Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PaPEZKI2nCnXGBs1Ql25OeZXD9g.roa
File:                     PaPEZKI2nCnXGBs1Ql25OeZXD9g.roa (raw, json)
Hash identifier:          oJLav1SbbRM9+PAczvqqA/BN6xajgE0RZxXZm1APrQo=
Subject key identifier:   3D:A3:C4:64:A2:36:9C:29:D7:18:1B:35:42:5D:B9:39:E6:57:0F:D8
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E81496666733C6C92C8737B4BEF89E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PaPEZKI2nCnXGBs1Ql25OeZXD9g.roa
Signing time:             Mon 02 Jan 2023 05:15:35 +0000
ROA not before:           Mon 02 Jan 2023 05:15:35 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212196
IP address blocks:        2a0e:b107:ec0::/48 maxlen: 48
                          2a0e:b107:ec0::/44 maxlen: 48
                          2a0e:b107:ec2::/48 maxlen: 48
                          2a0e:b107:ecf::/48 maxlen: 48
                          2a0e:b107:ec1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:14:96:66:67:33:c6:c9:2c:87:37:b4:be:f8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3da3c464a2369c29d7181b35425db939e6570fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:05:4e:ba:3d:d6:cd:07:76:d9:6e:9c:6e:ee:
                    0c:6e:a9:bd:b5:eb:47:f2:27:79:ae:67:c0:cf:75:
                    ef:03:53:26:ac:e4:1c:70:2a:4b:16:93:be:5b:f4:
                    97:69:f5:1f:f8:91:4b:45:38:70:4a:c2:67:50:93:
                    68:9c:bd:cc:cf:0e:b3:42:20:29:eb:7f:ec:05:9a:
                    75:0f:3f:2c:68:fa:15:43:d5:fa:c3:c0:46:f5:7c:
                    25:44:17:21:a8:89:12:f2:c1:ee:e3:80:b7:4a:ee:
                    42:ed:7d:4c:46:96:1d:e3:e1:1e:22:bc:fc:1b:12:
                    02:d7:c3:71:03:d8:10:9e:19:27:57:f5:4c:2f:48:
                    17:d3:81:02:6d:cb:40:8c:25:8a:85:a8:82:22:eb:
                    7b:6f:53:f5:fc:db:c3:ee:fe:dd:14:1d:cc:70:63:
                    c5:e9:6b:a8:23:fc:3b:e8:ef:02:ff:a9:9b:26:2e:
                    16:48:82:68:1f:81:fe:2e:66:dd:7e:80:7e:42:b1:
                    1e:53:cb:d3:bf:ae:4a:10:bd:b0:ae:ef:99:b2:57:
                    e8:30:f2:d5:6b:ca:17:22:49:78:9f:ce:79:32:ad:
                    d7:10:cc:cb:13:0b:dc:ed:0f:0c:1a:cf:7a:af:a1:
                    18:72:ac:9d:de:d2:88:1a:69:4a:e6:b6:8a:72:a3:
                    11:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A3:C4:64:A2:36:9C:29:D7:18:1B:35:42:5D:B9:39:E6:57:0F:D8
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PaPEZKI2nCnXGBs1Ql25OeZXD9g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:ec0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4d:e8:57:f4:94:27:c0:06:6d:5f:e0:c6:8f:df:1e:c2:c8:67:
         90:95:41:f5:a7:53:1c:8b:b2:b3:4f:35:88:a6:58:11:2b:0d:
         eb:ce:da:95:46:f2:94:f0:12:eb:b8:09:43:00:bf:60:ca:3f:
         9f:21:5f:c6:92:b3:da:25:9a:07:de:29:5c:71:3a:66:fb:88:
         bb:08:a3:62:ae:33:f5:d4:0e:6f:90:01:7d:3b:62:47:ad:94:
         46:a8:9f:fb:0b:df:be:03:09:7e:88:e4:fe:bf:08:f3:59:5a:
         a3:c2:77:9e:53:f3:c6:8a:85:ae:dd:9e:f5:68:31:ae:85:1c:
         ee:6f:41:e2:11:ac:6d:99:96:37:d9:04:e7:af:a5:81:1e:17:
         ba:81:ca:30:f8:3f:5f:b8:4d:48:33:eb:76:f1:7b:66:9f:e3:
         0f:3c:c7:7d:3d:29:70:8a:fa:30:57:0e:a5:9b:47:45:67:4c:
         60:8d:fb:91:14:14:28:fc:f6:32:d5:e7:2b:3e:5d:7b:cf:90:
         eb:81:be:06:7e:38:9e:ee:c8:70:ae:42:dd:14:87:9d:9d:e7:
         f6:e3:5a:ae:dc:db:f7:94:69:bb:15:50:97:91:dd:3c:8f:3b:
         dc:43:eb:59:08:bc:60:d2:cd:b1:49:13:7b:2b:eb:16:64:14:
         8c:41:05:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----