Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SFUZupqt97k7_2Mrh7srs0ScoAc.roa
File:                     SFUZupqt97k7_2Mrh7srs0ScoAc.roa (raw, json)
Hash identifier:          XXLeRQhuc7crqmxehgCriYpVX30A+EomRXDnSOgkSIo=
Subject key identifier:   48:55:19:BA:9A:AD:F7:B9:3B:FF:63:2B:87:BB:2B:B3:44:9C:A0:07
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01865DBAF5827D43EEA0EDEAE43A47BE5F91
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SFUZupqt97k7_2Mrh7srs0ScoAc.roa
Signing time:             Fri 17 Feb 2023 04:56:18 +0000
ROA not before:           Fri 17 Feb 2023 04:56:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41732
IP address blocks:        2a0e:b107:9d0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 18 Feb 2023 16:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5d:ba:f5:82:7d:43:ee:a0:ed:ea:e4:3a:47:be:5f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 17 04:56:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=485519ba9aadf7b93bff632b87bb2bb3449ca007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9c:32:36:29:ad:91:38:37:c1:f8:fb:83:b2:
                    0c:d9:74:81:bc:7d:a3:1a:90:dc:f1:99:d5:ba:20:
                    b0:54:ad:64:3a:28:7c:45:48:97:00:f0:dc:00:00:
                    bf:ea:2a:e3:fa:ac:42:93:48:79:14:f8:eb:38:95:
                    ae:d7:f7:94:ec:5c:56:a4:40:8d:a0:2b:a6:87:26:
                    63:57:01:89:0a:dc:1a:7f:d9:27:ee:05:a7:4b:b8:
                    f0:36:20:62:63:d4:b7:13:c1:0d:5b:8f:f5:8a:a9:
                    f7:86:19:4f:5e:1c:b7:48:5b:ac:c3:b7:d0:ab:34:
                    91:e2:3c:c1:a7:f2:4a:d5:3f:e0:b2:d4:bf:7c:0f:
                    f4:44:cc:ee:5f:0e:67:67:5f:4d:e0:34:a4:73:0c:
                    01:94:26:c2:be:91:ed:95:cd:47:d8:a3:19:77:ce:
                    fc:9e:90:45:c7:60:b8:51:e8:9f:2c:69:fe:14:78:
                    21:17:e8:2e:f2:8f:b0:95:bc:fc:d9:7d:10:01:9a:
                    09:1a:02:81:b3:9d:fd:d2:7c:9f:11:ca:3d:75:f2:
                    17:48:c7:e0:42:78:26:32:c0:5d:53:b1:bf:6c:30:
                    33:3c:96:b5:5b:8f:14:80:b6:20:fc:55:d1:bf:ee:
                    4e:bb:a2:03:ec:49:9d:28:0f:12:b7:e8:98:39:e9:
                    7d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:55:19:BA:9A:AD:F7:B9:3B:FF:63:2B:87:BB:2B:B3:44:9C:A0:07
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SFUZupqt97k7_2Mrh7srs0ScoAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:9d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:28:04:ae:96:ee:cf:9c:6e:b3:ba:e2:d1:3a:60:59:b6:
         1d:8f:c7:2a:24:e1:38:3c:3a:f1:2b:91:74:38:51:9d:34:1d:
         fa:85:d8:79:d7:44:d4:43:1a:70:46:32:22:c0:f5:43:63:0c:
         da:a0:b2:ff:ce:1b:b5:e5:11:53:9e:4e:cd:9c:c0:fc:e0:46:
         dd:18:e5:23:ae:78:1b:54:84:22:82:c0:f7:70:f4:27:70:85:
         62:e5:9e:3f:dc:3b:fc:18:21:c6:bf:83:68:db:69:34:da:f6:
         eb:3f:ba:90:9a:f1:15:9b:1f:72:39:0b:28:e9:68:2d:81:1d:
         60:6b:98:dd:38:ba:d7:aa:35:4c:30:80:af:57:47:85:86:bc:
         da:c4:b9:d8:e2:4f:a7:7d:1b:06:f3:d2:2a:a9:8f:62:e5:b4:
         93:f5:b8:59:ac:9d:b6:c4:83:ce:88:14:66:91:e1:64:d1:8b:
         1b:20:c0:f6:ab:52:ec:6e:bd:b3:15:22:47:ed:80:1a:44:17:
         b5:c3:3c:ba:51:59:da:2b:94:fd:22:52:b2:7c:61:75:15:d2:
         fb:40:24:b4:b1:1a:b1:99:5c:3b:c9:1a:5a:f3:92:20:91:c7:
         9e:09:a9:c5:8d:c1:8d:89:c2:aa:90:0a:72:96:72:43:94:c8:
         4d:51:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----