Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NB5rlLt8nmkSTliVeN7WFbdqpt8.roa
File:                     NB5rlLt8nmkSTliVeN7WFbdqpt8.roa (raw, json)
Hash identifier:          RpFtCIV9xlWm2AAw/xS30rWaiBHv2T1hPBqfpHtb+q0=
Subject key identifier:   34:1E:6B:94:BB:7C:9E:69:12:4E:58:95:78:DE:D6:15:B7:6A:A6:DF
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185A0C0FC92956315AFAE562B5B7D60CCBB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NB5rlLt8nmkSTliVeN7WFbdqpt8.roa
Signing time:             Wed 11 Jan 2023 12:14:40 +0000
ROA not before:           Wed 11 Jan 2023 12:14:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0e:b107:1870::/48 maxlen: 48
                          2a0e:b107:9f4::/48 maxlen: 48
                          2a0e:b107:1b9e::/48 maxlen: 48
                          2a0e:b107:5d0::/44 maxlen: 48
                          2a0e:b107:660::/44 maxlen: 48
                          2a0e:b107:5e0::/44 maxlen: 48
                          2a0e:97c0:750::/48 maxlen: 48
                          2a0e:b107:900::/44 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a0e:97c0:736::/48 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a0e:b102:12f::/48 maxlen: 48
                          2a0e:97c0:76f::/48 maxlen: 48
                          2a0e:97c0:73f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a0:c0:fc:92:95:63:15:af:ae:56:2b:5b:7d:60:cc:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 11 12:14:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=341e6b94bb7c9e69124e589578ded615b76aa6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d2:fa:d9:61:77:80:fa:69:89:7c:f7:1c:e5:
                    5c:8a:1e:89:07:fc:e9:e8:07:12:c6:cf:de:ed:3a:
                    20:55:6e:23:dc:bc:2b:fc:24:62:75:c3:69:44:d9:
                    40:1b:ab:53:e0:ac:41:56:5a:e8:67:20:d7:f9:d5:
                    d1:42:17:e8:fc:f0:34:ae:75:64:52:b2:2e:88:b5:
                    d2:e2:93:db:88:34:7e:35:da:c4:b0:0c:02:ca:17:
                    65:1f:fd:ee:c4:6b:43:dd:4e:78:70:ae:d0:f0:ca:
                    04:22:68:52:15:71:99:44:0f:ee:a9:d7:80:01:39:
                    c8:de:5d:5f:18:57:a3:f2:c7:fe:c9:29:a2:6e:18:
                    33:20:ab:28:4e:14:35:75:19:f2:42:c0:53:e1:42:
                    e7:29:ed:e5:86:53:77:ac:e2:c3:9e:88:5c:46:a3:
                    aa:ab:6a:9f:51:9d:5b:ad:c4:bd:5e:15:c4:e0:9d:
                    ec:d1:a9:58:8a:e3:96:c2:2c:c0:cf:aa:88:10:4f:
                    2e:72:2a:eb:da:01:99:24:40:98:c4:a1:af:b4:c8:
                    93:0b:5a:f9:c7:ea:55:fb:be:a6:03:a9:af:55:83:
                    a1:3e:32:1f:43:41:cc:60:1e:ab:e9:39:63:27:ee:
                    32:b4:43:90:15:6a:6e:d0:5c:8a:01:6f:7c:7a:bf:
                    87:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1E:6B:94:BB:7C:9E:69:12:4E:58:95:78:DE:D6:15:B7:6A:A6:DF
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NB5rlLt8nmkSTliVeN7WFbdqpt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:736::/48
                  2a0e:97c0:73f::/48
                  2a0e:97c0:750::/48
                  2a0e:97c0:76f::/48
                  2a0e:b102:12f::/48
                  2a0e:b107:5d0::-2a0e:b107:5ef:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:660::/44
                  2a0e:b107:900::/44
                  2a0e:b107:9f4::/48
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48
                  2a0e:b107:1b9e::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:44:06:35:2a:fd:ca:a9:cf:db:07:6e:1b:83:f9:1f:7b:
         c1:0f:d8:d2:5b:cc:c4:ee:5d:ca:c8:4d:11:7a:35:24:ba:50:
         79:59:6b:77:79:8d:6a:7f:23:81:a8:ff:1b:bc:c9:94:63:62:
         37:4b:a3:47:72:c0:e5:0e:8c:40:61:1d:68:b6:8b:fb:c0:0b:
         98:20:6b:d2:d6:c3:87:74:f3:21:b4:35:8a:e1:bc:b2:d6:ad:
         78:68:7e:0b:af:10:b9:09:b1:f7:57:0a:83:d9:e6:68:13:fd:
         3a:ca:e1:bd:c9:a3:3c:f4:c5:76:22:44:37:ad:9f:10:2f:94:
         df:8a:cb:3a:49:ea:10:78:75:2c:b7:77:10:ac:7d:76:d5:ce:
         8a:cd:3c:93:9d:2f:bb:21:7d:02:e1:db:c5:c6:15:47:54:de:
         2b:39:ea:3e:0c:39:39:90:84:cd:2f:94:1c:0d:ae:a7:be:a2:
         8b:db:fe:72:56:26:c7:1e:24:f5:91:57:aa:b5:6a:0b:d3:e4:
         c2:fe:6c:ec:5a:1a:f0:7c:12:78:0e:2b:04:65:b3:3e:7a:3e:
         76:aa:72:92:77:30:4a:f1:a4:18:97:ad:e1:fa:97:3a:88:bd:
         c1:ed:24:87:63:99:ae:cc:a8:8e:50:35:dc:ab:5f:4a:15:ec:
         5a:fe:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----