Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YdV_8D1N3mX6NiUHi14p6_gt8fM.roa
File:                     YdV_8D1N3mX6NiUHi14p6_gt8fM.roa (raw, json)
Hash identifier:          7JJmoDA6AhOzCCYnmIZoEmIK2mYTqZYQFqINhKrrY/w=
Subject key identifier:   61:D5:7F:F0:3D:4D:DE:65:FA:36:25:07:8B:5E:29:EB:F8:2D:F1:F3
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E822E679E560EA8EDCA3724D25EF16
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YdV_8D1N3mX6NiUHi14p6_gt8fM.roa
Signing time:             Mon 02 Jan 2023 05:15:39 +0000
ROA not before:           Mon 02 Jan 2023 05:15:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213064
IP address blocks:        2a0e:b107:b50::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:22:e6:79:e5:60:ea:8e:dc:a3:72:4d:25:ef:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=61d57ff03d4dde65fa3625078b5e29ebf82df1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:33:89:1f:ac:67:e6:87:7b:e3:0b:3b:34:
                    6f:4b:39:2a:e5:57:50:92:3d:40:fc:4a:94:fe:78:
                    5d:94:c2:f3:4d:af:fd:a8:9c:6b:23:fb:70:5d:cd:
                    f5:de:33:9b:51:be:c4:74:da:b3:89:6e:7c:5a:3d:
                    5a:97:e6:22:3d:c6:b7:c4:1e:cb:b9:70:82:6d:df:
                    e2:52:38:08:eb:48:9f:e6:f8:32:f1:73:6e:cb:ad:
                    39:01:0d:6e:19:e9:33:a0:a9:bd:49:38:09:9b:ca:
                    d8:cb:99:5f:df:26:78:51:1e:38:89:91:1b:93:27:
                    f3:8f:ec:69:e5:48:51:8c:0b:29:d0:7c:8c:73:97:
                    2c:2c:d4:a1:c9:5e:74:ca:17:14:d8:59:e1:7a:76:
                    36:95:2c:9b:d6:ba:d8:46:d6:da:ea:a9:ac:60:53:
                    5d:cc:07:62:48:62:60:d1:06:f9:c2:b1:6d:44:b0:
                    f2:75:2f:79:ae:83:21:1a:f5:68:f5:95:7e:12:62:
                    c2:8e:12:b5:53:38:02:92:c7:0f:a6:15:c9:1f:7f:
                    c2:73:a8:30:e5:ab:a4:48:da:f5:2a:8b:e8:27:bb:
                    08:46:b5:a2:e6:ea:08:0d:db:ec:66:60:55:11:c0:
                    a5:9c:06:69:0d:d5:66:0b:81:1e:2b:98:af:bc:35:
                    34:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D5:7F:F0:3D:4D:DE:65:FA:36:25:07:8B:5E:29:EB:F8:2D:F1:F3
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YdV_8D1N3mX6NiUHi14p6_gt8fM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:b50::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:13:81:a2:9b:f0:4e:74:82:ee:ff:80:24:b9:35:2e:73:3a:
         ed:8f:bc:47:8a:3c:2b:a9:e1:63:98:22:f7:ad:fe:e5:27:76:
         5d:bc:39:f7:54:17:37:04:cd:3f:55:8e:da:c5:f0:d5:3c:7f:
         1e:2c:22:f3:6b:a5:f3:ed:68:dc:f0:2a:92:04:9a:85:1a:dc:
         a8:d7:f3:25:c7:b9:55:ef:11:d2:eb:74:17:35:ea:d0:48:9e:
         6a:38:28:04:a8:77:70:4a:56:01:97:0a:e7:73:1e:72:06:1c:
         69:81:7f:9f:96:5b:25:b7:e0:1a:eb:0b:e4:af:36:d9:7b:94:
         03:a0:bd:d0:5d:f1:a9:07:7a:b2:43:96:83:ff:63:f1:ad:ec:
         64:16:75:f6:d8:20:6b:6e:a8:13:b4:71:3b:28:24:10:83:08:
         fe:c7:fa:c2:30:d1:5a:21:94:55:95:54:8a:1c:df:ff:a8:02:
         3b:cf:95:8e:35:3c:29:8f:d6:a1:6d:be:fa:2d:8d:12:8e:1c:
         7d:87:71:70:c3:09:c2:38:50:cf:0e:0a:a3:65:5c:51:c9:94:
         0a:1b:3c:34:fc:a7:93:bc:92:a0:d7:ee:7e:ad:6d:87:fa:95:
         2f:38:88:79:b8:78:31:0d:38:ab:c5:bc:06:7e:66:30:f6:c2:
         a9:3a:a1:a6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw6CLmeeVg6o7co3JNJe8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWQ1N2ZmMDNkNGRkZTY1ZmEzNjI1MDc4YjVlMjllYmY4MmRmMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6AziR+sZ+aHe+MLOzRvSzkq5VdQ
kj1A/EqU/nhdlMLzTa/9qJxrI/twXc313jObUb7EdNqziW58Wj1al+YiPca3xB7L
uXCCbd/iUjgI60if5vgy8XNuy605AQ1uGekzoKm9STgJm8rYy5lf3yZ4UR44iZEb
kyfzj+xp5UhRjAsp0HyMc5csLNShyV50yhcU2FnhenY2lSyb1rrYRtba6qmsYFNd
zAdiSGJg0Qb5wrFtRLDydS95roMhGvVo9ZV+EmLCjhK1UzgCkscPphXJH3/Cc6gw
5aukSNr1KovoJ7sIRrWi5uoIDdvsZmBVEcClnAZpDdVmC4EeK5ivvDU0kQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGHVf/A9Td5l+jYlB4teKev4LfHzMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvWWRWXzhEMU4zbVg2TmlVSGkxNHA2X2d0OGZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwtQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB1E4Gim/BOdILu/4AkuTUuczrtj7xHijwrqeFj
mCL3rf7lJ3ZdvDn3VBc3BM0/VY7axfDVPH8eLCLza6Xz7Wjc8CqSBJqFGtyo1/Ml
x7lV7xHS63QXNerQSJ5qOCgEqHdwSlYBlwrncx5yBhxpgX+fllslt+Aa6wvkrzbZ
e5QDoL3QXfGpB3qyQ5aD/2PxrexkFnX22CBrbqgTtHE7KCQQgwj+x/rCMNFaIZRV
lVSKHN//qAI7z5WONTwpj9ahbb76LY0Sjhx9h3FwwwnCOFDPDgqjZVxRyZQKGzw0
/KeTvJKg1+5+rW2H+pUvOIh5uHgxDTirxbwGfmYw9sKpOqGm
-----END CERTIFICATE-----