Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U0AXHD-RRQi_IIXUsUjGvrvQREs.roa
File:                     U0AXHD-RRQi_IIXUsUjGvrvQREs.roa (raw, json)
Hash identifier:          JDPArAk8Oy8I59tgo2gpeov9EP17v+prvAaXsxIXvI0=
Subject key identifier:   53:40:17:1C:3F:91:45:08:BF:20:85:D4:B1:48:C6:BE:BB:D0:44:4B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AD9CE5EDF1B54A3FF806E936AF800
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U0AXHD-RRQi_IIXUsUjGvrvQREs.roa
Signing time:             Tue 24 Jan 2023 16:09:42 +0000
ROA not before:           Tue 24 Jan 2023 16:09:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205977
IP address blocks:        2a0e:b107:760::/48 maxlen: 48
                          2a0e:b107:765::/48 maxlen: 48
                          2a0e:b107:76a::/48 maxlen: 48
                          2a10:2f00:120::/48 maxlen: 48
                          2a0e:b107:764::/48 maxlen: 48
                          2a0e:b107:769::/48 maxlen: 48
                          2a0e:b107:76e::/48 maxlen: 48
                          2a0e:b107:763::/48 maxlen: 48
                          2a0e:b107:768::/48 maxlen: 48
                          2a0e:b107:76d::/48 maxlen: 48
                          2a0e:b107:760::/44 maxlen: 48
                          2a0e:b107:762::/48 maxlen: 48
                          2a0e:b107:767::/48 maxlen: 48
                          2a0e:b107:76c::/48 maxlen: 48
                          2a0e:b107:761::/48 maxlen: 48
                          2a0e:b107:766::/48 maxlen: 48
                          2a0e:b107:76b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:d9:ce:5e:df:1b:54:a3:ff:80:6e:93:6a:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5340171c3f914508bf2085d4b148c6bebbd0444b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e6:52:03:82:99:5b:0f:90:8a:02:51:02:08:
                    a1:56:14:d4:d0:a0:e6:d5:52:e7:bc:ab:be:ff:e7:
                    3b:d4:ca:11:04:54:26:4d:6a:8f:4e:a0:f8:88:27:
                    cd:ff:3b:e4:6a:77:bb:e4:50:49:d6:54:88:c3:01:
                    8c:56:9f:49:75:5d:28:b0:a6:36:94:8e:86:ef:35:
                    f9:51:92:99:16:32:95:1c:87:74:e4:89:40:87:45:
                    d4:fe:02:eb:e4:37:6b:93:0c:5f:42:9c:08:99:b7:
                    ac:7d:02:00:82:3f:55:25:86:88:0e:df:a6:57:8e:
                    ae:d7:ad:06:4c:79:20:24:43:6b:c8:99:1d:77:79:
                    05:c4:2f:de:f8:fb:17:bb:8d:23:b9:90:e4:d7:33:
                    17:56:d1:a7:8b:80:79:a4:01:a7:d6:c3:52:34:4a:
                    66:90:75:1c:44:6b:8e:8f:98:25:7a:94:43:8e:99:
                    bf:28:72:21:b9:22:27:71:2e:fa:23:75:45:71:f8:
                    19:7f:0e:d7:66:5c:5e:7c:9b:b5:cf:63:b5:07:44:
                    81:76:45:8a:14:db:04:e5:f6:54:17:44:0a:64:f2:
                    ea:c5:8b:ee:5d:7d:9f:ca:ea:8b:59:62:84:c1:4c:
                    01:31:85:6c:67:1c:f9:50:0c:56:ee:23:63:b7:14:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:40:17:1C:3F:91:45:08:BF:20:85:D4:B1:48:C6:BE:BB:D0:44:4B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U0AXHD-RRQi_IIXUsUjGvrvQREs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:760::/44
                  2a10:2f00:120::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:32:ee:4a:76:bc:e2:eb:d2:8b:28:63:3e:a1:10:b8:32:01:
         40:fb:53:68:fa:29:81:2c:3b:c4:fe:fd:21:f3:2c:6e:1a:35:
         c0:8c:08:6e:c3:01:d8:44:d4:ff:03:11:c9:42:45:fb:65:c2:
         76:31:15:a3:c9:9a:16:74:57:b4:9b:93:8a:08:d0:d9:5c:cf:
         04:89:32:b5:02:58:4a:64:62:99:d9:57:c8:5c:15:e2:11:47:
         9a:75:49:01:bc:c2:10:48:43:8d:95:06:a5:c8:89:87:d2:fd:
         80:6e:7f:95:ab:42:4d:24:6c:fe:5e:d0:af:57:48:0f:70:69:
         2f:62:b9:e1:0a:0c:a2:3b:ff:b0:a2:c3:0d:37:03:f8:51:c9:
         0c:8c:3b:08:c1:7a:80:93:e1:d2:ac:b0:06:e0:63:c4:c1:c0:
         4d:e6:00:e7:03:7a:53:53:a1:ba:70:1a:2a:ca:bc:a1:43:99:
         68:ce:45:76:22:b3:0c:a3:6e:12:1d:9f:07:d0:1b:09:f5:a3:
         04:f5:83:04:25:35:e8:9b:a0:ae:74:ca:fe:53:f8:ae:52:38:
         1c:15:ec:c4:c3:51:3c:d6:41:4c:96:c2:e3:d1:31:5a:7c:3f:
         f2:c9:86:13:5c:06:2e:e4:23:66:89:a5:9f:40:85:51:31:45:
         05:b8:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----