Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H0OsXC3-wP4ms6GkLVWGfRmlkfI.roa
File:                     H0OsXC3-wP4ms6GkLVWGfRmlkfI.roa (raw, json)
Hash identifier:          Gn4Czss1lSmG0IOpbJW/h9lcBvXWM2BGG9MMVIlHtFE=
Subject key identifier:   1F:43:AC:5C:2D:FE:C0:FE:26:B3:A1:A4:2D:55:86:7D:19:A5:91:F2
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018FCCF87DC4F5AD273F24082A2F2208DEA8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H0OsXC3-wP4ms6GkLVWGfRmlkfI.roa
Signing time:             Fri 31 May 2024 04:46:28 +0000
ROA not before:           Fri 31 May 2024 04:46:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214801
IP address blocks:        2a0e:b107:1e10::/48 maxlen: 48
                          2a0e:b107:1e11::/48 maxlen: 48
                          2a0e:b107:1e12::/48 maxlen: 48
                          2a0e:b107:1e13::/48 maxlen: 48
                          2a0e:b107:1e14::/48 maxlen: 48
                          2a0e:b107:1e15::/48 maxlen: 48
                          2a0e:b107:1e16::/48 maxlen: 48
                          2a0e:b107:1e17::/48 maxlen: 48
                          2a0e:b107:1e18::/48 maxlen: 48
                          2a0e:b107:1e19::/48 maxlen: 48
                          2a0e:b107:1e1a::/48 maxlen: 48
                          2a0e:b107:1e1b::/48 maxlen: 48
                          2a0e:b107:1e1c::/48 maxlen: 48
                          2a0e:b107:1e1d::/48 maxlen: 48
                          2a10:2f00:1a1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 06:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:cc:f8:7d:c4:f5:ad:27:3f:24:08:2a:2f:22:08:de:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 31 04:46:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1f43ac5c2dfec0fe26b3a1a42d55867d19a591f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:16:6a:5f:03:2b:42:c9:56:dd:fa:48:11:9c:
                    9c:98:b3:9d:6a:e8:05:a5:4e:5e:d7:9c:28:9d:6e:
                    85:7e:5d:fa:a3:00:76:22:87:dc:10:7c:27:76:40:
                    75:9f:ed:e1:99:9c:ad:d1:61:f8:25:69:1a:4a:ea:
                    29:40:c4:64:be:ed:4d:9e:da:d0:10:19:32:5e:5a:
                    77:ab:9a:c7:73:85:ad:5a:65:c2:d5:89:7e:e9:a8:
                    ee:39:0b:45:8c:aa:df:b3:8e:96:68:cc:a8:03:aa:
                    96:62:ea:7d:0d:d5:ea:2d:b1:e6:6f:23:e1:95:19:
                    27:46:8e:3b:05:2a:ca:7d:6f:a5:f4:ce:13:7a:7e:
                    50:aa:df:19:25:6d:1e:d6:f0:5d:a4:3b:e0:5b:aa:
                    48:b6:0a:a6:d5:6e:ee:43:bf:9a:68:81:6b:91:a9:
                    df:d5:9d:38:d5:cf:a5:15:a5:73:71:07:3e:38:00:
                    aa:35:5f:c4:71:5c:21:b7:67:4f:df:a0:68:aa:f3:
                    0c:07:96:bb:ec:96:70:de:0f:9e:b6:22:0c:df:44:
                    3d:f1:b0:45:91:57:fd:e6:83:41:1e:ff:3b:e0:96:
                    f0:fe:cd:9c:0a:b3:70:52:0c:ce:54:81:0a:d9:57:
                    8f:02:a7:4b:e8:b2:d6:f9:4e:ff:7e:67:b5:5d:15:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:43:AC:5C:2D:FE:C0:FE:26:B3:A1:A4:2D:55:86:7D:19:A5:91:F2
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H0OsXC3-wP4ms6GkLVWGfRmlkfI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1e10::-2a0e:b107:1e1d:ffff:ffff:ffff:ffff:ffff
                  2a10:2f00:1a1::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:f7:d6:ae:cd:3a:51:09:25:c4:02:d0:cf:bb:68:43:ac:33:
         a9:b5:9b:3e:37:92:63:a5:a1:0f:81:99:c4:1e:02:68:2f:b3:
         44:32:07:2e:1a:dd:cd:0f:92:6c:4e:cb:31:32:2e:f9:1f:d0:
         25:0d:d6:0f:05:29:4e:6a:3d:a2:b3:ef:a2:09:e4:3f:c6:a8:
         2e:ca:f3:da:91:15:47:f5:97:ca:50:fc:fc:43:b2:c3:58:5e:
         4b:12:74:4f:cd:ff:74:b9:1c:c1:6c:d9:1c:43:e8:50:a9:45:
         a6:06:ca:5a:b4:29:dc:1c:d5:c5:61:1c:c0:fa:46:6d:9b:fc:
         0d:0e:67:fc:a1:fe:e3:00:31:8a:19:38:0e:69:05:16:ca:ba:
         3c:1b:27:2f:75:0c:ce:a3:00:51:ce:03:dc:ed:e2:8e:1f:30:
         dc:ea:0f:a5:b1:ef:96:c2:d3:56:e8:64:7e:53:d3:01:0d:e5:
         fd:9b:27:ef:e7:a7:cf:a6:d9:80:45:2f:62:7c:04:b0:52:16:
         17:3b:e2:60:54:30:be:51:1b:d2:2f:16:cf:6c:61:44:7b:17:
         02:53:db:c0:1e:29:bd:f1:70:7b:a5:eb:61:08:d2:a8:f6:c0:
         cd:19:dd:aa:29:94:14:89:4b:c6:4b:81:37:63:19:66:98:24:
         ab:1b:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----