Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DgJ9wha_Ed-H60MMVP5HNVvSz_Q.roa
File:                     DgJ9wha_Ed-H60MMVP5HNVvSz_Q.roa (raw, json)
Hash identifier:          3mN5mlgsRvhKz1v8yjiQcDdI0mHYpGg5iVKZmMCvvP0=
Subject key identifier:   0E:02:7D:C2:16:BF:11:DF:87:EB:43:0C:54:FE:47:35:5B:D2:CF:F4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E791F1111DAAC7B3B3BBAE065CB3CA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DgJ9wha_Ed-H60MMVP5HNVvSz_Q.roa
Signing time:             Mon 02 Jan 2023 05:15:02 +0000
ROA not before:           Mon 02 Jan 2023 05:15:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139328
IP address blocks:        2a0e:b107:1d0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:91:f1:11:1d:aa:c7:b3:b3:bb:ae:06:5c:b3:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e027dc216bf11df87eb430c54fe47355bd2cff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:28:e1:7c:27:a0:98:6d:a0:dc:15:15:d6:fe:
                    d8:07:af:87:ee:b6:36:c8:56:d8:52:b6:73:28:f4:
                    5d:2d:a1:d5:a7:27:e3:02:ec:22:90:95:1c:e1:f9:
                    53:4a:47:d4:e9:e0:b4:cf:92:55:86:85:fd:03:60:
                    76:09:da:78:36:5f:2e:dd:17:ab:cb:dd:f8:76:87:
                    d2:96:96:88:07:80:20:f5:5d:71:b0:c0:6a:89:71:
                    57:96:83:8b:8a:c2:88:be:76:f2:f5:ca:e5:62:25:
                    15:7f:08:11:65:9a:c5:93:b7:ce:1e:32:c3:3b:7a:
                    ef:ce:74:fc:e1:8b:67:6d:dc:48:0f:79:28:07:ce:
                    4c:c7:3a:cb:0a:35:1c:78:d2:11:34:2a:eb:2d:df:
                    e8:16:8e:a2:63:80:fa:d8:a5:ed:78:4b:72:7d:c8:
                    dc:ef:07:71:7d:4f:0d:e6:a9:b3:ea:54:b8:3d:bb:
                    51:ff:f9:8e:f5:5d:3f:b6:fe:50:86:d2:1b:69:29:
                    10:ee:ea:8f:4d:b6:8c:88:70:33:70:3e:0e:fe:95:
                    88:a9:26:ec:a0:a7:ca:92:93:6e:9f:1e:8d:57:37:
                    a0:31:11:c5:f6:93:e3:cc:1b:65:08:17:b0:98:82:
                    aa:aa:31:43:f7:d9:dd:84:73:8b:7d:e3:6a:66:b0:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:02:7D:C2:16:BF:11:DF:87:EB:43:0C:54:FE:47:35:5B:D2:CF:F4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DgJ9wha_Ed-H60MMVP5HNVvSz_Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         57:96:b9:79:4d:9a:b0:bf:2d:21:6e:c1:68:0a:f5:61:04:ea:
         bf:7d:de:b7:d0:42:29:2d:30:9e:c0:37:32:f9:d4:7d:86:67:
         47:16:44:10:ac:e9:1f:e7:bb:c6:cb:7c:18:64:18:00:10:31:
         95:5f:97:9f:1f:1e:55:03:7e:98:b6:7f:dd:a0:7c:57:76:76:
         54:3d:4e:f4:f2:ee:f0:00:47:85:27:1f:5a:b2:8a:3d:da:88:
         78:6b:27:d2:e3:5e:bb:11:59:a8:6c:7b:07:05:38:d6:c4:b1:
         b2:6d:b2:4b:62:fc:a1:57:c8:a7:65:a2:e2:b1:cf:53:89:ac:
         e3:1a:c4:fa:23:2b:d6:43:63:3b:96:88:79:93:7f:9d:3c:ca:
         05:b9:91:b0:ef:25:22:ee:22:db:ed:b4:5b:f6:d2:f3:ba:b5:
         fb:7e:84:86:92:af:50:39:52:a0:c3:4a:a8:dd:f8:c9:90:2b:
         66:7b:3f:c9:64:de:b3:93:3a:62:f5:e9:43:9d:6d:50:a2:17:
         ec:37:c3:38:18:30:eb:e1:9c:24:f9:b1:7b:4c:d4:40:f4:a6:
         62:2e:f9:01:e3:ae:04:72:72:bd:e1:8f:44:c9:93:ef:ad:a9:
         26:37:bf:d6:5e:f2:9f:c2:e9:07:7d:8e:d2:fc:96:b7:a6:a0:
         e8:42:9a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----