Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MYEZJ0XhwNFx22Val7c2QHnqHno.roa
File:                     MYEZJ0XhwNFx22Val7c2QHnqHno.roa (raw, json)
Hash identifier:          L5j4egxzI711AwNNecFwgWsx5eOPwY/3HijhU4FoUl4=
Subject key identifier:   31:81:19:27:45:E1:C0:D1:71:DB:65:5A:97:B7:36:40:79:EA:1E:7A
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185C35A66DEA621708C49C1DDD181838546
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MYEZJ0XhwNFx22Val7c2QHnqHno.roa
Signing time:             Wed 18 Jan 2023 05:29:19 +0000
ROA not before:           Wed 18 Jan 2023 05:29:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41732
IP address blocks:        2a0e:b107:1400::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c3:5a:66:de:a6:21:70:8c:49:c1:dd:d1:81:83:85:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 18 05:29:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3181192745e1c0d171db655a97b7364079ea1e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:df:7d:6b:21:03:00:a7:0e:6e:fb:d1:c9:8a:
                    c5:f4:2d:76:90:60:cf:1c:f7:8c:9b:59:11:61:86:
                    3a:6d:4b:3f:a3:86:ea:b8:90:b0:03:10:26:25:08:
                    7e:4f:dd:4d:f0:6c:5e:19:bc:bd:3e:43:b7:6c:61:
                    fb:d9:ce:00:0f:a7:e2:21:2b:d3:80:b7:d4:f7:f9:
                    47:88:90:d1:d5:95:62:19:8f:44:48:f5:d1:49:b4:
                    c8:b7:c6:b6:40:88:fd:00:c3:89:1e:df:2b:45:69:
                    fd:18:96:73:b3:f8:6f:d8:3a:35:24:ea:e7:11:c4:
                    9b:e8:e4:34:93:64:be:2f:d2:f5:cb:6a:ba:39:92:
                    aa:e9:5f:1e:59:30:0a:31:a5:17:74:52:fb:6b:2a:
                    fc:a1:b2:0a:90:ca:4b:41:7c:c2:c1:63:e3:2c:86:
                    bf:9b:ee:a5:34:26:3e:1f:18:18:9c:f4:00:e8:cf:
                    e2:d0:a7:97:4b:0d:a5:ac:cd:21:d7:33:72:7c:be:
                    91:98:4a:b0:44:07:4e:73:9e:93:97:bf:8c:e8:c1:
                    ec:35:72:db:47:16:41:4e:93:98:f8:24:08:fb:c3:
                    6f:58:93:d5:3f:5d:c4:90:26:1f:42:4a:6e:c6:ca:
                    a2:21:18:7c:76:2c:7b:b5:95:26:3d:51:c1:ee:f6:
                    9d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:81:19:27:45:E1:C0:D1:71:DB:65:5A:97:B7:36:40:79:EA:1E:7A
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MYEZJ0XhwNFx22Val7c2QHnqHno.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1400::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:14:e7:a4:47:d0:3a:f4:d3:44:96:80:ea:7d:73:36:8a:
         47:7b:89:9f:cb:2c:e7:78:ad:df:7c:83:f5:25:5a:a2:ea:99:
         f4:7e:92:f1:dd:de:ae:3a:83:41:15:9b:00:45:83:ee:e2:b0:
         f7:c5:08:f3:58:0f:f0:02:23:5a:09:12:6f:c4:80:a0:d3:ee:
         c6:bb:0e:5f:89:44:a5:2f:4f:6d:84:38:0d:2e:e0:f3:96:d9:
         69:68:b1:bd:5d:0a:7e:25:ee:0d:40:a0:5f:fd:d0:0d:1b:d0:
         72:aa:1f:3d:7b:e1:f8:e0:d0:cd:82:fc:a7:6b:bc:74:fb:75:
         36:2b:b0:ee:da:be:f0:1d:78:01:d5:bb:b0:7e:dc:08:f2:d0:
         5e:b5:77:89:98:17:82:6f:cc:ce:6a:70:95:bf:a4:8a:33:6b:
         c2:55:e2:e3:86:88:ae:25:94:69:17:7d:c0:1b:fa:0b:16:b2:
         8a:c5:00:57:00:fe:ea:36:f6:48:50:af:c1:5a:90:f6:46:93:
         7d:ee:03:17:fb:2a:fe:5f:05:5f:8d:af:bf:f1:c9:59:28:10:
         20:fc:c0:2d:8d:56:9a:64:e3:1c:c4:92:39:78:b4:26:76:e4:
         81:27:07:06:2c:17:b5:45:57:9c:21:f3:74:34:f1:6e:d4:43:
         96:ee:66:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----