Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LWM82xR9emBraeYMMRiO4510qZc.roa
File:                     LWM82xR9emBraeYMMRiO4510qZc.roa (raw, json)
Hash identifier:          ugl/grwtTwu5TmFsYfsyxliXrgTbLVJAcxMalFqLLjU=
Subject key identifier:   2D:63:3C:DB:14:7D:7A:60:6B:69:E6:0C:31:18:8E:E3:9D:74:A9:97
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018AA0AA4FF8B328EC2633C738231201108B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LWM82xR9emBraeYMMRiO4510qZc.roa
Signing time:             Sun 17 Sep 2023 01:03:50 +0000
ROA not before:           Sun 17 Sep 2023 01:03:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     26042
IP address blocks:        2a0e:97c0:d50::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a0:aa:4f:f8:b3:28:ec:26:33:c7:38:23:12:01:10:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 17 01:03:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d633cdb147d7a606b69e60c31188ee39d74a997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:a3:f8:0b:7d:92:82:94:bb:ee:df:80:6f:
                    c9:3e:df:e0:c7:49:05:d7:27:f3:67:57:96:49:6e:
                    57:fd:35:e9:8b:65:0d:da:2d:b1:e0:eb:9a:73:1b:
                    cd:74:57:a4:a6:2a:fc:87:e6:fd:19:8f:50:85:95:
                    18:40:88:20:b2:db:75:b7:7d:4e:cd:20:bf:92:bc:
                    98:43:60:e1:a7:75:1e:70:f4:95:24:62:8c:fa:8a:
                    7b:38:7b:d5:b7:19:e1:5e:f4:e5:c0:e5:0a:b3:8e:
                    8b:a6:71:91:d0:8c:b2:62:fb:f3:26:a9:70:82:0e:
                    30:90:eb:4a:a6:d3:2d:e7:06:f7:47:30:c2:12:ff:
                    57:9c:7a:a4:17:d8:c7:21:9d:93:54:0d:fc:01:df:
                    c2:c4:3e:1f:e7:be:0c:21:df:42:2c:82:a4:7d:a7:
                    11:e4:b6:06:6f:de:ab:2e:b0:5c:30:b0:1a:b0:d5:
                    ca:07:4d:af:03:52:4c:35:17:6a:95:39:6a:c0:41:
                    69:15:3c:c5:58:f5:82:84:45:ed:27:34:1b:45:db:
                    66:fd:0e:6f:5e:0c:36:58:b5:3f:37:dc:09:7b:8d:
                    91:30:28:2e:2f:04:b7:f7:e2:60:40:4c:ce:79:09:
                    e2:ba:76:29:d4:5f:21:4c:6b:90:7a:f7:e8:56:6a:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:63:3C:DB:14:7D:7A:60:6B:69:E6:0C:31:18:8E:E3:9D:74:A9:97
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LWM82xR9emBraeYMMRiO4510qZc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:d50::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:3f:6e:14:87:8b:8c:1a:b1:a6:1a:b6:4b:35:b9:c3:37:fd:
         5a:26:23:d5:54:94:75:1b:29:84:60:24:db:58:57:50:98:5c:
         72:1c:bc:f6:3e:4f:ce:85:9c:a3:43:23:d9:98:cd:03:17:e6:
         8b:46:6e:58:21:c0:a8:04:d6:2f:48:21:20:54:4e:bf:9e:bd:
         a6:65:e7:d0:dd:e4:d8:a2:2f:28:75:9b:e3:1a:27:cb:24:12:
         44:70:00:22:d5:5d:13:43:6a:9c:ce:69:a1:35:fb:f3:2d:8b:
         8b:3e:e4:bf:ba:b7:d3:4c:4d:87:79:37:9f:68:db:1b:85:bc:
         aa:7c:31:f5:6c:f6:f6:01:70:64:e8:f4:7e:29:66:00:6d:b7:
         32:74:ca:d1:a7:36:09:57:bf:22:e8:d2:94:8a:e1:72:9c:ee:
         99:68:e0:2d:ab:39:18:51:74:b7:ae:cc:2b:76:2f:e6:b2:77:
         22:31:bc:af:36:f2:b9:6a:af:a3:b2:2f:fb:19:5f:64:69:41:
         d2:85:fc:fa:98:13:85:5e:c2:3c:85:ea:f0:2f:a5:3d:a9:e1:
         a8:ec:ed:6c:bd:3e:25:a1:f1:11:f9:d2:78:a6:38:52:6d:d2:
         2a:14:42:2a:10:1e:fa:8a:4d:40:64:90:f6:75:20:44:27:b1:
         3a:c8:5a:1b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYqgqk/4syjsJjPHOCMSARCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwOTE3MDEwMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDYzM2NkYjE0N2Q3YTYwNmI2OWU2MGMzMTE4OGVlMzlkNzRhOTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTOj+At9koKUu+7fgG/JPt/gx0kF
1yfzZ1eWSW5X/TXpi2UN2i2x4OuacxvNdFekpir8h+b9GY9QhZUYQIggstt1t31O
zSC/kryYQ2Dhp3UecPSVJGKM+op7OHvVtxnhXvTlwOUKs46LpnGR0IyyYvvzJqlw
gg4wkOtKptMt5wb3RzDCEv9XnHqkF9jHIZ2TVA38Ad/CxD4f574MId9CLIKkfacR
5LYGb96rLrBcMLAasNXKB02vA1JMNRdqlTlqwEFpFTzFWPWChEXtJzQbRdtm/Q5v
Xgw2WLU/N9wJe42RMCguLwS39+JgQEzOeQniunYp1F8hTGuQevfoVmrSpwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFC1jPNsUfXpga2nmDDEYjuOddKmXMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTFdNODJ4UjllbUJyYWVZTU1SaU80NTEwcVpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwA1Q
MA0GCSqGSIb3DQEBCwUAA4IBAQCeP24Uh4uMGrGmGrZLNbnDN/1aJiPVVJR1GymE
YCTbWFdQmFxyHLz2Pk/OhZyjQyPZmM0DF+aLRm5YIcCoBNYvSCEgVE6/nr2mZefQ
3eTYoi8odZvjGifLJBJEcAAi1V0TQ2qczmmhNfvzLYuLPuS/urfTTE2HeTefaNsb
hbyqfDH1bPb2AXBk6PR+KWYAbbcydMrRpzYJV78i6NKUiuFynO6ZaOAtqzkYUXS3
rswrdi/msnciMbyvNvK5aq+jsi/7GV9kaUHShfz6mBOFXsI8herwL6U9qeGo7O1s
vT4lofER+dJ4pjhSbdIqFEIqEB76ik1AZJD2dSBEJ7E6yFob
-----END CERTIFICATE-----