Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AouB1e7ie1SgIRST66q9NK4p_LA.roa
File:                     AouB1e7ie1SgIRST66q9NK4p_LA.roa (raw, json)
Hash identifier:          Dw0koXIe8kwa7FsB8nJ1hH2vEKmJpdQSX6pa7Wh/cgA=
Subject key identifier:   02:8B:81:D5:EE:E2:7B:54:A0:21:14:93:EB:AA:BD:34:AE:29:FC:B0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01869C364136FA641951AB6613F8BE094D3E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AouB1e7ie1SgIRST66q9NK4p_LA.roa
Signing time:             Wed 01 Mar 2023 08:07:26 +0000
ROA not before:           Wed 01 Mar 2023 08:07:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202827
IP address blocks:        2a0e:b107:1ce1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9c:36:41:36:fa:64:19:51:ab:66:13:f8:be:09:4d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar  1 08:07:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=028b81d5eee27b54a0211493ebaabd34ae29fcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:3d:75:47:8f:ba:d4:54:28:8b:9b:43:40:
                    37:16:d3:f9:50:80:21:ac:57:3a:bb:25:5c:a6:3d:
                    9f:08:c9:97:82:05:7d:6a:15:6a:e6:1d:32:6e:e0:
                    37:34:1c:77:5d:54:c1:a3:03:a3:c6:e8:70:cf:ca:
                    09:b2:6c:91:4c:71:93:ad:d0:07:ea:e1:92:a1:f3:
                    05:6b:d4:49:3c:74:88:5a:f1:48:c0:62:6c:b2:09:
                    2b:10:2f:b3:e5:71:37:5b:f8:c7:97:dd:e5:91:56:
                    b3:6f:3a:7e:b2:d7:c5:d0:86:f5:8e:9b:41:23:5f:
                    47:6c:df:39:3c:4b:8e:f0:0b:4b:c3:d5:19:83:3f:
                    10:78:80:6c:06:53:4b:bf:14:f2:d2:6e:46:89:6a:
                    f0:95:77:47:9b:db:50:4e:11:e6:47:53:04:6c:31:
                    38:c1:50:ce:ae:5d:b7:c3:42:4c:03:22:8b:03:e1:
                    62:8a:7f:89:51:e4:fb:b9:28:8b:f7:55:92:0f:0b:
                    11:b7:b2:6a:6b:df:66:48:6c:39:1e:8d:33:a0:2e:
                    4b:bc:3b:f6:a7:64:a8:4f:f0:e2:99:2c:2d:68:4c:
                    df:6c:7a:0a:32:1d:53:80:84:1e:18:3a:07:d1:94:
                    1e:04:8e:92:45:53:7a:37:6b:90:41:72:33:b5:66:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8B:81:D5:EE:E2:7B:54:A0:21:14:93:EB:AA:BD:34:AE:29:FC:B0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AouB1e7ie1SgIRST66q9NK4p_LA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1ce1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:44:22:2e:8c:fc:0e:59:ca:72:c8:cb:17:05:3e:de:6e:ae:
         82:db:5e:3a:43:b2:a4:4e:4d:3b:0a:ea:c9:6a:9d:0f:94:2e:
         8b:55:ad:41:21:82:99:50:b8:b6:92:e1:41:db:3e:58:f9:19:
         8c:ca:ef:4d:f5:ae:3d:7f:ca:86:a7:88:39:9c:b8:3b:9f:df:
         8b:7d:11:44:44:56:69:b4:09:bf:50:4e:f2:70:d1:42:c5:1d:
         bb:1a:02:91:6e:2f:ea:82:2d:9e:c8:95:a1:28:5b:af:9f:6d:
         8e:3c:49:c8:a2:ad:a3:ed:c9:fc:ee:be:ff:a0:73:58:3d:09:
         f9:96:6d:21:83:d1:11:bb:09:5f:e1:f1:05:97:01:07:81:b8:
         0f:4c:7b:1a:44:02:ae:ce:f7:63:1e:40:27:77:7a:f6:83:02:
         6b:2c:3e:27:43:68:03:b4:1b:dd:fb:d0:54:85:2d:29:f9:82:
         83:2d:aa:1d:5a:cb:3b:15:74:a0:f6:0c:ac:4d:7e:79:d2:9d:
         7f:73:bf:b0:7e:8a:98:6a:d7:7c:52:cb:0d:92:25:7c:99:49:
         98:ac:71:fa:ee:b6:cb:dc:89:21:08:99:33:fd:6d:d0:93:94:
         78:d8:a3:12:2b:ad:d4:1c:f1:a0:9a:3e:63:9c:e4:a6:ec:df:
         61:2a:63:a3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYacNkE2+mQZUatmE/i+CU0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMzAxMDgwNzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjhiODFkNWVlZTI3YjU0YTAyMTE0OTNlYmFhYmQzNGFlMjlmY2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/I9dUePutRUKIubQ0A3FtP5UIAh
rFc6uyVcpj2fCMmXggV9ahVq5h0ybuA3NBx3XVTBowOjxuhwz8oJsmyRTHGTrdAH
6uGSofMFa9RJPHSIWvFIwGJssgkrEC+z5XE3W/jHl93lkVazbzp+stfF0Ib1jptB
I19HbN85PEuO8AtLw9UZgz8QeIBsBlNLvxTy0m5GiWrwlXdHm9tQThHmR1MEbDE4
wVDOrl23w0JMAyKLA+Fiin+JUeT7uSiL91WSDwsRt7Jqa99mSGw5Ho0zoC5LvDv2
p2SoT/DimSwtaEzfbHoKMh1TgIQeGDoH0ZQeBI6SRVN6N2uQQXIztWazlwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAKLgdXu4ntUoCEUk+uqvTSuKfywMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQW91QjFlN2llMVNnSVJTVDY2cTlOSzRwX0xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxzh
MA0GCSqGSIb3DQEBCwUAA4IBAQB+RCIujPwOWcpyyMsXBT7ebq6C2146Q7KkTk07
CurJap0PlC6LVa1BIYKZULi2kuFB2z5Y+RmMyu9N9a49f8qGp4g5nLg7n9+LfRFE
RFZptAm/UE7ycNFCxR27GgKRbi/qgi2eyJWhKFuvn22OPEnIoq2j7cn87r7/oHNY
PQn5lm0hg9ERuwlf4fEFlwEHgbgPTHsaRAKuzvdjHkAnd3r2gwJrLD4nQ2gDtBvd
+9BUhS0p+YKDLaodWss7FXSg9gysTX550p1/c7+wfoqYatd8UssNkiV8mUmYrHH6
7rbL3IkhCJkz/W3Qk5R42KMSK63UHPGgmj5jnOSm7N9hKmOj
-----END CERTIFICATE-----