Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FDgllo1MTkbkQSfY5B9O0EPyXB0.roa
File:                     FDgllo1MTkbkQSfY5B9O0EPyXB0.roa (raw, json)
Hash identifier:          3fD+t9+5fx4q4orTgfB0JNLAzuceqav0ZGBm9lZ3zoI=
Subject key identifier:   14:38:25:96:8D:4C:4E:46:E4:41:27:D8:E4:1F:4E:D0:43:F2:5C:1D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018C7DF4D58711AC39793EDFBA0A9FBFA0FC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FDgllo1MTkbkQSfY5B9O0EPyXB0.roa
Signing time:             Mon 18 Dec 2023 17:24:06 +0000
ROA not before:           Mon 18 Dec 2023 17:24:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215855
IP address blocks:        2a0e:97c0:e60::/48 maxlen: 48
                          2a0e:97c0:e61::/48 maxlen: 48
                          2a0e:97c0:e62::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7d:f4:d5:87:11:ac:39:79:3e:df:ba:0a:9f:bf:a0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec 18 17:24:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=143825968d4c4e46e44127d8e41f4ed043f25c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:02:00:44:b3:35:eb:18:85:a0:58:a4:ea:
                    47:22:49:39:db:ac:21:12:33:18:db:a2:de:f9:c5:
                    1a:54:bc:9d:63:11:66:f7:4b:6f:0f:39:64:93:94:
                    13:0d:58:37:30:3c:ba:da:cd:f3:59:4b:e6:f8:39:
                    ac:67:aa:5f:50:d4:4c:14:bb:dc:7c:c8:e8:69:58:
                    ad:74:e0:5c:ee:1e:bc:ae:f8:8a:d2:b3:90:e5:a9:
                    68:ec:2a:32:68:fb:a6:e6:2e:3b:f1:0e:53:12:a9:
                    9c:5c:df:81:0b:b2:cf:77:22:9a:68:ee:75:a1:89:
                    ce:18:e0:2e:21:82:19:28:94:7e:b5:13:7f:3c:44:
                    33:99:79:06:10:8a:e9:0c:08:d8:92:8f:da:94:32:
                    03:ee:80:50:bc:36:43:00:ec:d7:75:00:a4:d8:63:
                    05:bb:14:a5:19:88:c6:8a:aa:86:76:37:ff:59:06:
                    76:ee:44:c6:ec:15:d1:c6:3a:83:cf:7b:3f:2d:56:
                    bc:a8:fa:8e:02:3b:1a:8d:e8:73:91:a1:79:e5:5e:
                    9e:51:c5:79:5c:e9:5e:a9:32:90:9e:f7:48:20:f5:
                    02:c4:da:4c:13:bb:10:76:98:fb:41:5c:5f:b7:37:
                    93:30:5c:13:af:36:a1:1b:01:4c:a3:b8:84:de:02:
                    9e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:38:25:96:8D:4C:4E:46:E4:41:27:D8:E4:1F:4E:D0:43:F2:5C:1D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FDgllo1MTkbkQSfY5B9O0EPyXB0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:e60::-2a0e:97c0:e62:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9e:40:4a:2f:35:21:ed:a3:00:cf:ef:6f:6f:78:f6:38:c4:3c:
         35:a9:70:df:af:19:2a:a2:9a:ce:95:70:bb:12:3b:d3:37:64:
         3c:4d:42:41:31:b6:91:4f:72:20:70:90:02:2d:21:b0:d5:8e:
         c4:89:8f:2a:75:7e:50:9d:6a:d5:e2:9b:70:d0:19:d4:c0:09:
         70:54:61:a4:39:e2:84:f8:a6:3b:fb:98:86:34:6a:1c:09:e1:
         73:b8:8c:93:5c:48:b9:00:93:19:ac:a6:cc:1d:b1:fe:e0:d0:
         98:a0:62:7c:02:41:eb:2f:cd:20:b3:56:9f:32:4f:9f:bc:d8:
         a5:b4:2e:6c:6d:5c:e0:32:6c:3f:b8:2c:12:3b:55:cc:2c:39:
         8c:02:80:17:9d:7f:67:f0:b1:27:b3:06:d4:bf:f1:8d:2b:8e:
         60:c3:4b:7d:57:2e:65:be:f2:f7:42:49:7a:f7:2c:3b:b7:86:
         ef:5c:6a:b9:8e:90:93:1e:ea:1c:0d:1b:4f:85:2a:4e:9c:42:
         95:cd:30:92:2a:5f:b9:b8:f2:0b:1c:8d:37:80:88:86:5c:1c:
         0b:4d:89:6e:98:27:7f:ef:15:2d:d7:25:b8:bc:f6:e4:7f:5a:
         ba:28:c6:bd:6a:6a:fa:c7:0b:7b:d6:ff:91:b7:71:bb:f0:43:
         62:0a:0d:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----