Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D4mmHFKN97KfqxmlT4CQsx-P4N4.roa
File:                     D4mmHFKN97KfqxmlT4CQsx-P4N4.roa (raw, json)
Hash identifier:          Da7yoAg1aX9+X8nsvZuXkwMSEzgtaKDkJbLbLl+Szxk=
Subject key identifier:   0F:89:A6:1C:52:8D:F7:B2:9F:AB:19:A5:4F:80:90:B3:1F:8F:E0:DE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01862B2C044E299641A1AEA6D51792A60A2B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D4mmHFKN97KfqxmlT4CQsx-P4N4.roa
Signing time:             Tue 07 Feb 2023 09:19:10 +0000
ROA not before:           Tue 07 Feb 2023 09:19:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211659
IP address blocks:        2a0e:b105:120::/48 maxlen: 48
                          2a0e:b105:121::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:2b:2c:04:4e:29:96:41:a1:ae:a6:d5:17:92:a6:0a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb  7 09:19:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0f89a61c528df7b29fab19a54f8090b31f8fe0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:40:80:0a:c9:30:6c:8e:8a:39:00:de:64:c0:
                    a6:2c:01:a2:7a:84:ea:fa:f3:2e:d2:1f:fd:fd:69:
                    9a:6f:39:85:06:af:53:eb:2e:e0:6e:06:ee:ec:5c:
                    d9:9e:df:e3:58:4c:33:d5:1e:14:bd:35:ec:68:11:
                    3d:25:ba:f2:50:d7:c6:6e:88:d8:09:9c:70:21:e4:
                    26:98:31:89:5a:c4:d2:0a:56:05:95:25:88:ee:a4:
                    12:c5:d7:a4:a9:37:5a:71:14:d8:53:1b:79:51:d6:
                    08:00:a4:6b:77:55:4d:ae:e6:14:fb:5e:9f:4e:74:
                    22:27:94:6e:64:69:c7:a9:a5:7a:8c:e7:44:a6:cf:
                    e4:e4:02:bc:09:7f:a6:c3:04:83:09:fd:5f:4f:f4:
                    ec:2f:6a:fd:82:17:33:42:5e:b9:d6:dc:f6:d2:dc:
                    6c:12:ca:08:e3:ba:48:97:da:bb:f5:ad:9e:f6:e6:
                    fe:75:d6:ee:70:15:6a:49:63:8b:27:b7:16:22:f5:
                    76:0e:16:b7:43:5b:e0:a9:0a:12:90:d8:54:8a:67:
                    85:ab:c4:98:f4:f2:c1:bc:41:d5:b9:be:ec:f4:12:
                    1c:7b:a6:77:5a:31:eb:6a:1a:f7:80:ef:35:97:03:
                    ed:94:5f:12:1d:9e:ca:5d:e0:90:10:16:af:2b:b4:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:89:A6:1C:52:8D:F7:B2:9F:AB:19:A5:4F:80:90:B3:1F:8F:E0:DE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D4mmHFKN97KfqxmlT4CQsx-P4N4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b105:120::/47

    Signature Algorithm: sha256WithRSAEncryption
         2b:84:ee:64:9e:b9:15:ea:9c:33:56:0e:03:c9:65:84:c9:c3:
         f6:49:c9:8f:65:11:9a:bb:60:f4:c5:7c:dc:6b:22:02:8d:de:
         f8:62:91:b1:2f:fb:fe:ec:55:7c:46:18:34:66:5b:f7:d6:9e:
         9d:7d:e3:e1:dc:91:9a:a7:97:03:9f:c3:b7:c5:12:c3:38:bb:
         f3:e0:f3:9c:d3:7c:b6:bd:e8:87:5d:5d:f5:f2:6e:21:c5:a5:
         a4:a8:f3:f8:a6:2c:08:b8:99:ef:f2:fc:01:dc:5f:06:99:93:
         86:d9:f5:6d:11:6d:a1:41:03:52:41:7b:32:f6:75:9e:79:15:
         7e:1b:48:f7:34:2e:84:76:ee:9f:ab:57:bc:12:25:ba:62:b1:
         a8:7b:dd:9a:9e:99:57:8f:98:3c:24:af:25:88:df:2a:2d:f7:
         9b:11:06:a1:a8:f6:7c:0f:5e:6f:c0:ce:44:5b:93:01:d9:c9:
         d8:b5:12:1f:4c:5b:86:97:79:ca:46:50:4c:c2:36:e1:a4:f6:
         00:1a:ee:b2:f9:d6:d2:94:9a:f1:c3:9f:ae:96:ed:66:32:90:
         32:fe:f0:93:1b:df:82:e4:21:d3:e1:38:02:67:89:15:7e:7a:
         38:93:23:d4:cc:34:05:e5:78:91:7c:44:86:d1:48:91:cb:26:
         d7:a3:42:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----