Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TJO-XoBWkTNJFkbXqtCD4Rz2_Mo.roa
File:                     TJO-XoBWkTNJFkbXqtCD4Rz2_Mo.roa (raw, json)
Hash identifier:          naObA2TUl1zSjz8hnwqJIIay0qtMGI3Mfjzvsp2j5nI=
Subject key identifier:   4C:93:BE:5E:80:56:91:33:49:16:46:D7:AA:D0:83:E1:1C:F6:FC:CA
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E79C7B95B7A8097FDEF39DEF247290
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TJO-XoBWkTNJFkbXqtCD4Rz2_Mo.roa
Signing time:             Mon 02 Jan 2023 05:15:05 +0000
ROA not before:           Mon 02 Jan 2023 05:15:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149007
IP address blocks:        2a0e:b107:1800::/44 maxlen: 48
                          2a0e:b107:1806::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:9c:7b:95:b7:a8:09:7f:de:f3:9d:ef:24:72:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c93be5e80569133491646d7aad083e11cf6fcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:43:aa:6c:16:ed:14:9b:9c:09:c4:bb:21:
                    84:d3:ae:99:aa:f7:f5:1b:80:78:48:f9:ba:ac:35:
                    63:80:12:1f:ac:4b:d9:52:0e:41:87:e5:f8:45:1b:
                    9e:83:63:46:ea:bc:22:a9:11:b0:eb:83:25:c2:9e:
                    c9:93:55:a8:a5:b0:d2:47:52:10:8f:9a:4b:99:d8:
                    b5:83:92:15:f8:69:d5:9e:83:00:2b:11:7f:f2:ed:
                    43:64:6c:13:d9:e9:06:06:29:2f:88:2a:96:ea:ae:
                    3b:72:79:bd:44:5e:b2:3a:26:e5:43:ac:1f:5a:4e:
                    59:f9:14:c2:69:27:46:60:c8:d2:2f:95:b7:fa:3c:
                    78:03:4b:3b:0c:e6:f4:33:7d:5c:ed:12:fa:88:ff:
                    fe:77:a2:20:64:c0:d5:7d:37:75:5b:cb:60:ad:ac:
                    e6:46:a3:96:5a:9a:5b:32:bf:89:9c:58:2f:57:9d:
                    f5:f2:fd:6b:ec:d2:3c:e3:d9:0b:6f:d2:da:ee:d5:
                    3a:22:1d:50:03:2b:6c:36:dc:e7:56:0a:4a:0a:ef:
                    cf:80:7b:6e:5a:0f:0e:9b:2e:fa:37:4d:0b:91:3b:
                    64:3f:72:c2:10:c7:05:e3:a3:f7:0a:33:54:c8:fd:
                    26:f3:90:ae:27:a2:a0:9a:2d:12:ac:17:26:aa:aa:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:93:BE:5E:80:56:91:33:49:16:46:D7:AA:D0:83:E1:1C:F6:FC:CA
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TJO-XoBWkTNJFkbXqtCD4Rz2_Mo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1800::/44

    Signature Algorithm: sha256WithRSAEncryption
         0c:4f:16:d4:0f:bf:f1:ee:9c:f2:9e:2e:01:3f:50:77:97:65:
         c1:0a:c7:0a:fe:bd:b4:81:41:3f:a0:b9:f0:ae:fa:27:50:75:
         38:e0:99:b5:0d:39:bb:b2:ba:53:0c:47:ad:06:eb:82:c3:f5:
         8c:ac:8f:bf:41:02:0b:43:2d:61:e8:c7:98:14:15:01:90:93:
         e4:4a:64:5c:87:e7:31:a2:d0:2a:9d:e5:39:52:a0:22:af:cd:
         f7:4b:39:e0:1b:84:39:44:65:5a:f9:da:db:c3:ca:df:c6:d9:
         cd:6f:e6:0a:f6:5a:1b:bc:ed:bd:5b:15:82:cc:6f:57:04:47:
         42:d2:0e:61:62:62:9a:53:e5:c4:0b:7e:fe:2e:79:39:4a:20:
         9c:3d:7a:58:01:bc:c3:d1:5e:79:02:d3:52:dc:b4:6c:c2:2d:
         19:64:09:e1:c8:bf:fd:7f:98:aa:43:f6:f5:74:6f:7c:b1:78:
         c8:d0:40:73:4c:76:71:d0:50:c1:64:b1:02:d7:3a:77:32:8e:
         28:15:0e:c1:7d:77:19:02:4e:09:ea:02:06:6d:26:c6:41:69:
         97:a1:5f:a2:2e:63:77:c2:7b:fc:6d:62:16:d9:ae:b6:42:fd:
         8c:60:44:4b:ba:c5:ed:1e:0d:18:e5:a6:ef:24:1c:bb:90:5e:
         d6:4b:ac:00
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw55x7lbeoCX/e853vJHKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzkzYmU1ZTgwNTY5MTMzNDkxNjQ2ZDdhYWQwODNlMTFjZjZmY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXxDqmwW7RSbnAnEuyGE066Zqvf1
G4B4SPm6rDVjgBIfrEvZUg5Bh+X4RRueg2NG6rwiqRGw64Mlwp7Jk1WopbDSR1IQ
j5pLmdi1g5IV+GnVnoMAKxF/8u1DZGwT2ekGBikviCqW6q47cnm9RF6yOiblQ6wf
Wk5Z+RTCaSdGYMjSL5W3+jx4A0s7DOb0M31c7RL6iP/+d6IgZMDVfTd1W8tgrazm
RqOWWppbMr+JnFgvV5318v1r7NI849kLb9La7tU6Ih1QAytsNtznVgpKCu/PgHtu
Wg8Omy76N00LkTtkP3LCEMcF46P3CjNUyP0m85CuJ6Kgmi0SrBcmqqp6dQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEyTvl6AVpEzSRZG16rQg+Ec9vzKMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVEpPLVhvQldrVE5KRmtiWHF0Q0Q0UnoyX01vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxgA
MA0GCSqGSIb3DQEBCwUAA4IBAQAMTxbUD7/x7pzyni4BP1B3l2XBCscK/r20gUE/
oLnwrvonUHU44Jm1DTm7srpTDEetBuuCw/WMrI+/QQILQy1h6MeYFBUBkJPkSmRc
h+cxotAqneU5UqAir833SzngG4Q5RGVa+drbw8rfxtnNb+YK9lobvO29WxWCzG9X
BEdC0g5hYmKaU+XEC37+Lnk5SiCcPXpYAbzD0V55AtNS3LRswi0ZZAnhyL/9f5iq
Q/b1dG98sXjI0EBzTHZx0FDBZLEC1zp3Mo4oFQ7BfXcZAk4J6gIGbSbGQWmXoV+i
LmN3wnv8bWIW2a62Qv2MYERLusXtHg0Y5abvJBy7kF7WS6wA
-----END CERTIFICATE-----