Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TiwyjUho6GXRNnR8N_8Xc8_Qvv8.roa
File:                     TiwyjUho6GXRNnR8N_8Xc8_Qvv8.roa (raw, json)
Hash identifier:          JKTPOoX+asBlQIuzYYBDDqwcSfFVsP/v4H1PDz65DuE=
Subject key identifier:   4E:2C:32:8D:48:68:E8:65:D1:36:74:7C:37:FF:17:73:CF:D0:BE:FF
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01865D0C3941EF00F5E11417BAA67BDBD057
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TiwyjUho6GXRNnR8N_8Xc8_Qvv8.roa
Signing time:             Fri 17 Feb 2023 01:45:27 +0000
ROA not before:           Fri 17 Feb 2023 01:45:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210738
IP address blocks:        2a0e:b107:1e70::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5d:0c:39:41:ef:00:f5:e1:14:17:ba:a6:7b:db:d0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 17 01:45:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4e2c328d4868e865d136747c37ff1773cfd0beff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:47:ad:7b:47:c1:5b:2a:2e:3b:c6:23:28:53:
                    d4:b6:df:70:e8:36:67:06:f9:6f:04:ae:07:94:be:
                    51:90:59:3d:47:f7:19:25:b4:6f:ce:cc:ba:18:ea:
                    37:b1:57:c1:f5:24:0a:ad:98:cd:68:5b:a1:63:0a:
                    7d:de:47:3d:d4:35:08:b4:fd:03:9b:5d:6e:d0:61:
                    43:d9:cb:75:ec:7a:62:fe:27:91:72:4d:44:84:c4:
                    01:e2:02:ed:3e:e5:00:0b:bb:10:ec:d3:0d:db:f5:
                    50:fa:58:9e:a0:24:9e:82:c3:09:62:7f:c6:3b:16:
                    3e:9d:40:54:aa:50:bb:4f:74:81:70:de:90:3e:7c:
                    a2:3d:1e:3c:04:93:2b:8d:00:2b:51:23:0d:c0:c2:
                    46:e3:38:86:19:e0:bf:fe:cd:76:37:0e:e0:56:a0:
                    c4:12:93:ac:00:c4:26:60:ef:eb:04:ca:29:c6:a1:
                    6b:75:2e:33:a2:5a:1a:b3:71:1d:60:f5:77:dc:22:
                    de:2b:01:03:20:f6:f2:0c:be:7d:ae:04:78:c2:6f:
                    04:f8:d3:ec:cb:72:f0:9b:02:eb:e4:bb:9c:c1:0d:
                    21:e8:f1:45:8c:0b:3f:7f:54:26:8a:c1:86:4e:d5:
                    72:b3:55:38:cc:8c:ca:58:df:8e:a2:82:60:b2:2e:
                    99:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2C:32:8D:48:68:E8:65:D1:36:74:7C:37:FF:17:73:CF:D0:BE:FF
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TiwyjUho6GXRNnR8N_8Xc8_Qvv8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1e70::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:93:1f:62:42:e6:09:47:25:37:49:9c:d5:9e:6a:95:64:73:
         36:10:59:b9:da:1b:7f:4c:6e:f5:29:67:db:98:4a:96:b2:fa:
         3f:36:7d:32:26:6d:08:e7:7b:4a:10:ba:51:ef:f6:0c:9a:85:
         33:5c:31:4a:3a:75:e0:e4:76:2a:f7:74:ee:d3:87:c1:c0:44:
         fe:4a:76:6f:97:97:f5:04:e8:1e:fb:12:02:99:65:2e:9c:2c:
         f0:1f:98:d9:5f:43:f0:ca:92:b3:e5:e5:54:cd:2a:fa:e3:81:
         58:fd:6f:66:b0:f8:c8:74:ab:22:51:c1:db:af:ac:fa:b5:f5:
         9b:a6:bb:5b:45:fd:b0:5d:dc:8d:fc:95:83:09:bc:76:a2:20:
         7b:8b:a0:b3:e2:c8:ed:ce:e7:f4:09:80:b2:61:39:22:10:03:
         fe:5a:b3:09:35:d3:9a:57:11:5e:52:9e:a4:dc:06:6f:9f:78:
         45:f8:76:d9:6e:ba:c8:f1:8e:3a:d6:69:e9:d9:8b:dc:9c:bf:
         e3:39:ad:39:52:61:7b:15:fa:2c:82:ee:5a:7c:5c:9a:b8:ea:
         23:94:83:64:dc:d3:3f:c2:96:3b:e9:1a:32:83:76:e0:f4:66:
         e6:05:dc:66:9e:a6:a0:2a:99:4e:c7:f6:c0:a5:d7:31:c5:c8:
         f0:b7:e5:35
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYZdDDlB7wD14RQXuqZ729BXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMjE3MDE0NTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTJjMzI4ZDQ4NjhlODY1ZDEzNjc0N2MzN2ZmMTc3M2NmZDBiZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikete0fBWyouO8YjKFPUtt9w6DZn
BvlvBK4HlL5RkFk9R/cZJbRvzsy6GOo3sVfB9SQKrZjNaFuhYwp93kc91DUItP0D
m11u0GFD2ct17Hpi/ieRck1EhMQB4gLtPuUAC7sQ7NMN2/VQ+lieoCSegsMJYn/G
OxY+nUBUqlC7T3SBcN6QPnyiPR48BJMrjQArUSMNwMJG4ziGGeC//s12Nw7gVqDE
EpOsAMQmYO/rBMopxqFrdS4zoloas3EdYPV33CLeKwEDIPbyDL59rgR4wm8E+NPs
y3LwmwLr5LucwQ0h6PFFjAs/f1QmisGGTtVys1U4zIzKWN+OooJgsi6ZRwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFE4sMo1IaOhl0TZ0fDf/F3PP0L7/MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVGl3eWpVaG82R1hSTm5SOE5fOFhjOF9RdnY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBx5w
MA0GCSqGSIb3DQEBCwUAA4IBAQBckx9iQuYJRyU3SZzVnmqVZHM2EFm52ht/TG71
KWfbmEqWsvo/Nn0yJm0I53tKELpR7/YMmoUzXDFKOnXg5HYq93Tu04fBwET+SnZv
l5f1BOge+xICmWUunCzwH5jZX0PwypKz5eVUzSr644FY/W9msPjIdKsiUcHbr6z6
tfWbprtbRf2wXdyN/JWDCbx2oiB7i6Cz4sjtzuf0CYCyYTkiEAP+WrMJNdOaVxFe
Up6k3AZvn3hF+HbZbrrI8Y461mnp2YvcnL/jOa05UmF7Ffosgu5afFyauOojlINk
3NM/wpY76Royg3bg9GbmBdxmnqagKplOx/bApdcxxcjwt+U1
-----END CERTIFICATE-----