Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EAkkc8RK4E13j9CoGEMcaAYrF8I.roa
File:                     EAkkc8RK4E13j9CoGEMcaAYrF8I.roa (raw, json)
Hash identifier:          6lmgM7zudSzWQzxQbC1tKqAXT8sz5zMznAYsltDT5Ws=
Subject key identifier:   10:09:24:73:C4:4A:E0:4D:77:8F:D0:A8:18:43:1C:68:06:2B:17:C2
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7C820BA98A14D630C895F82482314
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EAkkc8RK4E13j9CoGEMcaAYrF8I.roa
Signing time:             Mon 02 Jan 2023 05:15:16 +0000
ROA not before:           Mon 02 Jan 2023 05:15:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206290
IP address blocks:        2a0e:97c0:a20::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 23 Aug 2023 18:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:c8:20:ba:98:a1:4d:63:0c:89:5f:82:48:23:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10092473c44ae04d778fd0a818431c68062b17c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:fc:8d:ba:ac:da:2c:d0:5c:1d:ea:7b:8b:
                    31:ff:28:90:0e:f0:04:00:41:df:7e:2f:d1:c0:70:
                    8e:d5:eb:c8:53:73:fa:0a:7c:ec:5d:e6:ab:2b:1b:
                    17:a2:28:42:b3:5b:18:fc:c2:23:33:b5:71:7c:ee:
                    84:f7:65:4a:78:a7:0c:16:d6:c6:a0:cb:38:81:dc:
                    06:c3:d8:05:13:15:58:27:26:40:17:e9:8f:7a:54:
                    35:7e:d7:44:ac:f6:e9:b1:8d:46:15:b5:08:8b:a0:
                    6d:25:a0:9e:0c:6e:87:71:cb:e7:d4:02:a1:95:49:
                    80:e3:8f:9c:c9:b8:6f:97:b5:d8:20:de:0b:57:ef:
                    cc:75:35:67:73:e4:a3:39:65:6d:55:eb:3f:6e:60:
                    b4:61:00:00:af:fb:d2:ea:2b:ef:d1:e3:35:72:c7:
                    a3:64:21:7f:b0:0f:54:db:16:9b:a2:cf:83:9d:21:
                    30:70:8c:df:a5:34:9f:b0:c2:3d:ea:94:fb:d0:a7:
                    bf:71:60:61:3b:84:04:0d:4f:0b:91:64:9b:39:1c:
                    41:7f:e8:7a:d6:e8:8a:b6:eb:23:d5:0b:f5:a7:1a:
                    7a:e5:8d:f2:87:03:46:0d:99:94:d1:4a:1b:4d:97:
                    41:b0:df:a6:1c:8a:74:f8:9d:b5:3b:b9:ff:15:4c:
                    27:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:09:24:73:C4:4A:E0:4D:77:8F:D0:A8:18:43:1C:68:06:2B:17:C2
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EAkkc8RK4E13j9CoGEMcaAYrF8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:a20::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:3e:c6:0b:0a:5b:5d:96:9c:f6:7e:6b:49:f8:53:8f:b0:
         db:89:f5:49:06:cb:e1:12:8c:63:92:e2:99:2e:59:ee:83:b9:
         e1:b9:59:b6:7f:1a:90:b3:78:82:fd:d4:fd:2b:b1:d8:3c:ef:
         f8:06:4b:21:98:24:28:bf:72:e4:53:2f:c4:e2:be:6c:5c:d6:
         40:c2:84:2f:17:3c:6d:85:b3:d6:0e:2f:b5:db:1b:4f:75:1b:
         5a:90:b9:ad:2c:6d:39:47:c2:fd:1f:fb:a9:c9:56:5b:80:3d:
         f0:91:f7:3c:e0:cf:9b:f7:5c:ff:e5:99:ea:44:53:97:40:50:
         a2:54:8b:11:6d:9a:2b:6a:c3:94:77:47:43:27:f5:c0:89:82:
         d1:3d:ce:46:db:ea:15:c1:7a:21:b8:d3:2d:8b:b2:09:78:32:
         a8:0b:a8:67:48:9e:7f:2e:58:26:7a:5d:83:9f:73:9b:d7:fe:
         91:56:c9:a4:2a:1f:7f:c1:34:99:3c:0e:e4:ea:de:a9:6d:85:
         7b:2b:65:21:aa:28:d2:cc:ab:73:2f:ea:68:1b:52:d1:1a:ed:
         62:b6:7c:5c:a5:7d:1e:bb:73:fb:44:06:7c:9e:7c:6a:38:81:
         f1:fc:42:2c:b5:3a:a1:0f:ad:d4:69:91:a4:f9:08:64:88:78:
         25:b6:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----