Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9mKck23LokO3kfE4pQphUoj0eg4.roa
File:                     9mKck23LokO3kfE4pQphUoj0eg4.roa (raw, json)
Hash identifier:          ixGOjHLECyYMS3cP5lUbU85WGCCu79WAd8YckYa0qmM=
Subject key identifier:   F6:62:9C:93:6D:CB:A2:43:B7:91:F1:38:A5:0A:61:52:88:F4:7A:0E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01889AA657D7C602A4170B6B9273AB98AC64
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9mKck23LokO3kfE4pQphUoj0eg4.roa
Signing time:             Thu 08 Jun 2023 10:56:12 +0000
ROA not before:           Thu 08 Jun 2023 10:56:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142382
IP address blocks:        2a0e:b107:1790::/48 maxlen: 48
                          2a0e:b107:1795::/48 maxlen: 48
                          2a0e:b107:1792::/48 maxlen: 48
                          2a0e:b107:1794::/48 maxlen: 48
                          2a0e:b107:1791::/48 maxlen: 48
                          2a0e:b107:1796::/48 maxlen: 48
                          2a0e:b107:1793::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9a:a6:57:d7:c6:02:a4:17:0b:6b:92:73:ab:98:ac:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun  8 10:56:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f6629c936dcba243b791f138a50a615288f47a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7d:4c:fe:ad:81:1e:b2:f6:f3:e0:e7:aa:74:
                    83:03:a9:78:d6:12:0c:60:ab:ed:41:79:14:a0:ca:
                    6a:09:8d:4e:5d:35:d2:ca:d2:f1:c5:ed:6a:b4:4c:
                    23:12:4e:41:53:30:15:52:d2:1b:8f:6b:d8:0f:ae:
                    30:74:6f:49:50:8e:df:eb:17:09:6a:85:0d:d4:e7:
                    f2:51:db:8c:09:b7:84:2a:a3:00:2f:e0:96:80:9c:
                    b7:74:30:d9:59:0e:7a:32:b9:2f:d7:19:a8:d3:d9:
                    c5:1d:13:a6:ea:65:b6:66:25:ba:1f:22:e6:f5:cc:
                    1e:fb:b2:d5:ee:37:f9:fa:ad:53:9d:c6:19:c1:fa:
                    95:64:39:90:23:b0:be:4a:e5:c0:62:eb:4f:e0:fd:
                    c4:93:56:38:0e:e5:27:70:06:03:f7:30:9b:2e:b8:
                    34:ab:f3:50:c5:36:26:c5:a1:33:e0:02:ad:8f:3a:
                    70:ef:fe:09:4f:47:5c:43:00:e1:ea:b9:3d:8e:78:
                    68:87:c1:32:a6:f0:f9:36:52:bd:12:b2:27:f4:49:
                    1c:9e:60:a7:e2:c5:83:e3:b5:56:12:e9:c7:a8:ee:
                    97:d0:82:95:f0:9d:ab:b7:25:4e:0c:18:99:74:d6:
                    26:89:26:95:f6:01:a7:49:77:fd:bb:76:af:ca:63:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:62:9C:93:6D:CB:A2:43:B7:91:F1:38:A5:0A:61:52:88:F4:7A:0E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9mKck23LokO3kfE4pQphUoj0eg4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1790::-2a0e:b107:1796:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         50:83:25:97:54:0c:cf:63:81:51:d7:3e:7a:87:b7:7d:8c:14:
         3d:4d:b0:0f:26:cf:51:35:3e:8a:de:a9:93:e9:6a:9f:a7:d8:
         ac:38:4f:ea:f8:74:0c:f4:ce:d3:9b:c5:42:4c:f4:36:ce:56:
         f8:6f:22:0a:f3:09:da:42:d6:aa:07:e5:48:98:22:1b:b9:52:
         a3:1f:45:3c:e3:3a:62:65:25:56:db:af:ba:72:fa:5c:81:91:
         01:1d:a6:a8:cb:0b:5d:b5:d6:b5:a2:ec:b5:cb:ea:0a:11:a3:
         28:21:8d:c0:e5:f8:f7:e9:f2:dc:44:7b:70:5d:e1:16:ba:05:
         7a:ce:c5:c0:4f:c1:dd:f7:76:eb:46:33:ca:c8:06:b9:d0:c8:
         f5:b6:24:c3:86:66:3a:06:14:3f:3c:49:9c:db:5f:5e:0b:37:
         1f:1d:bb:8e:68:73:0a:ba:79:75:21:e8:d8:ef:67:d9:0f:a7:
         fa:d5:da:c8:01:15:1f:8c:90:ca:24:61:ff:51:71:c4:f2:af:
         56:ea:f3:74:74:fb:6f:ac:f9:05:13:0b:97:29:79:4f:2d:be:
         bc:aa:af:de:5d:33:cb:ac:ae:eb:e1:3b:fb:9a:37:e0:69:16:
         bc:c3:8f:25:23:75:f7:e7:92:3d:5e:a5:46:82:c1:bb:fd:b8:
         9e:36:4a:5b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYiaplfXxgKkFwtrknOrmKxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNjA4MTA1NjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjYyOWM5MzZkY2JhMjQzYjc5MWYxMzhhNTBhNjE1Mjg4ZjQ3YTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH1M/q2BHrL28+DnqnSDA6l41hIM
YKvtQXkUoMpqCY1OXTXSytLxxe1qtEwjEk5BUzAVUtIbj2vYD64wdG9JUI7f6xcJ
aoUN1OfyUduMCbeEKqMAL+CWgJy3dDDZWQ56Mrkv1xmo09nFHROm6mW2ZiW6HyLm
9cwe+7LV7jf5+q1TncYZwfqVZDmQI7C+SuXAYutP4P3Ek1Y4DuUncAYD9zCbLrg0
q/NQxTYmxaEz4AKtjzpw7/4JT0dcQwDh6rk9jnhoh8EypvD5NlK9ErIn9EkcnmCn
4sWD47VWEunHqO6X0IKV8J2rtyVODBiZdNYmiSaV9gGnSXf9u3avymOhRQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPZinJNty6JDt5HxOKUKYVKI9HoOMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvOW1LY2syM0xva08za2ZFNHBRcGhVb2owZWc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqDrEH
F5ADBwAqDrEHF5YwDQYJKoZIhvcNAQELBQADggEBAFCDJZdUDM9jgVHXPnqHt32M
FD1NsA8mz1E1PoreqZPpap+n2Kw4T+r4dAz0ztObxUJM9DbOVvhvIgrzCdpC1qoH
5UiYIhu5UqMfRTzjOmJlJVbbr7py+lyBkQEdpqjLC1211rWi7LXL6goRoyghjcDl
+Pfp8txEe3Bd4Ra6BXrOxcBPwd33dutGM8rIBrnQyPW2JMOGZjoGFD88SZzbX14L
Nx8du45ocwq6eXUh6NjvZ9kPp/rV2sgBFR+MkMokYf9RccTyr1bq83R0+2+s+QUT
C5cpeU8tvryqr95dM8usruvhO/uaN+BpFrzDjyUjdffnkj1epUaCwbv9uJ42Sls=
-----END CERTIFICATE-----