Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MsoeBINJPGy9OTmwdCOY3D9Ib-A.roa
File:                     MsoeBINJPGy9OTmwdCOY3D9Ib-A.roa (raw, json)
Hash identifier:          5fAP7cxjBZTBiLYpAeqVjUzSFQDSSG61EWQbRdT2M/8=
Subject key identifier:   32:CA:1E:04:83:49:3C:6C:BD:39:39:B0:74:23:98:DC:3F:48:6F:E0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187E37A1DBD3E92E463BE8EAB224CC923C3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MsoeBINJPGy9OTmwdCOY3D9Ib-A.roa
Signing time:             Wed 03 May 2023 21:17:23 +0000
ROA not before:           Wed 03 May 2023 21:17:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198747
IP address blocks:        2a0e:97c0:380::/48 maxlen: 48
                          2a0e:97c0:381::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e3:7a:1d:bd:3e:92:e4:63:be:8e:ab:22:4c:c9:23:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May  3 21:17:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=32ca1e0483493c6cbd3939b0742398dc3f486fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:84:f8:d7:06:b7:3e:ce:90:c3:16:b2:60:
                    dc:71:f2:7a:98:a0:15:15:31:bb:5c:a5:03:93:1e:
                    50:78:18:7b:23:e7:8b:45:38:e2:84:3a:93:eb:42:
                    e4:e1:c5:cb:e2:81:81:2a:21:af:67:5a:1d:57:66:
                    fc:da:55:9d:69:d9:84:45:61:76:b8:1a:82:48:a8:
                    d5:23:62:83:42:79:c1:c3:a5:27:ed:47:47:53:f1:
                    d7:89:1a:1d:37:03:52:38:1a:37:ca:d7:22:74:da:
                    2a:b2:c1:30:95:e4:12:9d:8f:37:89:28:8d:eb:c3:
                    2f:e4:cd:c3:f5:23:30:b0:fd:62:24:cc:d1:fc:90:
                    62:c3:b6:39:a5:4c:ed:30:ec:8b:a2:a2:08:c6:91:
                    3f:cf:92:05:98:65:a7:f4:d2:19:05:db:44:06:c6:
                    11:90:dd:e8:32:95:0b:65:72:b8:da:a1:6e:ba:4e:
                    a8:2a:9f:37:73:50:2b:fe:47:26:7f:65:fd:82:06:
                    a8:6e:e4:6e:43:4a:ae:89:20:cf:6d:8a:cf:c8:63:
                    88:7a:85:52:05:83:07:ae:e3:8c:22:f0:6b:32:94:
                    cd:1f:9e:fc:25:f8:81:fa:de:75:89:28:76:4d:85:
                    3d:e0:9a:7b:1e:95:16:f6:74:e0:83:33:0c:94:d6:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CA:1E:04:83:49:3C:6C:BD:39:39:B0:74:23:98:DC:3F:48:6F:E0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MsoeBINJPGy9OTmwdCOY3D9Ib-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:380::/47

    Signature Algorithm: sha256WithRSAEncryption
         68:ad:cf:10:d1:ce:79:55:a3:85:07:4d:96:04:dd:86:83:06:
         29:13:2b:3a:0c:45:d1:21:ac:46:80:96:cc:54:0d:b7:1f:4f:
         dd:e3:0c:da:09:e1:21:9f:4c:5b:4c:5d:8a:83:9c:77:27:e5:
         d6:49:28:85:2a:ac:ad:7d:c5:0d:82:f6:d1:b5:98:8c:ad:48:
         dc:5e:8d:34:51:3e:43:c7:d6:6f:f4:63:20:0d:17:99:c9:31:
         f8:5c:de:ef:7b:97:84:78:ce:75:c4:55:5e:f8:24:3b:1c:05:
         2f:dd:4c:d0:5e:62:41:8c:93:b9:ed:95:a6:ce:f0:a1:b7:ca:
         09:c4:33:06:86:87:9c:7d:62:65:75:0b:2a:9b:ad:9a:09:e0:
         ed:09:f3:06:2a:cc:69:23:37:91:3c:dd:e4:55:28:41:3b:be:
         80:09:82:8c:f8:53:5a:0f:8e:b6:11:69:94:89:24:35:bd:f3:
         a1:38:b9:8e:b3:d9:e1:40:f8:2f:a9:93:18:c7:f5:92:cc:e8:
         be:02:f7:27:ce:e5:52:47:35:35:32:cd:af:ec:82:1e:a3:4d:
         16:a4:ab:c9:7f:ed:d3:f1:07:af:83:6f:79:97:33:25:4d:f8:
         c6:73:6c:7f:4c:ff:e1:ff:2a:5e:d0:83:cf:94:51:e7:8d:ab:
         df:5b:0c:33
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYfjeh29PpLkY76OqyJMySPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNTAzMjExNzIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmNhMWUwNDgzNDkzYzZjYmQzOTM5YjA3NDIzOThkYzNmNDg2ZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9eE+NcGtz7OkMMWsmDccfJ6mKAV
FTG7XKUDkx5QeBh7I+eLRTjihDqT60Lk4cXL4oGBKiGvZ1odV2b82lWdadmERWF2
uBqCSKjVI2KDQnnBw6Un7UdHU/HXiRodNwNSOBo3ytcidNoqssEwleQSnY83iSiN
68Mv5M3D9SMwsP1iJMzR/JBiw7Y5pUztMOyLoqIIxpE/z5IFmGWn9NIZBdtEBsYR
kN3oMpULZXK42qFuuk6oKp83c1Ar/kcmf2X9ggaobuRuQ0quiSDPbYrPyGOIeoVS
BYMHruOMIvBrMpTNH578JfiB+t51iSh2TYU94Jp7HpUW9nTggzMMlNZtIwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDLKHgSDSTxsvTk5sHQjmNw/SG/gMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTXNvZUJJTkpQR3k5T1Rtd2RDT1kzRDlJYi1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg6XwAOA
MA0GCSqGSIb3DQEBCwUAA4IBAQBorc8Q0c55VaOFB02WBN2GgwYpEys6DEXRIaxG
gJbMVA23H0/d4wzaCeEhn0xbTF2Kg5x3J+XWSSiFKqytfcUNgvbRtZiMrUjcXo00
UT5Dx9Zv9GMgDReZyTH4XN7ve5eEeM51xFVe+CQ7HAUv3UzQXmJBjJO57ZWmzvCh
t8oJxDMGhoecfWJldQsqm62aCeDtCfMGKsxpIzeRPN3kVShBO76ACYKM+FNaD462
EWmUiSQ1vfOhOLmOs9nhQPgvqZMYx/WSzOi+AvcnzuVSRzU1Ms2v7IIeo00WpKvJ
f+3T8Qevg295lzMlTfjGc2x/TP/h/ype0IPPlFHnjavfWwwz
-----END CERTIFICATE-----