Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ETxoBy3nmUT5_oEBaovoi10lFQs.roa
File:                     ETxoBy3nmUT5_oEBaovoi10lFQs.roa (raw, json)
Hash identifier:          EiAq7p1VTebMYGRjVepDtPAUi8H0+dd9zRzgGOPwZIk=
Subject key identifier:   11:3C:68:07:2D:E7:99:44:F9:FE:81:01:6A:8B:E8:8B:5D:25:15:0B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018AA857082F9DCE03AF73AE1959CE96CCB8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ETxoBy3nmUT5_oEBaovoi10lFQs.roa
Signing time:             Mon 18 Sep 2023 12:49:50 +0000
ROA not before:           Mon 18 Sep 2023 12:49:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49581
IP address blocks:        2a0e:b107:27d0::/48 maxlen: 48
                          2a0e:b107:27d5::/48 maxlen: 48
                          2a0e:b107:27f5::/48 maxlen: 48
                          2a0e:b107:27d4::/48 maxlen: 48
                          2a0e:b107:27f4::/48 maxlen: 48
                          2a0e:b107:27f3::/48 maxlen: 48
                          2a0e:b107:27d3::/48 maxlen: 48
                          2a0e:b107:27f2::/48 maxlen: 48
                          2a0e:b107:27d2::/48 maxlen: 48
                          2a0e:b107:27f7::/48 maxlen: 48
                          2a0e:b107:27d7::/48 maxlen: 48
                          2a0e:b107:27d1::/48 maxlen: 48
                          2a0e:b107:27f6::/48 maxlen: 48
                          2a0e:b107:27d6::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 19 Sep 2023 10:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a8:57:08:2f:9d:ce:03:af:73:ae:19:59:ce:96:cc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 18 12:49:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=113c68072de79944f9fe81016a8be88b5d25150b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:f4:f9:e4:df:e5:b8:1e:ad:5b:1c:9c:fa:
                    ca:c8:68:5a:b8:f6:a4:4d:34:87:c0:e8:80:52:53:
                    30:cf:4a:38:33:6e:3d:9f:e5:60:fd:e4:23:23:06:
                    cc:3f:e7:ca:eb:70:0d:f3:a8:a6:d8:fc:46:9d:19:
                    01:91:b8:1b:ed:1b:1b:dc:5b:0d:22:b0:5d:b7:ae:
                    e7:5e:fa:66:f9:02:bb:42:5d:13:b0:7b:5c:7d:d3:
                    a5:b2:bf:69:14:df:7b:bb:ce:40:dd:08:90:03:62:
                    82:49:ad:db:16:1e:09:b6:96:34:ae:2f:da:48:5d:
                    99:be:f5:cf:fb:ba:33:16:34:01:2f:38:90:fb:70:
                    f6:13:25:be:44:ab:41:a4:6f:66:32:4a:71:d0:8c:
                    15:64:62:44:ea:38:6f:ab:e0:f5:b9:6d:bc:4f:0d:
                    31:24:d5:1b:da:28:1b:9a:2a:c7:d6:8b:8c:6b:cd:
                    2e:b5:29:2c:ab:c7:bd:a4:09:63:c7:e7:3e:94:99:
                    cb:02:e6:fc:99:0d:13:1e:06:3f:e5:61:1c:b0:1a:
                    2b:fc:86:b2:e6:3d:98:11:73:7a:9c:c2:f0:2e:d3:
                    a0:5b:7f:1f:4c:49:e3:60:54:e3:3e:76:b2:13:45:
                    37:2f:4a:e2:15:7f:94:f1:71:44:63:aa:ca:6e:d8:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3C:68:07:2D:E7:99:44:F9:FE:81:01:6A:8B:E8:8B:5D:25:15:0B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ETxoBy3nmUT5_oEBaovoi10lFQs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27d0::/45
                  2a0e:b107:27f2::-2a0e:b107:27f7:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         80:12:96:f2:da:de:51:29:7b:77:5e:d3:df:27:14:d4:99:18:
         78:ba:b2:8b:67:69:97:e6:d1:19:7a:d8:a0:97:9c:96:73:91:
         e8:30:78:68:d9:13:fa:f9:2d:be:f8:3a:c8:16:f2:73:50:7d:
         d0:9d:08:52:17:75:6a:66:a8:41:cb:39:04:41:9d:a8:e0:02:
         f1:80:7f:1e:0e:d6:d4:00:a6:24:3b:e9:53:5a:e2:3b:3b:61:
         73:f8:fd:e0:6d:16:81:89:d0:16:03:f6:56:dc:db:60:07:92:
         a5:80:9e:74:e4:0d:99:4f:43:18:16:d7:d4:99:e3:f4:a9:59:
         f5:48:3a:be:34:3e:5c:4b:6b:b2:e7:a5:f6:10:45:42:06:de:
         14:32:b0:e1:e4:a1:a8:57:20:53:2b:40:f8:68:22:1f:ff:e7:
         34:55:7b:9a:f6:27:2d:84:56:76:65:b8:97:49:7b:fa:68:f2:
         0c:6f:e0:57:94:42:dd:6d:ae:41:cd:76:ee:87:ee:09:46:8c:
         02:45:41:24:30:04:a6:f5:b9:74:f9:50:4f:98:21:47:9c:24:
         96:93:a1:04:38:e7:db:da:0f:97:45:b3:5c:df:0d:21:fd:03:
         38:9a:6c:fe:c0:e4:b8:f0:65:5b:15:67:65:20:2c:32:b8:d3:
         2d:9c:a6:19
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYqoVwgvnc4Dr3OuGVnOlsy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwOTE4MTI0OTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTNjNjgwNzJkZTc5OTQ0ZjlmZTgxMDE2YThiZTg4YjVkMjUxNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiH0+eTf5bgerVscnPrKyGhauPak
TTSHwOiAUlMwz0o4M249n+Vg/eQjIwbMP+fK63AN86im2PxGnRkBkbgb7Rsb3FsN
IrBdt67nXvpm+QK7Ql0TsHtcfdOlsr9pFN97u85A3QiQA2KCSa3bFh4JtpY0ri/a
SF2ZvvXP+7ozFjQBLziQ+3D2EyW+RKtBpG9mMkpx0IwVZGJE6jhvq+D1uW28Tw0x
JNUb2igbmirH1ouMa80utSksq8e9pAljx+c+lJnLAub8mQ0THgY/5WEcsBor/Iay
5j2YEXN6nMLwLtOgW38fTEnjYFTjPnayE0U3L0riFX+U8XFEY6rKbtiXXwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFBE8aAct55lE+f6BAWqL6ItdJRULMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRVR4b0J5M25tVVQ1X29FQmFvdm9pMTBsRlFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcDKg6xByfQ
MBIDBwEqDrEHJ/IDBwMqDrEHJ/AwDQYJKoZIhvcNAQELBQADggEBAIASlvLa3lEp
e3de098nFNSZGHi6sotnaZfm0Rl62KCXnJZzkegweGjZE/r5Lb74OsgW8nNQfdCd
CFIXdWpmqEHLOQRBnajgAvGAfx4O1tQApiQ76VNa4js7YXP4/eBtFoGJ0BYD9lbc
22AHkqWAnnTkDZlPQxgW19SZ4/SpWfVIOr40PlxLa7LnpfYQRUIG3hQysOHkoahX
IFMrQPhoIh//5zRVe5r2Jy2EVnZluJdJe/po8gxv4FeUQt1trkHNdu6H7glGjAJF
QSQwBKb1uXT5UE+YIUecJJaToQQ459vaD5dFs1zfDSH9AziabP7A5LjwZVsVZ2Ug
LDK40y2cphk=
-----END CERTIFICATE-----