Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LXS7aBKzt1gbMb-q3WZ2VaD_7Sg.roa
File:                     LXS7aBKzt1gbMb-q3WZ2VaD_7Sg.roa (raw, json)
Hash identifier:          nSvWgnm87XCm7rqPvaMJ/CfjKHnYDbPbEoiTyRwfIlw=
Subject key identifier:   2D:74:BB:68:12:B3:B7:58:1B:31:BF:AA:DD:66:76:55:A0:FF:ED:28
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189B5EB3B658872DFFB4D8402FD0BFADC94
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LXS7aBKzt1gbMb-q3WZ2VaD_7Sg.roa
Signing time:             Wed 02 Aug 2023 11:03:59 +0000
ROA not before:           Wed 02 Aug 2023 11:03:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48002
IP address blocks:        2a0e:b107:1450::/48 maxlen: 48
                          2a0e:b107:1452::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b5:eb:3b:65:88:72:df:fb:4d:84:02:fd:0b:fa:dc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  2 11:03:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d74bb6812b3b7581b31bfaadd667655a0ffed28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e2:db:b8:b9:a7:3d:12:69:ab:0f:a0:69:a1:
                    f4:e3:2b:9a:2f:b1:1b:c1:36:02:9c:e4:d7:0a:b7:
                    3c:55:69:cd:b5:fa:32:2d:ca:dc:61:86:70:f9:d8:
                    78:4e:d0:e3:c9:ea:ac:63:9b:c1:f3:57:44:73:3b:
                    16:01:ad:a4:5b:9a:c8:83:c6:ab:30:34:07:9d:d2:
                    d8:c7:0c:27:c5:f6:ee:f5:30:fb:1c:bc:ad:68:72:
                    3f:de:4d:2e:54:d6:cb:2d:61:bc:d5:88:50:32:56:
                    0d:f4:d1:98:c3:7e:7b:f5:bc:d3:7a:87:1b:b4:09:
                    30:c9:59:9f:a9:c7:ec:56:3e:10:d1:b2:12:09:f8:
                    b5:3a:e3:6e:39:aa:02:ab:47:6a:56:7a:bd:df:8d:
                    90:9a:f7:68:82:06:9c:58:74:19:31:75:8f:76:06:
                    c8:64:f3:e3:f1:ee:35:86:de:c8:34:d0:18:86:87:
                    4b:f7:3c:07:85:c8:cf:c7:8d:7d:10:a0:dc:6d:4b:
                    c8:28:64:57:49:40:d3:4e:9d:15:11:85:23:64:ca:
                    de:2f:f9:51:54:f6:1a:3a:6f:c7:dc:99:f8:51:13:
                    e2:74:24:69:aa:b0:1a:15:b9:39:e8:a6:5f:dd:00:
                    a9:0f:09:04:74:87:1b:92:1b:08:a2:b9:22:c8:81:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:74:BB:68:12:B3:B7:58:1B:31:BF:AA:DD:66:76:55:A0:FF:ED:28
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LXS7aBKzt1gbMb-q3WZ2VaD_7Sg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1450::/48
                  2a0e:b107:1452::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:09:d9:78:2d:72:76:d8:21:b4:f9:5b:6e:4c:ab:42:99:d1:
         c5:62:52:51:42:b8:51:c5:6c:4b:fa:37:76:d0:08:c9:bd:cb:
         bf:bf:53:f0:39:94:24:e0:a5:d1:47:23:47:9c:f3:ec:2b:00:
         a2:76:8c:f2:4d:ab:ad:00:8e:37:b8:2e:22:bf:26:79:c4:7f:
         19:d1:71:9e:85:5d:29:20:7a:4c:98:74:5a:02:e3:fc:d7:c4:
         36:5f:ad:4e:c3:6f:e2:71:e1:cb:41:ea:a7:24:12:2a:b3:fd:
         43:c1:75:06:0f:ea:93:1c:87:54:d1:1f:09:69:a0:94:53:f9:
         4a:96:3e:77:94:2a:e8:1d:10:de:7c:a1:0b:8d:60:25:b1:67:
         43:4a:33:ad:66:ce:5e:00:98:c2:91:53:1a:cf:50:ac:0c:8f:
         4c:5b:90:92:cc:39:2f:59:b2:95:ed:98:73:c8:bf:b6:ee:5a:
         fd:be:96:9a:59:24:fa:d2:ca:a4:6a:26:80:b1:25:0e:15:b9:
         8f:9a:d8:c1:04:02:d8:b5:53:04:5b:d3:9a:78:c0:7e:05:3b:
         c5:9b:5c:65:19:a5:ca:20:ca:01:ee:c8:2f:96:9f:50:8e:42:
         5d:9b:98:da:b3:ac:38:84:c5:27:62:5a:b5:f9:1d:a3:fc:10:
         f6:1f:ca:9d
-----BEGIN CERTIFICATE-----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