Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hx0Ff31S2p8rkkl7mxgvwZzYDD8.roa
File:                     Hx0Ff31S2p8rkkl7mxgvwZzYDD8.roa (raw, json)
Hash identifier:          Ei5Ha19bKueWs2n+2SXI8ylQWGGknM5R9t5K1iwSOUw=
Subject key identifier:   1F:1D:05:7F:7D:52:DA:9F:2B:92:49:7B:9B:18:2F:C1:9C:D8:0C:3F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E79CCA7853E33B44E2D477D7859CDB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hx0Ff31S2p8rkkl7mxgvwZzYDD8.roa
Signing time:             Mon 02 Jan 2023 05:15:05 +0000
ROA not before:           Mon 02 Jan 2023 05:15:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149296
IP address blocks:        2a0e:b107:1810::/44 maxlen: 48
                          2a0e:b107:1840::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:9c:ca:78:53:e3:3b:44:e2:d4:77:d7:85:9c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1f1d057f7d52da9f2b92497b9b182fc19cd80c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:80:4e:f1:58:be:80:e1:66:65:54:c5:d5:f9:
                    da:c3:9c:86:5a:46:df:cb:71:48:54:64:58:8e:c9:
                    c3:f4:3c:d8:ca:16:57:dc:81:e2:e2:62:42:fd:ed:
                    6a:ab:a7:8a:90:c4:c5:e3:fe:d8:39:57:82:01:65:
                    6b:d2:19:6d:31:05:c0:8c:b6:03:02:ca:9d:cd:42:
                    13:f1:cd:ec:f8:c6:93:bc:1a:37:f1:3f:8d:bf:e5:
                    97:19:b8:6d:78:f1:18:fa:52:1c:2b:4b:30:20:a4:
                    06:67:5e:52:d8:65:ca:00:cb:28:a4:84:bf:f4:af:
                    35:ac:44:69:6c:c7:8b:7f:7c:2e:d3:e8:e8:ee:90:
                    2d:cd:a7:d7:ff:71:9e:88:b6:30:3e:e4:a0:1f:dc:
                    51:55:8c:7d:e5:7d:25:7e:02:9e:49:2f:a9:70:2b:
                    b5:5e:a1:75:8e:05:28:6e:7c:4b:dc:fa:80:ed:1f:
                    d2:11:ac:e4:fa:de:d4:dd:d6:06:27:f7:80:46:1b:
                    41:fc:77:ab:3f:bd:9e:9b:e6:fd:53:42:40:a9:51:
                    3d:68:e4:c7:b7:1a:aa:8e:3a:3e:54:cf:26:c4:55:
                    0c:57:ed:22:87:23:c5:21:30:a6:16:48:61:56:77:
                    0a:4f:31:1e:1f:39:c7:2a:2c:7a:ed:e8:85:b8:22:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1D:05:7F:7D:52:DA:9F:2B:92:49:7B:9B:18:2F:C1:9C:D8:0C:3F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hx0Ff31S2p8rkkl7mxgvwZzYDD8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1810::/44
                  2a0e:b107:1840::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:88:3a:93:27:ad:7a:ea:6d:b2:37:92:d2:42:ea:a6:6f:88:
         3d:6a:47:d4:d4:46:73:77:a3:e1:fb:e5:18:6d:45:96:dd:de:
         cd:dc:e6:78:32:7e:24:66:e5:67:10:c1:8b:fe:b2:ba:bd:17:
         74:22:22:77:6f:f8:f5:a1:41:d2:bb:2c:93:53:1c:50:fa:cd:
         65:cd:e8:ce:61:38:a8:46:52:34:da:79:80:5d:fb:bd:8b:20:
         30:49:01:7e:7c:6a:a8:8a:65:fc:5a:6e:a2:fa:c0:4b:f0:a9:
         23:a3:6d:d4:f9:80:6d:57:09:a2:56:d9:25:76:19:1a:bd:e8:
         1e:65:81:41:83:8c:a0:20:0d:55:57:30:2d:87:24:b6:51:ad:
         e1:8f:40:ce:9c:3b:a8:fc:71:bb:d6:60:d6:21:e7:66:6e:10:
         0c:f2:f3:e1:8e:0d:74:29:48:44:3b:94:d6:db:e1:a4:fb:0d:
         30:fd:0e:5a:c0:89:43:1f:ee:be:7e:69:6b:32:48:e9:c5:5f:
         71:8c:ad:d0:3b:13:93:8b:4c:1d:17:e9:f9:5a:13:cb:f6:94:
         28:cb:55:d5:98:f3:38:27:f6:d3:e8:ae:9f:d7:90:d7:7d:58:
         27:a6:cb:ac:04:1a:b6:f6:18:26:db:67:2d:46:f2:6b:5d:22:
         b8:b2:95:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----