Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N9QiVilpVDEWKZRw-0pdgxKCQhw.roa
File:                     N9QiVilpVDEWKZRw-0pdgxKCQhw.roa (raw, json)
Hash identifier:          54FLSpWMFMgRT1gln7hMDAqhlZM+kwhx3sywImNwj2M=
Subject key identifier:   37:D4:22:56:29:69:54:31:16:29:94:70:FB:4A:5D:83:12:82:42:1C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185717098AA529F92587F7EF523B9FB86BC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N9QiVilpVDEWKZRw-0pdgxKCQhw.roa
Signing time:             Mon 02 Jan 2023 07:44:42 +0000
ROA not before:           Mon 02 Jan 2023 07:44:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202827
IP address blocks:        2a0e:b107:1ce1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:70:98:aa:52:9f:92:58:7f:7e:f5:23:b9:fb:86:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 07:44:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37d422562969543116299470fb4a5d831282421c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:a9:20:98:99:11:4a:7f:88:be:c4:ce:d8:
                    5e:f4:81:2e:f1:9f:94:a5:5d:d3:24:d7:3c:35:c3:
                    63:cd:e5:65:16:89:b4:b1:0d:ce:7a:90:6b:d0:14:
                    16:81:85:4b:c9:09:91:68:70:40:c5:c4:82:c4:6d:
                    92:3c:9e:64:81:86:b4:8b:34:7d:f2:c9:8c:5c:c2:
                    6b:0e:ae:6d:b1:48:95:09:c4:e0:87:fa:6e:e2:69:
                    69:82:5e:a5:61:b4:2c:fe:2b:0f:84:96:cb:ff:4c:
                    b6:58:2e:d4:40:61:92:7b:d0:a3:06:e7:ec:96:52:
                    ab:d7:94:60:06:3b:3b:c6:23:5b:66:ca:8c:4e:0a:
                    8c:ba:a6:3a:39:6d:19:5d:1b:19:f0:2b:56:cc:bb:
                    c2:3f:ec:63:83:10:31:fc:7d:df:4b:88:06:02:01:
                    67:5e:4d:8c:f2:85:fc:a5:bf:c2:1c:2f:a2:8b:a9:
                    db:b8:b5:ab:ea:95:95:15:e1:e3:31:0e:6d:8c:a7:
                    39:7e:ea:48:9a:76:82:e7:08:29:7e:1f:5e:14:f6:
                    0f:8a:a3:f3:99:ff:a2:ab:4d:ee:70:f4:9c:21:f2:
                    cf:43:55:8d:02:a6:47:97:26:8c:6e:b4:bd:ec:8c:
                    de:72:de:6c:74:a9:64:5f:03:83:bd:b9:d3:2f:ae:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D4:22:56:29:69:54:31:16:29:94:70:FB:4A:5D:83:12:82:42:1C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N9QiVilpVDEWKZRw-0pdgxKCQhw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1ce1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:f9:af:4a:f0:d9:b4:ca:2b:45:07:ad:84:00:4e:44:27:01:
         19:e9:12:1d:27:22:5e:ec:31:d4:c3:bc:9b:8c:a6:98:4c:6e:
         39:33:e7:57:32:37:76:ab:58:51:33:70:bd:01:6b:46:f3:e7:
         4c:29:29:fd:f3:22:b3:fb:74:b1:00:3f:f0:d7:78:80:40:f0:
         75:38:ae:62:3b:ca:86:0f:a2:5b:cb:73:ba:1e:08:86:a1:60:
         02:ed:4e:7f:73:82:78:ec:50:2e:06:c5:34:a6:1b:1e:d6:bc:
         ab:32:0e:10:51:8f:21:2d:5f:e3:2b:6c:e4:ff:83:3a:62:7f:
         ad:69:1c:ce:b1:a9:4f:d8:de:b0:26:24:c4:ad:ba:0c:14:10:
         09:73:39:c3:85:53:d4:17:41:2c:d4:45:18:a9:65:5f:08:2e:
         ff:d1:03:1c:bc:64:a6:55:49:c0:9e:ed:c3:0b:53:5e:08:bf:
         20:62:da:20:7e:eb:c3:17:ce:09:46:0b:85:cf:ef:e2:8b:58:
         17:ab:a8:67:8d:96:38:56:24:40:55:1e:37:86:10:46:d2:41:
         10:24:68:3f:01:85:84:f8:e2:41:f5:6c:c0:42:fc:21:8c:f6:
         66:e3:4c:e3:4b:3c:0e:f7:66:0f:c9:18:cc:3b:63:0d:3e:f7:
         36:45:ec:6c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxcJiqUp+SWH9+9SO5+4a8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDc0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2Q0MjI1NjI5Njk1NDMxMTYyOTk0NzBmYjRhNWQ4MzEyODI0MjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBypIJiZEUp/iL7Ezthe9IEu8Z+U
pV3TJNc8NcNjzeVlFom0sQ3OepBr0BQWgYVLyQmRaHBAxcSCxG2SPJ5kgYa0izR9
8smMXMJrDq5tsUiVCcTgh/pu4mlpgl6lYbQs/isPhJbL/0y2WC7UQGGSe9CjBufs
llKr15RgBjs7xiNbZsqMTgqMuqY6OW0ZXRsZ8CtWzLvCP+xjgxAx/H3fS4gGAgFn
Xk2M8oX8pb/CHC+ii6nbuLWr6pWVFeHjMQ5tjKc5fupImnaC5wgpfh9eFPYPiqPz
mf+iq03ucPScIfLPQ1WNAqZHlyaMbrS97Izect5sdKlkXwODvbnTL67GLwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDfUIlYpaVQxFimUcPtKXYMSgkIcMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTjlRaVZpbHBWREVXS1pSdy0wcGRneEtDUWh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxzh
MA0GCSqGSIb3DQEBCwUAA4IBAQCn+a9K8Nm0yitFB62EAE5EJwEZ6RIdJyJe7DHU
w7ybjKaYTG45M+dXMjd2q1hRM3C9AWtG8+dMKSn98yKz+3SxAD/w13iAQPB1OK5i
O8qGD6Jby3O6HgiGoWAC7U5/c4J47FAuBsU0phse1ryrMg4QUY8hLV/jK2zk/4M6
Yn+taRzOsalP2N6wJiTErboMFBAJcznDhVPUF0Es1EUYqWVfCC7/0QMcvGSmVUnA
nu3DC1NeCL8gYtogfuvDF84JRguFz+/ii1gXq6hnjZY4ViRAVR43hhBG0kEQJGg/
AYWE+OJB9WzAQvwhjPZm40zjSzwO92YPyRjMO2MNPvc2Rexs
-----END CERTIFICATE-----