Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ug6MJuSCo1qxlT8eJeRr6HJ3ilw.roa
File:                     Ug6MJuSCo1qxlT8eJeRr6HJ3ilw.roa (raw, json)
Hash identifier:          eDjdqJUcUZ3C+hMOPDw4Pz4K7nxGfSHg+TRsGRw5Ej4=
Subject key identifier:   52:0E:8C:26:E4:82:A3:5A:B1:95:3F:1E:25:E4:6B:E8:72:77:8A:5C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187B92F5FE5E192D86ED52EA82090F1BB4B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ug6MJuSCo1qxlT8eJeRr6HJ3ilw.roa
Signing time:             Tue 25 Apr 2023 16:11:42 +0000
ROA not before:           Tue 25 Apr 2023 16:11:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198747
IP address blocks:        2a0e:97c0:380::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b9:2f:5f:e5:e1:92:d8:6e:d5:2e:a8:20:90:f1:bb:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 25 16:11:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=520e8c26e482a35ab1953f1e25e46be872778a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:ac:c5:72:a0:b9:e3:93:60:f2:2b:6b:5d:
                    fc:9f:a5:74:6c:6a:e0:b6:b4:b6:64:12:87:1a:65:
                    1c:32:a3:48:40:39:49:e3:ce:20:e4:d8:e6:7b:7c:
                    a5:b6:c1:8a:3c:d8:ce:c5:77:80:0f:d9:d1:10:de:
                    80:05:c2:2e:57:7a:6f:83:d6:7d:95:c6:bc:88:b4:
                    93:cd:f8:f9:06:ac:0e:f7:68:d8:a1:90:81:cc:30:
                    b3:3f:b5:00:11:ff:f2:7c:91:77:68:cf:70:85:63:
                    2e:96:cc:99:be:d4:46:a5:f0:b2:88:28:bd:5b:0e:
                    00:62:91:61:66:17:8c:17:70:d8:9f:34:4d:d8:c9:
                    c3:8f:d2:df:a8:3b:45:2a:34:46:24:4c:27:ad:d1:
                    6f:8a:6f:67:ba:2a:88:4b:6f:2d:0c:3f:61:0a:6c:
                    61:dc:b5:bf:3b:5a:30:35:cc:93:83:12:f5:59:50:
                    52:31:ec:d7:f8:0e:c0:51:b9:75:6a:2b:e9:95:8e:
                    fd:58:8b:34:b7:a8:c9:27:ad:ab:da:af:fd:85:8f:
                    97:1b:10:a6:6c:f1:42:96:af:a9:64:78:71:12:9a:
                    bf:93:bd:ec:3a:fd:2d:24:09:46:dc:9f:42:7d:4b:
                    61:8a:fa:80:44:e1:a6:79:e4:7e:38:63:9c:00:70:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0E:8C:26:E4:82:A3:5A:B1:95:3F:1E:25:E4:6B:E8:72:77:8A:5C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ug6MJuSCo1qxlT8eJeRr6HJ3ilw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:380::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:46:a1:de:05:4c:19:80:cc:73:fa:4f:26:55:02:52:12:78:
         39:34:38:b6:48:69:bf:cd:54:a6:30:45:9c:ff:1b:87:78:40:
         72:e6:36:c0:75:ef:cd:56:f2:85:d0:b2:a4:a4:84:57:8c:a6:
         1c:25:00:04:db:41:d4:ac:9b:db:bc:c8:af:d7:4e:96:69:7e:
         43:2d:da:86:2a:9e:3a:a2:43:ce:5a:f7:87:54:c2:a7:e2:08:
         7c:48:3f:23:d8:8b:92:0f:34:6d:bf:73:1f:08:7e:60:3e:cf:
         3c:c4:af:76:12:e5:88:8e:e2:65:99:20:5d:57:ea:2b:54:f9:
         c5:fd:6e:f3:7f:95:01:f5:0f:24:bb:6b:d3:c6:4e:95:a9:ce:
         fe:2c:99:9e:86:8c:42:10:ad:52:5e:c0:62:52:1a:a8:c6:46:
         50:02:47:02:b2:55:ee:08:af:e9:10:1a:02:57:12:f7:00:e1:
         48:bb:ea:cf:8d:7e:ae:22:17:6b:9a:63:45:e4:9e:56:be:57:
         e1:88:7b:f8:0d:2b:1b:b2:91:21:24:83:49:72:ab:1b:ba:a3:
         57:55:c7:55:2e:b6:78:48:63:0b:b2:fa:e6:8a:d2:d0:3a:7a:
         56:7d:ce:ce:61:bd:24:b1:78:a6:ad:77:79:3c:73:e2:27:22:
         fa:9b:d4:8a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYe5L1/l4ZLYbtUuqCCQ8btLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNDI1MTYxMTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjBlOGMyNmU0ODJhMzVhYjE5NTNmMWUyNWU0NmJlODcyNzc4YTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr2sxXKgueOTYPIra138n6V0bGrg
trS2ZBKHGmUcMqNIQDlJ484g5Njme3yltsGKPNjOxXeAD9nREN6ABcIuV3pvg9Z9
lca8iLSTzfj5BqwO92jYoZCBzDCzP7UAEf/yfJF3aM9whWMulsyZvtRGpfCyiCi9
Ww4AYpFhZheMF3DYnzRN2MnDj9LfqDtFKjRGJEwnrdFvim9nuiqIS28tDD9hCmxh
3LW/O1owNcyTgxL1WVBSMezX+A7AUbl1aivplY79WIs0t6jJJ62r2q/9hY+XGxCm
bPFClq+pZHhxEpq/k73sOv0tJAlG3J9CfUthivqAROGmeeR+OGOcAHC36QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFIOjCbkgqNasZU/HiXka+hyd4pcMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVWc2TUp1U0NvMXF4bFQ4ZUplUnI2SEozaWx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAOA
MA0GCSqGSIb3DQEBCwUAA4IBAQCURqHeBUwZgMxz+k8mVQJSEng5NDi2SGm/zVSm
MEWc/xuHeEBy5jbAde/NVvKF0LKkpIRXjKYcJQAE20HUrJvbvMiv106WaX5DLdqG
Kp46okPOWveHVMKn4gh8SD8j2IuSDzRtv3MfCH5gPs88xK92EuWIjuJlmSBdV+or
VPnF/W7zf5UB9Q8ku2vTxk6Vqc7+LJmehoxCEK1SXsBiUhqoxkZQAkcCslXuCK/p
EBoCVxL3AOFIu+rPjX6uIhdrmmNF5J5WvlfhiHv4DSsbspEhJINJcqsbuqNXVcdV
LrZ4SGMLsvrmitLQOnpWfc7OYb0ksXimrXd5PHPiJyL6m9SK
-----END CERTIFICATE-----