Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U3Jw7VSUryOUQm6-X4744zVp67Q.roa
File:                     U3Jw7VSUryOUQm6-X4744zVp67Q.roa (raw, json)
Hash identifier:          HI87alpPu3Ax6PbU3MOeY6cwSe0PuNxa2WkiPJ7Q5Ik=
Subject key identifier:   53:72:70:ED:54:94:AF:23:94:42:6E:BE:5F:8E:F8:E3:35:69:EB:B4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187B90EFFE03162E3A3E29DEA96E4118F04
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U3Jw7VSUryOUQm6-X4744zVp67Q.roa
Signing time:             Tue 25 Apr 2023 15:36:20 +0000
ROA not before:           Tue 25 Apr 2023 15:36:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198747
IP address blocks:        2a0e:97c0:380::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b9:0e:ff:e0:31:62:e3:a3:e2:9d:ea:96:e4:11:8f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 25 15:36:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=537270ed5494af2394426ebe5f8ef8e33569ebb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:68:92:ab:f1:af:c9:d3:35:ba:af:1c:89:
                    e7:b4:cb:67:c9:98:5f:41:eb:b8:f7:31:c7:05:08:
                    f8:df:8b:a5:5c:d2:c9:3c:c0:38:d3:9a:45:53:ec:
                    bb:6e:78:95:ca:4a:46:af:1f:57:c3:6d:a9:77:38:
                    cf:15:fd:c3:a6:ff:f6:00:1c:16:1e:15:08:d6:07:
                    18:ae:f1:a1:31:d6:3d:ea:74:0b:9b:f3:43:23:2a:
                    c9:b0:7f:40:90:d3:a2:66:64:20:31:21:42:31:c8:
                    29:9d:e1:07:23:d7:56:1c:c3:52:23:43:9e:da:31:
                    10:1d:81:6e:5d:8b:26:09:e6:26:d1:15:dc:32:46:
                    fc:a3:89:ed:fe:57:d6:dc:52:8b:83:ae:60:ce:f5:
                    be:8f:de:7d:ef:0a:84:44:45:c8:dc:1c:0a:f3:67:
                    a5:63:09:34:8b:ba:76:20:bc:f4:b8:47:75:d4:42:
                    d5:16:58:7a:98:97:3c:dc:c7:74:54:79:5c:8c:98:
                    bb:c6:01:73:50:be:9d:ab:c6:49:63:c3:e6:3d:94:
                    2a:14:0f:e7:4e:2f:e9:d4:cf:94:76:34:45:9d:9e:
                    5f:cc:00:1a:17:40:a4:22:e6:ed:72:5d:23:0d:55:
                    24:b4:1d:c1:09:9a:0b:e4:06:7d:c4:bb:17:de:bf:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:72:70:ED:54:94:AF:23:94:42:6E:BE:5F:8E:F8:E3:35:69:EB:B4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U3Jw7VSUryOUQm6-X4744zVp67Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:380::/44

    Signature Algorithm: sha256WithRSAEncryption
         32:59:c7:68:5a:99:f9:d1:ea:08:10:91:e4:08:be:02:80:2c:
         2a:c9:ce:25:20:d1:60:8c:e4:55:75:5a:96:d9:6f:87:17:2f:
         59:97:e9:62:36:7d:4a:23:6c:19:b7:1b:ec:1f:9d:99:1e:97:
         26:81:20:62:dd:33:cc:38:db:35:e5:7f:2f:90:02:ef:a5:60:
         09:ae:6c:54:69:8f:ed:66:26:58:54:5d:01:e1:4e:0f:b5:3c:
         92:f9:5f:aa:12:e3:6b:43:e1:54:5f:55:df:59:10:71:aa:3d:
         5b:f3:bf:cf:97:48:f2:5a:73:ae:01:d9:cb:bb:8a:32:a3:d9:
         5e:e3:4f:39:d5:74:8f:79:8e:87:ea:b4:44:ba:0a:e6:b4:d7:
         c8:bf:fe:35:25:b4:96:8c:6a:1e:96:2a:4e:b5:23:5c:7f:9b:
         17:93:0d:af:aa:b9:ad:03:88:15:87:09:f8:71:db:28:6e:65:
         bc:46:e9:fc:eb:bf:73:d4:5b:a0:4c:c6:d2:cd:9e:b0:89:c7:
         24:bc:fb:22:93:c1:48:fb:cd:7e:72:20:9e:84:99:3c:50:ba:
         f4:a9:7d:63:f8:21:96:0f:c9:66:1f:76:08:3c:a5:03:4c:54:
         b2:36:b2:f7:5a:61:97:e4:89:fa:9a:ae:49:f0:94:18:35:e9:
         2a:d1:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----