Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DkArOI1X5QUEZBhSjxYIFXURzgY.roa
File:                     DkArOI1X5QUEZBhSjxYIFXURzgY.roa (raw, json)
Hash identifier:          pb0Cakzr/IfXgsja65bgiEsitxeiy+/9bB6dacO2lQU=
Subject key identifier:   0E:40:2B:38:8D:57:E5:05:04:64:18:52:8F:16:08:15:75:11:CE:06
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E797886A0C291A67E31C7C8AFE15DC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DkArOI1X5QUEZBhSjxYIFXURzgY.roa
Signing time:             Mon 02 Jan 2023 05:15:03 +0000
ROA not before:           Mon 02 Jan 2023 05:15:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142289
IP address blocks:        2a0e:b107:15f0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:97:88:6a:0c:29:1a:67:e3:1c:7c:8a:fe:15:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e402b388d57e505046418528f1608157511ce06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:50:81:fa:b3:42:15:c3:83:b2:ce:af:a3:
                    45:7a:90:c1:88:01:0e:81:1c:d0:ff:bd:ad:7b:55:
                    c7:53:b4:23:57:1d:61:64:fd:96:04:71:7f:78:17:
                    dc:2c:26:73:2d:e3:c2:c1:be:2e:17:8b:09:aa:5a:
                    f0:c0:fa:16:f4:12:d8:4f:f0:ea:cd:f8:09:5c:c7:
                    ae:c2:c9:1c:a0:8a:f0:03:76:ea:23:86:12:f5:ac:
                    1d:7c:60:e3:57:2f:7e:78:d8:90:93:f1:ce:17:47:
                    12:a2:f3:f9:da:65:9e:a7:ee:2e:bf:3b:07:da:a5:
                    ac:99:84:1f:7e:6e:55:32:ad:08:d0:de:f8:5e:e8:
                    e5:04:10:09:68:62:9b:a0:72:5c:da:d9:eb:68:d5:
                    28:85:3a:52:4f:0f:54:65:22:7a:bf:d9:f6:98:c2:
                    45:7b:ef:61:a7:00:7d:71:b3:44:62:aa:1c:18:d4:
                    d1:05:54:01:5a:da:f9:38:06:b2:52:0c:2a:9d:33:
                    48:da:c9:68:33:85:db:f6:da:b4:e9:e1:22:8a:b8:
                    59:19:54:dd:2a:16:aa:c8:fd:09:a7:26:bd:79:de:
                    de:81:32:72:70:8c:c1:a9:be:a9:c2:3a:25:ac:81:
                    d8:55:64:96:06:18:07:39:12:e9:ba:df:f1:c0:b0:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:40:2B:38:8D:57:E5:05:04:64:18:52:8F:16:08:15:75:11:CE:06
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DkArOI1X5QUEZBhSjxYIFXURzgY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:15f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:01:73:f0:39:23:82:05:d1:0f:83:f2:48:87:ad:c3:73:91:
         a3:66:78:aa:73:1c:12:cd:67:4a:ee:10:27:80:d7:f4:04:47:
         be:6a:50:66:81:26:fd:7f:8e:ae:c5:33:67:3a:3a:e7:27:42:
         29:45:83:06:2d:0e:21:43:c8:18:4b:e1:cf:9a:3a:1d:d7:db:
         2d:14:34:c1:11:86:93:cd:50:22:3a:c3:29:6a:94:1e:4a:35:
         0c:dd:97:77:d7:6f:06:07:5d:33:bb:8b:6e:b1:6a:f2:ee:45:
         f1:6c:d3:a8:b5:93:88:63:3e:51:14:22:22:2c:e3:ee:d5:59:
         40:dd:8d:a9:48:b1:31:29:7d:d5:2c:c9:8c:22:ff:39:48:46:
         37:dd:f9:93:02:4e:94:54:d7:55:9f:bf:24:05:72:c2:a7:c7:
         0e:a3:10:4d:cb:3c:f3:49:7c:1d:00:3b:ea:fa:cd:c0:03:0d:
         c3:97:3a:25:b2:2b:7c:b2:66:fb:37:c2:75:62:e4:2d:16:51:
         2d:37:b5:06:e5:21:a5:47:e9:26:e4:fa:96:b9:bb:fb:a5:73:
         96:45:49:43:ff:c6:4f:73:88:54:41:7b:4a:d3:34:23:42:e1:
         62:8e:3f:c8:32:f3:51:3a:6b:79:92:1c:bf:52:59:b8:00:f3:
         91:c3:bc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----