDdJZ9XbNejFy2jANbVnOntmeM+Ls5/yQsca95QM+c1X2PeLYEYHB
yPVe8sqXkppxjYPeduGDbWpCoOasr5X77A7kwd/54hVfGU+Q8wp0EyV73WI5H7ht
1Ymnn4CzO9PTaNgNfQbdfb1LIpy89Lg59MOuO3Jdc8kkJvdPO+nXh2OrF3MikCGk
mXQLiGywuczPG3hpmUOOhksj9UctlLNwqEsZsjWukFqbBMMe7R/1xKg108QY/PHQ
ETd2m8gwSzHso835JApQRokf0hMk9+BlFsBB3LQyAURrfKaT
-----END CERTIFICATE-----