Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FpBxdGQjWRjMASXqkGp7ocUxRuQ.roa
File:                     FpBxdGQjWRjMASXqkGp7ocUxRuQ.roa (raw, json)
Hash identifier:          PqLSqctFPNmref1bzW8hRTCQda01HGu2l+OQvkR6r24=
Subject key identifier:   16:90:71:74:64:23:59:18:CC:01:25:EA:90:6A:7B:A1:C5:31:46:E4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189231A454D58C25C6F5948CE3845CCE266
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FpBxdGQjWRjMASXqkGp7ocUxRuQ.roa
Signing time:             Tue 04 Jul 2023 22:51:11 +0000
ROA not before:           Tue 04 Jul 2023 22:51:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61218
IP address blocks:        2a0e:97c0:4b00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:23:1a:45:4d:58:c2:5c:6f:59:48:ce:38:45:cc:e2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul  4 22:51:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1690717464235918cc0125ea906a7ba1c53146e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:89:5d:4f:0c:54:cc:ef:16:3a:ca:f0:0d:ed:
                    7a:35:85:45:05:14:c6:6e:7e:f7:28:77:48:2a:92:
                    29:91:b7:11:6f:22:56:5c:b6:51:90:0c:c4:a0:b7:
                    ff:55:50:d0:1e:9e:88:49:17:d9:f2:b0:17:63:f8:
                    c8:ea:19:52:af:12:25:17:89:ab:27:b4:10:6c:96:
                    7c:9b:c3:9c:a0:1f:23:b1:d6:ce:07:36:7c:3f:4e:
                    22:fb:24:a4:69:99:6d:35:e3:43:89:13:bb:fe:21:
                    e5:b8:7b:58:d3:38:65:df:6e:9c:36:f9:0d:2a:48:
                    93:f0:98:c1:86:25:8b:86:78:bf:be:9f:d4:67:35:
                    57:1a:86:65:02:1e:24:91:7f:17:ba:32:c9:4e:d9:
                    ff:a4:ff:44:0a:a8:86:31:c9:b1:07:ac:0a:bd:e3:
                    a7:84:78:4f:d4:cd:bf:36:4a:b5:cd:e4:1d:f5:36:
                    02:c1:d6:c1:8c:c5:1f:b0:68:3c:d3:75:04:da:b0:
                    55:2f:d9:15:f8:ac:65:ad:39:28:3c:7d:0f:6f:aa:
                    9d:a3:54:d7:53:98:3b:65:73:9e:dd:ff:b9:d2:8b:
                    87:b8:6c:41:82:3e:fd:5c:5a:18:0f:f4:45:0a:43:
                    ee:43:bc:0f:87:79:ac:50:6c:09:2d:66:65:b6:0e:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:90:71:74:64:23:59:18:CC:01:25:EA:90:6A:7B:A1:C5:31:46:E4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FpBxdGQjWRjMASXqkGp7ocUxRuQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:4b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:56:92:38:39:db:1c:e5:38:fb:fe:d1:76:68:15:41:fd:ed:
         53:68:0c:5a:4e:f3:03:e1:9d:f8:27:0c:4e:5d:8a:6c:5c:7a:
         17:95:36:d6:ad:b7:50:9b:c7:22:db:df:e4:45:07:ec:55:3c:
         cf:de:19:87:14:a6:9c:18:7d:26:7e:66:dd:96:e8:6f:a1:16:
         a3:68:d3:13:31:2b:d8:cf:e6:2d:84:a2:e6:c6:4a:c6:e3:18:
         05:5f:8a:b1:7c:3e:e4:80:d8:5a:25:e3:54:77:cf:6a:79:fe:
         37:72:0a:d7:9b:69:ae:19:39:76:bf:e3:7f:fe:71:10:01:f7:
         a5:a2:86:b4:a9:7e:75:e0:9c:a1:c3:e0:e3:cf:c4:18:78:56:
         9f:33:4a:cb:c1:e9:7d:b6:6c:61:ea:4f:82:4d:15:3d:34:f2:
         3a:67:cf:19:f7:f1:1a:59:d9:76:95:ba:bc:69:ee:aa:10:61:
         74:be:6a:c1:2d:62:88:11:a9:a1:39:73:9f:78:d4:28:46:05:
         02:81:19:36:dd:0a:e4:cf:da:c0:ac:f0:98:92:a9:49:d5:ec:
         17:43:ea:a2:1a:33:bb:55:d6:57:b2:2e:f6:99:e4:72:0a:e7:
         96:4a:4e:fc:c1:16:c2:a4:9c:6f:37:76:17:d9:a5:9c:4a:68:
         fe:95:27:b3
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYkjGkVNWMJcb1lIzjhFzOJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNzA0MjI1MTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjkwNzE3NDY0MjM1OTE4Y2MwMTI1ZWE5MDZhN2JhMWM1MzE0NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYldTwxUzO8WOsrwDe16NYVFBRTG
bn73KHdIKpIpkbcRbyJWXLZRkAzEoLf/VVDQHp6ISRfZ8rAXY/jI6hlSrxIlF4mr
J7QQbJZ8m8OcoB8jsdbOBzZ8P04i+ySkaZltNeNDiRO7/iHluHtY0zhl326cNvkN
KkiT8JjBhiWLhni/vp/UZzVXGoZlAh4kkX8XujLJTtn/pP9ECqiGMcmxB6wKveOn
hHhP1M2/Nkq1zeQd9TYCwdbBjMUfsGg803UE2rBVL9kV+KxlrTkoPH0Pb6qdo1TX
U5g7ZXOe3f+50ouHuGxBgj79XFoYD/RFCkPuQ7wPh3msUGwJLWZltg6jNwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBaQcXRkI1kYzAEl6pBqe6HFMUbkMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRnBCeGRHUWpXUmpNQVNYcWtHcDdvY1V4UnVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg6XwEsw
DQYJKoZIhvcNAQELBQADggEBACpWkjg52xzlOPv+0XZoFUH97VNoDFpO8wPhnfgn
DE5dimxceheVNtatt1CbxyLb3+RFB+xVPM/eGYcUppwYfSZ+Zt2W6G+hFqNo0xMx
K9jP5i2EoubGSsbjGAVfirF8PuSA2Fol41R3z2p5/jdyCtebaa4ZOXa/43/+cRAB
96WihrSpfnXgnKHD4OPPxBh4Vp8zSsvB6X22bGHqT4JNFT008jpnzxn38RpZ2XaV
urxp7qoQYXS+asEtYogRqaE5c5941ChGBQKBGTbdCuTP2sCs8JiSqUnV7BdD6qIa
M7tV1leyLvaZ5HIK55ZKTvzBFsKknG83dhfZpZxKaP6VJ7M=
-----END CERTIFICATE-----