Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SbyEHWc_o7AreG1i5rBFa9NOlC0.roa
File:                     SbyEHWc_o7AreG1i5rBFa9NOlC0.roa (raw, json)
Hash identifier:          lmWE9IQwUWfmCiGEzB3ssKwBBDRn64ttzehAkYiupHM=
Subject key identifier:   49:BC:84:1D:67:3F:A3:B0:2B:78:6D:62:E6:B0:45:6B:D3:4E:94:2D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E78F49817B08EC12F51AA02A46B7B3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SbyEHWc_o7AreG1i5rBFa9NOlC0.roa
Signing time:             Mon 02 Jan 2023 05:15:01 +0000
ROA not before:           Mon 02 Jan 2023 05:15:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134478
IP address blocks:        2a0e:b107:ea2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:8f:49:81:7b:08:ec:12:f5:1a:a0:2a:46:b7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49bc841d673fa3b02b786d62e6b0456bd34e942d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:2b:05:f2:51:c0:6b:27:bf:23:2c:5e:53:
                    1d:08:70:9b:81:f3:9c:a8:c4:85:e6:e2:ef:09:f3:
                    0a:23:8f:a0:37:82:dd:58:25:5c:ab:2f:48:86:3f:
                    59:b3:50:19:18:46:51:7f:ce:04:b4:e1:de:0a:3a:
                    67:b9:e4:e9:06:1c:66:be:6a:dc:98:63:8f:41:7f:
                    3d:17:37:e7:96:1f:bb:0a:b2:1a:4d:23:b2:bd:13:
                    dc:23:49:e8:dc:40:8c:70:03:3b:35:05:2b:62:76:
                    f3:61:89:f1:ff:50:75:61:10:4b:c6:74:9d:3a:2e:
                    2a:6e:9e:c5:6e:d1:0e:0b:20:cc:91:6f:f1:1c:9e:
                    54:c0:dc:8e:39:16:2b:c4:8b:23:7e:bb:9b:8b:ab:
                    21:ca:fd:85:b5:89:ad:02:98:6c:88:44:b8:6f:a4:
                    ae:6a:49:4d:86:c4:2e:f2:61:ec:a5:98:cc:48:ba:
                    02:95:5f:56:ab:7a:10:41:40:c8:67:83:de:9a:f8:
                    ef:e9:95:00:e0:a0:00:14:d9:1a:42:2a:c5:19:ac:
                    37:04:a6:41:bb:18:bb:ec:8e:80:89:90:ba:f0:6a:
                    f5:69:e9:a0:62:01:74:60:02:7e:b5:7a:84:9e:f3:
                    ed:d1:4c:d2:fe:6e:5d:dd:17:dc:5e:66:a5:a2:ae:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BC:84:1D:67:3F:A3:B0:2B:78:6D:62:E6:B0:45:6B:D3:4E:94:2D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SbyEHWc_o7AreG1i5rBFa9NOlC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:ea2::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:c1:bc:c5:e5:f0:06:40:41:cb:69:39:6e:50:37:df:50:20:
         b5:89:19:a4:05:56:03:54:24:1f:4d:98:64:03:ac:ad:ee:13:
         b6:c4:a3:57:ed:ec:5e:5e:8f:7c:fa:fa:29:d0:5b:64:8a:9c:
         5b:1b:37:bd:13:44:04:b5:36:74:c1:84:76:f8:d2:4e:2a:7a:
         2a:19:00:a1:32:6f:83:94:01:65:57:46:7f:fd:9f:3a:49:57:
         58:dd:8d:ce:f1:9c:e5:13:8c:3a:06:f2:04:a1:e4:3d:c2:b2:
         de:63:f1:1d:e5:e1:57:46:02:c7:ba:ea:be:c1:8d:c7:87:52:
         47:14:c2:fe:77:af:6b:67:88:a4:24:f3:86:b0:bd:91:4d:4f:
         5a:f9:b4:3d:8a:6a:79:20:e6:c5:38:a9:72:aa:8d:d0:2d:c6:
         aa:af:47:4e:fc:77:8b:cb:ac:3e:2e:2b:ae:bc:1a:07:37:39:
         48:b9:e8:c1:b4:9e:33:20:ab:0f:0f:1d:dd:55:ec:b9:10:9b:
         88:30:5b:b7:02:b8:7a:69:71:53:d9:ec:e4:b7:67:f1:66:3e:
         58:35:11:c2:1e:f6:c7:52:f7:03:15:c9:b7:c2:7b:81:71:16:
         05:6e:36:d5:cf:68:3f:97:ce:5e:d0:af:c3:76:32:2b:f8:ff:
         b6:9c:a9:4b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw549JgXsI7BL1GqAqRrezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWJjODQxZDY3M2ZhM2IwMmI3ODZkNjJlNmIwNDU2YmQzNGU5NDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9krBfJRwGsnvyMsXlMdCHCbgfOc
qMSF5uLvCfMKI4+gN4LdWCVcqy9Ihj9Zs1AZGEZRf84EtOHeCjpnueTpBhxmvmrc
mGOPQX89Fzfnlh+7CrIaTSOyvRPcI0no3ECMcAM7NQUrYnbzYYnx/1B1YRBLxnSd
Oi4qbp7FbtEOCyDMkW/xHJ5UwNyOORYrxIsjfrubi6shyv2FtYmtAphsiES4b6Su
aklNhsQu8mHspZjMSLoClV9Wq3oQQUDIZ4Pemvjv6ZUA4KAAFNkaQirFGaw3BKZB
uxi77I6AiZC68Gr1aemgYgF0YAJ+tXqEnvPt0UzS/m5d3RfcXmaloq6CsQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEm8hB1nP6OwK3htYuawRWvTTpQtMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvU2J5RUhXY19vN0FyZUcxaTVyQkZhOU5PbEMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBw6i
MA0GCSqGSIb3DQEBCwUAA4IBAQASwbzF5fAGQEHLaTluUDffUCC1iRmkBVYDVCQf
TZhkA6yt7hO2xKNX7exeXo98+vop0FtkipxbGze9E0QEtTZ0wYR2+NJOKnoqGQCh
Mm+DlAFlV0Z//Z86SVdY3Y3O8ZzlE4w6BvIEoeQ9wrLeY/Ed5eFXRgLHuuq+wY3H
h1JHFML+d69rZ4ikJPOGsL2RTU9a+bQ9imp5IObFOKlyqo3QLcaqr0dO/HeLy6w+
LiuuvBoHNzlIuejBtJ4zIKsPDx3dVey5EJuIMFu3Arh6aXFT2ezkt2fxZj5YNRHC
HvbHUvcDFcm3wnuBcRYFbjbVz2g/l85e0K/DdjIr+P+2nKlL
-----END CERTIFICATE-----