Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F21V9gSo8W5aN7H_NJUNg4yPuDw.roa
File:                     F21V9gSo8W5aN7H_NJUNg4yPuDw.roa (raw, json)
Hash identifier:          rnB2gJMuNei1OWeVac/fjR8zaMv482oRlU8spO6Elwo=
Subject key identifier:   17:6D:55:F6:04:A8:F1:6E:5A:37:B1:FF:34:95:0D:83:8C:8F:B8:3C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AC1BBFD98E1D721F562FCA9B732C5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F21V9gSo8W5aN7H_NJUNg4yPuDw.roa
Signing time:             Tue 24 Jan 2023 16:09:36 +0000
ROA not before:           Tue 24 Jan 2023 16:09:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     133846
IP address blocks:        2a0e:b107:2c0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:c1:bb:fd:98:e1:d7:21:f5:62:fc:a9:b7:32:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=176d55f604a8f16e5a37b1ff34950d838c8fb83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c9:1b:d5:17:e3:63:9a:0b:6a:85:bf:bb:9c:
                    ff:3a:3d:9d:e3:3c:19:a8:2a:39:2c:71:41:e8:5c:
                    3d:6f:41:25:57:72:0b:96:ce:2e:7b:cb:f2:39:50:
                    6f:87:3b:4a:4e:a0:06:9a:c4:a1:40:7a:ff:b2:6e:
                    49:4e:a8:88:8d:9a:e4:e8:a4:87:03:0b:aa:af:22:
                    ed:a7:99:de:2b:0d:7a:5a:d5:31:a8:d5:7f:23:32:
                    be:cc:6e:f2:01:35:eb:0f:36:cb:b5:a5:e2:a8:41:
                    82:96:6e:5e:0b:d8:db:fc:75:39:c9:d5:2f:e5:26:
                    fa:e6:7a:2b:f7:a0:1c:d7:00:82:89:e3:ce:60:b4:
                    7b:3c:bc:8f:a0:ce:37:e6:db:74:86:2f:11:f4:d7:
                    b4:5b:d6:b3:4a:46:1f:5a:2a:68:06:f1:18:71:67:
                    18:51:7e:39:b8:80:49:f6:2e:09:68:68:0a:99:14:
                    ff:68:eb:2f:13:28:28:b6:bb:5f:d6:2b:97:2f:9b:
                    ee:5a:c0:17:b1:f1:e4:75:32:68:c3:3d:93:d3:a0:
                    4d:84:47:3a:72:46:f8:80:13:fb:da:2d:aa:75:3a:
                    04:8f:39:ef:f6:d5:30:c0:d5:9d:4e:f7:4e:87:56:
                    86:21:79:53:b2:1e:c6:be:15:74:0c:5a:5a:bc:61:
                    10:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6D:55:F6:04:A8:F1:6E:5A:37:B1:FF:34:95:0D:83:8C:8F:B8:3C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F21V9gSo8W5aN7H_NJUNg4yPuDw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:21:60:99:1d:b3:4e:a4:ea:0f:d5:b7:59:79:94:9f:8f:2d:
         86:a7:5e:b6:0b:12:4b:d6:d0:0c:2d:72:70:44:e7:3d:8b:a8:
         e7:5c:db:9f:44:c6:8c:93:31:93:6d:7a:7c:eb:e2:c7:31:1d:
         46:aa:04:8b:94:6b:2f:64:67:48:35:ce:e2:a9:f3:34:06:64:
         58:80:48:97:01:d1:0f:a5:dc:ff:08:c6:0e:07:d8:4b:59:65:
         ab:13:ca:a1:e2:be:3c:fe:c6:9e:88:00:d6:cd:3b:1e:c2:24:
         81:46:5c:8d:d6:1b:6c:07:9e:d5:54:68:b0:dd:bc:0c:6f:6a:
         7f:0d:e9:e9:ca:36:cd:67:3f:5a:59:09:e7:9f:ab:5f:6a:3d:
         e1:11:4a:bd:79:d5:1d:3b:19:4e:97:d0:50:22:d8:0e:f2:0c:
         66:b2:34:50:97:12:83:6d:86:80:4c:e1:d6:29:5a:96:ea:61:
         08:3c:0c:99:a6:27:72:5a:95:50:d1:c1:d9:fe:36:36:3a:6d:
         a2:8e:04:a1:26:ca:b4:86:64:a8:75:a2:72:f0:5d:2f:7e:06:
         15:30:b3:a5:0e:40:16:db:b2:ae:a7:6f:1a:12:13:b0:4f:71:
         64:4c:ff:af:44:d9:63:34:0f:5b:ae:d0:0e:a8:a3:77:4d:fd:
         19:36:81:16
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXkisG7/Zjh1yH1YvyptzLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzZkNTVmNjA0YThmMTZlNWEzN2IxZmYzNDk1MGQ4MzhjOGZiODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMkb1RfjY5oLaoW/u5z/Oj2d4zwZ
qCo5LHFB6Fw9b0ElV3ILls4ue8vyOVBvhztKTqAGmsShQHr/sm5JTqiIjZrk6KSH
AwuqryLtp5neKw16WtUxqNV/IzK+zG7yATXrDzbLtaXiqEGClm5eC9jb/HU5ydUv
5Sb65nor96Ac1wCCiePOYLR7PLyPoM435tt0hi8R9Ne0W9azSkYfWipoBvEYcWcY
UX45uIBJ9i4JaGgKmRT/aOsvEygotrtf1iuXL5vuWsAXsfHkdTJowz2T06BNhEc6
ckb4gBP72i2qdToEjznv9tUwwNWdTvdOh1aGIXlTsh7GvhV0DFpavGEQAwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBdtVfYEqPFuWjex/zSVDYOMj7g8MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRjIxVjlnU284VzVhTjdIX05KVU5nNHlQdUR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwLA
MA0GCSqGSIb3DQEBCwUAA4IBAQAVIWCZHbNOpOoP1bdZeZSfjy2Gp162CxJL1tAM
LXJwROc9i6jnXNufRMaMkzGTbXp86+LHMR1GqgSLlGsvZGdINc7iqfM0BmRYgEiX
AdEPpdz/CMYOB9hLWWWrE8qh4r48/saeiADWzTsewiSBRlyN1htsB57VVGiw3bwM
b2p/DenpyjbNZz9aWQnnn6tfaj3hEUq9edUdOxlOl9BQItgO8gxmsjRQlxKDbYaA
TOHWKVqW6mEIPAyZpidyWpVQ0cHZ/jY2Om2ijgShJsq0hmSodaJy8F0vfgYVMLOl
DkAW27Kup28aEhOwT3FkTP+vRNljNA9brtAOqKN3Tf0ZNoEW
-----END CERTIFICATE-----