Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TiEimtl3d755MKlcg7HLOCOIKuw.roa
File:                     TiEimtl3d755MKlcg7HLOCOIKuw.roa (raw, json)
Hash identifier:          zyDFleU69aVE0snp8LEFlbuzyJcfaH0MXuxKCQlxmvc=
Subject key identifier:   4E:21:22:9A:D9:77:77:BE:79:30:A9:5C:83:B1:CB:38:23:88:2A:EC
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0186219EA5829C101E75FC63A9D790795534
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TiEimtl3d755MKlcg7HLOCOIKuw.roa
Signing time:             Sun 05 Feb 2023 12:48:10 +0000
ROA not before:           Sun 05 Feb 2023 12:48:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202929
IP address blocks:        2a0e:97c0:510::/47 maxlen: 48
                          2a0e:97c0:514::/47 maxlen: 48
                          2a0e:97c0:512::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:21:9e:a5:82:9c:10:1e:75:fc:63:a9:d7:90:79:55:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb  5 12:48:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4e21229ad97777be7930a95c83b1cb3823882aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:77:2e:bb:0f:5e:f9:2a:78:3b:98:7d:4d:
                    c6:1e:be:86:c7:02:87:96:be:48:76:8b:0b:59:31:
                    13:d1:e7:57:da:6c:5e:2d:0a:c4:0c:eb:f3:1d:d8:
                    04:ee:d9:78:d8:b7:13:60:a1:55:70:f4:6c:7a:79:
                    de:d4:ff:17:74:d9:98:8f:f3:79:4a:02:10:b4:66:
                    a2:43:45:48:f8:85:cd:57:ec:9a:d8:41:2b:b7:b4:
                    6b:49:40:95:b9:bf:aa:a8:dc:c5:49:91:d1:bc:e3:
                    f9:d3:15:eb:dd:7e:26:29:0b:10:7a:68:31:93:2f:
                    65:ac:f5:31:58:41:37:2b:fd:b6:3f:02:0b:4d:9d:
                    b6:8c:3b:9d:9c:74:8c:ec:b5:05:46:d2:93:45:ed:
                    9d:f2:3e:f5:9d:b4:49:06:0d:da:ce:2c:0e:46:d2:
                    02:33:d1:07:ba:ba:fc:31:77:40:0b:8a:17:d2:dc:
                    3f:3c:00:25:63:7b:59:8d:db:a5:09:30:58:22:27:
                    c8:ab:41:95:87:5f:d2:63:ce:0d:35:e5:e8:e7:9d:
                    46:55:54:eb:af:f1:a1:9f:50:f9:0d:00:f8:ac:25:
                    c4:03:21:37:55:b8:f1:eb:1b:ee:81:5e:90:e5:5c:
                    55:bb:83:b0:44:5e:1b:b4:e2:7e:09:18:47:9d:00:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:21:22:9A:D9:77:77:BE:79:30:A9:5C:83:B1:CB:38:23:88:2A:EC
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TiEimtl3d755MKlcg7HLOCOIKuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:510::-2a0e:97c0:512:ffff:ffff:ffff:ffff:ffff
                  2a0e:97c0:514::/47

    Signature Algorithm: sha256WithRSAEncryption
         8e:90:44:74:d3:ad:95:4c:b3:b9:20:16:c6:c2:c0:d6:d9:6d:
         13:85:e3:f7:e0:cd:1d:06:09:06:a0:7e:6b:96:eb:a7:2e:50:
         01:da:d4:cb:d7:8f:ee:3c:c2:8a:19:d7:42:64:36:9b:26:73:
         68:51:53:53:b9:43:33:3c:a2:d5:a0:4d:2f:d0:41:71:7b:25:
         83:f9:04:b8:75:78:57:fa:d9:d7:bb:e4:4c:5a:5d:14:63:88:
         3c:31:eb:f0:7b:e9:a4:44:69:c3:1d:b5:8b:4b:5a:b6:bf:9b:
         26:38:0b:0d:1b:8b:24:58:5d:b3:67:90:0c:1c:42:f2:08:d4:
         65:cf:ac:46:05:18:3b:2e:40:b8:8e:96:e7:26:ba:6e:0a:1e:
         cd:ed:13:30:42:10:09:34:83:ba:9a:3a:00:7e:b4:68:a5:65:
         e1:e2:c9:b4:18:ae:ca:de:b8:a2:40:df:4c:52:79:85:d3:50:
         f7:07:10:f0:01:c0:09:97:07:38:6b:a2:e7:8e:38:30:59:bd:
         fb:0d:19:4c:75:9b:ea:82:2b:10:fa:0b:27:75:8e:34:33:10:
         03:78:00:d3:d8:ce:dd:c6:7f:6b:1b:15:a6:09:42:47:53:c6:
         2d:c9:8c:ee:0d:87:ed:86:fc:97:0e:8a:ff:03:fc:fc:6e:22:
         b7:99:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----