Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ai3UZWEXUjVL9fBoW4MaFykpUXM.roa
File:                     Ai3UZWEXUjVL9fBoW4MaFykpUXM.roa (raw, json)
Hash identifier:          orpwGEsceNMv7HPLaWjd1AKGwEEQLDgXLKy5ZctAzHA=
Subject key identifier:   02:2D:D4:65:61:17:52:35:4B:F5:F0:68:5B:83:1A:17:29:29:51:73
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01860A3E3125F61D46E9762B9EEE0AA19FA5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ai3UZWEXUjVL9fBoW4MaFykpUXM.roa
Signing time:             Tue 31 Jan 2023 23:51:33 +0000
ROA not before:           Tue 31 Jan 2023 23:51:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210659
IP address blocks:        2a0e:97c0:560::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:0a:3e:31:25:f6:1d:46:e9:76:2b:9e:ee:0a:a1:9f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 31 23:51:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=022dd465611752354bf5f0685b831a1729295173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c1:2f:80:81:3d:75:b6:6d:e3:9f:9d:4a:d2:
                    6c:8e:9a:64:da:86:8e:75:7c:d2:fc:8e:34:c8:79:
                    89:c6:20:b8:43:b3:1b:b2:17:bb:05:14:38:36:80:
                    1b:cd:46:db:1a:ae:2d:9d:5b:16:00:da:9d:ae:38:
                    6a:77:0e:4f:0c:a3:10:16:fc:bd:03:c6:17:74:e9:
                    2f:96:f5:d7:ca:c3:bb:cb:0d:fc:c5:45:43:33:f0:
                    4f:ab:26:b4:4f:d4:5e:7f:9b:6a:e4:17:e8:43:40:
                    5d:0c:1a:5e:7d:c6:81:51:cf:ec:60:1b:53:06:79:
                    eb:64:9e:0f:96:f3:1c:a7:e5:c4:6d:78:4c:25:e6:
                    5f:ec:ae:76:7e:d9:13:f0:d5:e1:f6:15:95:c4:58:
                    3a:ed:62:7c:4a:72:b1:f3:9c:8b:41:04:01:b6:47:
                    68:92:63:48:d4:d3:5c:41:17:db:17:86:3c:15:62:
                    dc:30:03:9f:de:44:67:31:89:1b:84:35:e4:85:c2:
                    b9:21:29:66:c5:bc:ff:34:30:0c:6c:2d:e4:f8:db:
                    32:21:85:ed:99:f5:70:e2:a1:ab:0f:2b:22:da:ec:
                    ed:f3:d8:96:3d:1e:01:23:62:6c:c0:02:27:cc:7c:
                    ec:e9:63:5e:e8:db:6c:a1:93:cc:44:06:6a:25:10:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2D:D4:65:61:17:52:35:4B:F5:F0:68:5B:83:1A:17:29:29:51:73
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ai3UZWEXUjVL9fBoW4MaFykpUXM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:560::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:3c:46:c8:c2:a5:3b:f2:e7:69:87:44:b0:c7:4d:b3:24:c0:
         43:95:a5:70:ae:5c:b1:94:1f:34:f5:cd:12:80:84:7a:30:80:
         13:8f:13:77:ee:14:cb:e4:00:7c:c9:7d:25:36:03:a9:2e:4a:
         ec:36:62:6c:cc:1a:2c:f5:24:4e:3b:ef:e9:f8:72:ac:cc:91:
         95:58:98:4e:6f:c7:fa:14:7d:bf:c7:62:3e:e1:b1:75:5c:f6:
         04:8f:24:52:10:10:62:af:3c:37:e3:7e:99:86:29:27:1c:54:
         d4:f3:ce:af:03:99:8d:ae:e0:eb:8f:4e:e1:cb:06:39:4f:23:
         16:b0:86:82:7e:42:71:69:9b:17:c7:c5:81:dd:92:76:8b:ef:
         cd:6d:b2:2a:da:aa:3a:f2:0a:52:91:fa:e3:1d:fe:26:31:e3:
         5b:28:0c:b9:82:75:45:3c:25:c4:91:e6:a1:4e:96:86:b6:11:
         22:79:c9:82:2e:0e:ae:76:f5:ef:1d:4c:d7:40:85:de:03:e3:
         0a:2b:c2:88:30:32:de:b7:b5:d3:d4:63:84:6f:84:a9:98:73:
         1f:11:ae:54:46:90:6f:5c:5d:0c:1c:c0:54:6c:c8:8f:67:e6:
         5e:34:b2:91:7b:e2:40:53:ea:3e:3e:6c:13:d4:51:13:57:48:
         43:e0:1b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----