Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ETmB7rupVEI8qWUzOh4CGpOCHxk.roa
File:                     ETmB7rupVEI8qWUzOh4CGpOCHxk.roa (raw, json)
Hash identifier:          COGjq9ptsmf6ZkbPnX/FriD47Hq69kQv4bHd2vH6XFw=
Subject key identifier:   11:39:81:EE:BB:A9:54:42:3C:A9:65:33:3A:1E:02:1A:93:82:1F:19
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01860FC4AF6D234D61A52F83F504D693DF61
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ETmB7rupVEI8qWUzOh4CGpOCHxk.roa
Signing time:             Thu 02 Feb 2023 01:36:33 +0000
ROA not before:           Thu 02 Feb 2023 01:36:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200516
IP address blocks:        2a0e:b107:f60::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 02 Feb 2023 05:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:0f:c4:af:6d:23:4d:61:a5:2f:83:f5:04:d6:93:df:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb  2 01:36:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=113981eebba954423ca965333a1e021a93821f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:b5:11:58:18:8a:9d:e0:9b:84:85:68:da:
                    a1:0a:fd:93:0a:55:08:05:d7:04:3c:f4:af:22:65:
                    b6:68:cb:34:e2:bd:92:e1:e8:7b:9d:0c:24:12:3e:
                    bb:25:53:05:bb:6e:74:b1:b8:ec:d8:cc:de:83:ef:
                    c9:4a:b8:1a:48:b5:fd:a1:41:65:a8:5a:a1:67:31:
                    f9:e7:ed:98:4f:04:44:60:da:54:a3:ad:4f:a0:02:
                    4c:b8:d8:4f:4d:4a:f8:1b:11:ac:f5:b6:63:92:fd:
                    b7:08:fb:d9:e4:30:12:aa:fd:2f:c3:77:d3:c3:c4:
                    6c:00:81:71:5d:a5:a8:43:2f:a7:a3:9c:05:64:f7:
                    8c:42:48:78:ea:17:2b:b4:f1:df:c5:ee:01:66:d1:
                    24:73:5c:b3:d2:06:3a:af:20:9f:7d:a0:82:e9:89:
                    9f:70:ce:4b:ce:df:a7:1a:5c:50:bf:3e:20:e3:05:
                    ac:4c:d1:f5:91:7b:f2:45:a8:9d:b0:97:de:67:06:
                    d6:bf:6f:aa:87:91:bb:ac:a2:b7:71:92:27:23:77:
                    8e:08:21:f4:7c:92:e7:1f:c5:cc:a2:d7:6b:6d:a5:
                    66:92:b7:c0:b3:f1:a2:5e:2f:a1:de:1e:01:8e:01:
                    2a:9c:df:2c:99:f7:e2:c7:05:09:cd:04:fc:15:cd:
                    c6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:39:81:EE:BB:A9:54:42:3C:A9:65:33:3A:1E:02:1A:93:82:1F:19
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ETmB7rupVEI8qWUzOh4CGpOCHxk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:f60::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:5a:dc:0a:a9:6a:4d:f3:91:90:cb:c0:d4:4e:dd:e2:f6:
         77:b4:c3:19:fe:3c:36:ba:ff:68:11:0f:6f:e1:74:0d:38:b9:
         51:76:87:27:6a:09:95:d8:16:f0:b1:d0:d9:92:15:96:67:a1:
         38:08:1a:48:c9:e2:c7:f0:c8:66:cb:92:74:40:9c:d5:ef:3b:
         da:a7:3d:7a:9d:96:ea:5f:3a:a2:1c:6c:bc:c0:eb:9f:4c:ca:
         ea:22:b0:71:01:dc:ee:cf:c2:c8:ce:cb:29:07:6a:49:14:d6:
         d5:32:7b:d0:70:6a:c5:8d:9a:65:4a:90:c0:ce:7f:64:e8:22:
         c5:d4:5d:93:d6:36:cc:48:90:ba:bd:cc:46:5f:94:54:81:2b:
         72:44:7d:ba:14:4a:a7:dd:55:dc:ab:21:9a:66:f7:9d:e4:85:
         ae:c4:28:a4:05:f7:09:94:18:f0:16:fc:04:ce:b2:bd:91:19:
         80:49:e5:60:0b:3a:6e:04:16:b2:44:6a:85:f0:fd:92:f9:e3:
         1c:ec:f8:fe:9b:45:5e:38:83:b0:74:40:5c:a0:fe:fd:f7:13:
         df:f2:da:1a:68:b3:98:04:10:63:7d:78:df:3b:a8:d5:e2:05:
         ff:b0:6f:93:45:a9:a4:0b:a3:26:97:f8:b1:8a:bc:ec:c0:4c:
         5f:c4:21:97
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYYPxK9tI01hpS+D9QTWk99hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMjAyMDEzNjMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTM5ODFlZWJiYTk1NDQyM2NhOTY1MzMzYTFlMDIxYTkzODIxZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh+1EVgYip3gm4SFaNqhCv2TClUI
BdcEPPSvImW2aMs04r2S4eh7nQwkEj67JVMFu250sbjs2Mzeg+/JSrgaSLX9oUFl
qFqhZzH55+2YTwREYNpUo61PoAJMuNhPTUr4GxGs9bZjkv23CPvZ5DASqv0vw3fT
w8RsAIFxXaWoQy+no5wFZPeMQkh46hcrtPHfxe4BZtEkc1yz0gY6ryCffaCC6Ymf
cM5Lzt+nGlxQvz4g4wWsTNH1kXvyRaidsJfeZwbWv2+qh5G7rKK3cZInI3eOCCH0
fJLnH8XMotdrbaVmkrfAs/GiXi+h3h4BjgEqnN8smffixwUJzQT8Fc3G1QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBE5ge67qVRCPKllMzoeAhqTgh8ZMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRVRtQjdydXBWRUk4cVdVek9oNENHcE9DSHhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBw9g
MA0GCSqGSIb3DQEBCwUAA4IBAQBFsFrcCqlqTfORkMvA1E7d4vZ3tMMZ/jw2uv9o
EQ9v4XQNOLlRdocnagmV2BbwsdDZkhWWZ6E4CBpIyeLH8Mhmy5J0QJzV7zvapz16
nZbqXzqiHGy8wOufTMrqIrBxAdzuz8LIzsspB2pJFNbVMnvQcGrFjZplSpDAzn9k
6CLF1F2T1jbMSJC6vcxGX5RUgStyRH26FEqn3VXcqyGaZved5IWuxCikBfcJlBjw
FvwEzrK9kRmASeVgCzpuBBayRGqF8P2S+eMc7Pj+m0VeOIOwdEBcoP799xPf8toa
aLOYBBBjfXjfO6jV4gX/sG+TRamkC6Mml/ixirzswExfxCGX
-----END CERTIFICATE-----