Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bc-L3ntj4peZnlgMtIHOvtL2wjM.roa
File:                     Bc-L3ntj4peZnlgMtIHOvtL2wjM.roa (raw, json)
Hash identifier:          sWwjUJT6zBCzd0wbF3NKNNXhl4v29nWTBkQ7g0caoFY=
Subject key identifier:   05:CF:8B:DE:7B:63:E2:97:99:9E:58:0C:B4:81:CE:BE:D2:F6:C2:33
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01889BBE7DEFFDF69B8D0DF51F9A44CAA29F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bc-L3ntj4peZnlgMtIHOvtL2wjM.roa
Signing time:             Thu 08 Jun 2023 16:02:12 +0000
ROA not before:           Thu 08 Jun 2023 16:02:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198219
IP address blocks:        2a0e:97c0:ab0::/44 maxlen: 48
                          2a0e:97c0:ab0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9b:be:7d:ef:fd:f6:9b:8d:0d:f5:1f:9a:44:ca:a2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun  8 16:02:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05cf8bde7b63e297999e580cb481cebed2f6c233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:96:27:bc:32:bc:49:b5:c9:04:b0:f8:82:cf:
                    69:ef:f0:f5:74:3c:78:79:d1:ae:74:ff:66:25:75:
                    49:be:75:a2:9f:33:65:f0:c8:d6:7a:c5:99:3d:23:
                    aa:62:7a:9e:37:7a:b9:7e:c5:8c:ec:d5:51:01:7c:
                    64:95:be:7d:11:bb:3c:f1:af:80:8d:5c:0b:3c:62:
                    03:9d:e8:71:b7:43:4f:d8:a0:67:f6:f9:6c:47:0b:
                    df:40:d7:b0:e3:e0:bf:93:26:ee:fb:28:99:47:f7:
                    f5:3e:17:23:c8:ae:0d:63:2c:15:26:ef:11:91:9a:
                    2a:9f:23:84:b5:0a:82:cf:7f:ca:8f:f9:22:a1:4b:
                    f1:20:85:24:3f:48:f4:94:7b:4c:34:d2:da:a2:70:
                    32:c3:2a:d8:2a:43:df:ac:d2:02:e4:84:a5:8d:33:
                    e6:ad:49:cc:38:b9:bb:13:84:2a:bb:bc:47:89:2a:
                    44:78:e7:f4:b2:86:24:bd:f7:95:5b:23:be:d7:94:
                    3d:8f:b2:70:d1:f9:6a:4e:f1:0f:ff:71:f4:0d:aa:
                    29:55:cd:91:b6:6f:6d:54:17:f8:6c:5d:b7:fa:b4:
                    62:55:d1:c8:72:24:cc:64:2f:c3:ef:4a:ec:ac:94:
                    a5:19:14:79:a0:be:c9:53:55:b1:b0:5d:65:ff:3f:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CF:8B:DE:7B:63:E2:97:99:9E:58:0C:B4:81:CE:BE:D2:F6:C2:33
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bc-L3ntj4peZnlgMtIHOvtL2wjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:ab0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c7:43:22:0a:3a:26:11:12:98:8f:b2:5d:e9:e0:9c:91:af:84:
         b4:c0:82:06:81:02:68:2c:fa:5b:f6:fc:ce:63:62:3c:42:f1:
         5e:74:4b:1a:07:16:36:49:f0:7e:d5:d8:a9:ed:22:67:7f:51:
         50:49:be:04:63:cb:53:d1:8b:cd:3f:2d:45:54:71:ff:43:a7:
         59:46:53:c5:61:30:e4:0f:db:77:b1:d1:bf:80:4d:b1:63:9d:
         a6:d3:e9:36:0f:eb:cf:79:c1:74:c1:ea:10:28:67:bc:4c:05:
         db:e0:15:66:66:9f:a1:ba:aa:3f:d3:fb:b9:ca:41:18:56:94:
         38:30:46:4c:0b:e4:d1:59:75:1e:5a:1c:e5:5c:3f:fd:80:b6:
         93:a3:72:d2:64:76:c9:c0:c5:8a:bd:60:f1:77:31:40:e1:a5:
         ab:25:f5:41:f6:01:f8:fb:0f:86:b8:76:cd:45:2e:8d:84:d3:
         71:37:d5:f6:bc:d8:54:a4:c2:70:b6:b9:26:f5:b5:17:be:1b:
         c6:57:e9:8b:b5:14:c5:cf:2b:12:60:72:be:9a:27:86:82:80:
         25:37:74:4d:b4:83:41:a8:50:19:6c:66:24:1a:0c:05:7f:ec:
         0b:07:c8:6a:3a:3e:61:4b:1e:4b:9d:2b:56:70:0f:55:bd:21:
         04:49:45:c4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYibvn3v/fabjQ31H5pEyqKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNjA4MTYwMjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWNmOGJkZTdiNjNlMjk3OTk5ZTU4MGNiNDgxY2ViZWQyZjZjMjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpYnvDK8SbXJBLD4gs9p7/D1dDx4
edGudP9mJXVJvnWinzNl8MjWesWZPSOqYnqeN3q5fsWM7NVRAXxklb59Ebs88a+A
jVwLPGIDnehxt0NP2KBn9vlsRwvfQNew4+C/kybu+yiZR/f1PhcjyK4NYywVJu8R
kZoqnyOEtQqCz3/Kj/kioUvxIIUkP0j0lHtMNNLaonAywyrYKkPfrNIC5ISljTPm
rUnMOLm7E4Qqu7xHiSpEeOf0soYkvfeVWyO+15Q9j7Jw0flqTvEP/3H0DaopVc2R
tm9tVBf4bF23+rRiVdHIciTMZC/D70rsrJSlGRR5oL7JU1WxsF1l/z+XnwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAXPi957Y+KXmZ5YDLSBzr7S9sIzMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQmMtTDNudGo0cGVabmxnTXRJSE92dEwyd2pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAqw
MA0GCSqGSIb3DQEBCwUAA4IBAQDHQyIKOiYREpiPsl3p4JyRr4S0wIIGgQJoLPpb
9vzOY2I8QvFedEsaBxY2SfB+1dip7SJnf1FQSb4EY8tT0YvNPy1FVHH/Q6dZRlPF
YTDkD9t3sdG/gE2xY52m0+k2D+vPecF0weoQKGe8TAXb4BVmZp+huqo/0/u5ykEY
VpQ4MEZMC+TRWXUeWhzlXD/9gLaTo3LSZHbJwMWKvWDxdzFA4aWrJfVB9gH4+w+G
uHbNRS6NhNNxN9X2vNhUpMJwtrkm9bUXvhvGV+mLtRTFzysSYHK+mieGgoAlN3RN
tINBqFAZbGYkGgwFf+wLB8hqOj5hSx5LnStWcA9VvSEESUXE
-----END CERTIFICATE-----