Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hy8uSvvZ6drlpPZ-VAnFU9vup9Y.roa
File:                     Hy8uSvvZ6drlpPZ-VAnFU9vup9Y.roa (raw, json)
Hash identifier:          JdunxPDDrphHsDZ0uGk+GQXhUh6MO3YrVYm3+zH/ugs=
Subject key identifier:   1F:2F:2E:4A:FB:D9:E9:DA:E5:A4:F6:7E:54:09:C5:53:DB:EE:A7:D6
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CFA4259E869331B0346B6CE183A4C7984
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hy8uSvvZ6drlpPZ-VAnFU9vup9Y.roa
Signing time:             Thu 11 Jan 2024 20:41:41 +0000
ROA not before:           Thu 11 Jan 2024 20:41:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202941
IP address blocks:        2a0e:b107:1e10::/48 maxlen: 48
                          2a10:2f00:187::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 19:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:fa:42:59:e8:69:33:1b:03:46:b6:ce:18:3a:4c:79:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 11 20:41:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1f2f2e4afbd9e9dae5a4f67e5409c553dbeea7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:54:94:e6:27:21:9d:27:92:99:88:d9:fb:79:
                    9b:d7:d0:f9:c5:35:9c:68:77:29:bf:f3:db:75:3e:
                    2c:4a:f2:bc:d3:ee:39:7b:d6:0b:37:71:81:08:10:
                    c3:b0:22:f0:fd:b7:c3:d1:fe:7b:cb:cb:3b:04:3c:
                    3c:1f:0d:07:b4:fb:ad:6a:b2:94:10:da:a1:c1:ac:
                    62:8f:98:f8:03:a6:35:86:ba:8a:e2:38:8e:79:df:
                    cb:f3:c0:60:a5:4e:90:6c:20:e0:48:64:d4:5b:b0:
                    a8:8d:f9:97:10:09:c4:7f:f5:3f:bc:91:86:19:1a:
                    5e:ad:54:ed:24:94:07:a2:02:05:3c:4c:58:89:c9:
                    c4:9b:57:02:21:c6:a1:1b:d9:21:89:e5:90:20:16:
                    fa:78:40:e7:06:51:06:29:3b:54:e4:22:40:15:71:
                    7d:4c:1a:7a:73:91:49:e1:fb:e9:50:19:8f:ec:59:
                    39:1c:e9:4a:0b:58:2a:cf:e0:e7:37:a2:55:45:87:
                    29:0c:0d:8f:ab:7e:26:d4:dc:48:55:82:b4:c7:93:
                    98:ea:42:75:31:9a:8c:2b:53:13:23:fa:87:e1:9d:
                    0a:c2:5a:68:7f:98:2d:ed:e2:42:8c:b3:72:a8:43:
                    95:17:fa:93:74:98:9c:79:03:ca:b0:c5:04:fe:f0:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2F:2E:4A:FB:D9:E9:DA:E5:A4:F6:7E:54:09:C5:53:DB:EE:A7:D6
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hy8uSvvZ6drlpPZ-VAnFU9vup9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1e10::/48
                  2a10:2f00:187::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:c7:53:37:b9:94:8c:b4:3f:da:fc:8b:83:d0:6f:f8:29:93:
         1c:57:7b:23:80:bb:a4:9e:ef:1b:e1:c8:4d:61:9e:32:85:d7:
         64:ea:50:03:ff:50:4b:18:8d:6b:b9:68:6f:82:16:10:7e:88:
         87:51:a3:24:fd:fd:55:74:d5:13:da:4d:d0:a0:e2:94:c5:b2:
         fe:56:f9:8f:9a:c4:ca:e5:8e:04:d0:8d:94:96:a4:b8:d5:27:
         4c:87:98:97:15:08:c7:bf:92:f0:e7:03:d8:e2:58:ae:2c:25:
         b3:87:c0:90:d7:ee:18:43:6c:34:9a:33:e6:26:bf:45:64:7c:
         3d:1c:5f:3a:67:f6:6d:f0:81:61:76:43:0e:3c:ae:b0:5b:45:
         24:02:51:ba:b1:5b:c3:0c:f1:58:a7:25:d0:c9:6f:b1:ef:bf:
         f3:d3:ae:4f:da:48:ae:1f:49:d7:9c:d4:cc:9d:17:1b:23:c5:
         d2:a7:ac:8f:ea:3a:a2:98:89:44:38:1b:81:c3:af:61:4c:d5:
         d3:e5:25:5e:2f:b2:8f:11:d9:dc:35:09:ff:fd:f8:4d:45:2b:
         10:7d:d8:55:b5:27:d7:6b:4c:06:c2:fa:01:b9:06:ae:0e:bf:
         01:4e:75:8e:ee:8e:a4:46:cc:85:23:1d:0b:1a:2c:e9:96:b1:
         23:6b:25:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----