Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZJ-yyZuco8deQ5_JK9d48ORrSc0.roa
File:                     ZJ-yyZuco8deQ5_JK9d48ORrSc0.roa (raw, json)
Hash identifier:          uLGCI01hmZtoicq5kWff4/ZV16bolmyjPKvIwhmEgPI=
Subject key identifier:   64:9F:B2:C9:9B:9C:A3:C7:5E:43:9F:C9:2B:D7:78:F0:E4:6B:49:CD
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018ACD2BD9D4237A13937CE8C942E2626AB2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZJ-yyZuco8deQ5_JK9d48ORrSc0.roa
Signing time:             Mon 25 Sep 2023 16:28:37 +0000
ROA not before:           Mon 25 Sep 2023 16:28:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212268
IP address blocks:        2a0e:b107:f28::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cd:2b:d9:d4:23:7a:13:93:7c:e8:c9:42:e2:62:6a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 25 16:28:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=649fb2c99b9ca3c75e439fc92bd778f0e46b49cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e1:38:e9:fe:f0:7e:1f:6d:a2:2e:a5:78:ea:
                    e3:48:3c:fa:34:33:b7:c1:c3:d0:59:6a:bc:bb:70:
                    39:e1:5f:54:84:29:ef:71:c9:b7:ee:bc:2a:4b:8b:
                    c5:79:00:49:27:90:26:c2:68:7e:3f:09:20:fd:60:
                    97:32:76:17:a4:b7:7b:6c:2e:50:48:93:c9:9d:26:
                    0d:0b:7e:6c:3e:ee:43:04:a5:f8:13:9c:08:c8:39:
                    ac:b6:03:cf:d7:9e:18:73:ce:b2:62:0c:ed:c9:ac:
                    95:00:c6:07:e7:c0:af:7d:0a:1e:02:a3:ce:72:5c:
                    5f:40:7d:39:98:ef:3a:cb:ad:d0:dc:b7:3c:8b:b9:
                    99:70:68:10:12:19:44:4f:28:8c:18:1e:98:5f:2b:
                    bc:97:4f:98:83:64:cf:2d:93:47:28:f0:b4:20:36:
                    b8:54:ef:b2:37:8a:23:cd:1b:77:5f:e0:cb:e7:54:
                    86:e2:58:7f:63:73:79:e4:1d:a8:53:69:ad:08:22:
                    53:4e:2e:55:41:72:8a:91:75:ca:e2:61:50:d0:3e:
                    e3:75:59:b9:c3:9a:f5:9b:01:87:a8:fd:a8:de:d2:
                    39:0d:3b:cd:e6:08:c2:ff:5b:38:5f:3a:90:92:eb:
                    b3:68:d4:71:ae:1d:fc:cf:04:46:d0:b9:05:57:d5:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9F:B2:C9:9B:9C:A3:C7:5E:43:9F:C9:2B:D7:78:F0:E4:6B:49:CD
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZJ-yyZuco8deQ5_JK9d48ORrSc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:f28::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:04:3f:b8:77:e8:19:2d:b0:b6:7e:db:8e:b9:56:df:eb:
         7e:56:fb:46:cd:94:80:15:0f:b6:f2:0e:ec:5f:cc:76:12:b8:
         c0:03:1e:b5:cf:86:69:eb:91:fa:7a:5f:e1:f9:5b:2c:96:c5:
         45:99:af:ec:3e:40:e3:56:8e:29:c3:5c:3f:5c:0b:a9:ff:6a:
         ab:28:d8:a6:18:29:0a:2b:93:a7:02:7c:26:4e:3c:7e:32:66:
         7c:fb:18:ec:c8:e1:78:e2:35:9b:bc:3b:86:5b:f5:ec:b1:fa:
         d8:d0:43:4f:fc:9d:00:45:a1:17:c5:b7:b3:60:a3:41:f7:fd:
         61:d8:79:82:9b:19:a4:97:59:34:96:8b:4d:2c:4f:ef:21:dc:
         89:50:4b:22:3c:70:06:21:a0:d3:29:f6:4b:a2:2b:88:e6:ec:
         28:69:82:96:4c:2a:e3:a6:d7:4d:60:ce:ed:58:00:bb:5e:46:
         8d:5b:bc:e8:44:04:98:72:3b:16:48:9b:32:f9:6f:15:c3:1c:
         6a:c4:d2:f9:d7:b7:76:fe:70:2d:14:b2:32:9f:01:24:84:2b:
         d6:ed:b2:88:ac:ec:04:23:19:39:f8:58:98:26:b4:3b:e0:92:
         be:6e:b2:1e:cc:1e:90:02:47:2d:e7:c9:d2:75:b9:1b:48:31:
         b9:3b:e1:d0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYrNK9nUI3oTk3zoyULiYmqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwOTI1MTYyODM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDlmYjJjOTliOWNhM2M3NWU0MzlmYzkyYmQ3NzhmMGU0NmI0OWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+E46f7wfh9toi6leOrjSDz6NDO3
wcPQWWq8u3A54V9UhCnvccm37rwqS4vFeQBJJ5Amwmh+Pwkg/WCXMnYXpLd7bC5Q
SJPJnSYNC35sPu5DBKX4E5wIyDmstgPP154Yc86yYgztyayVAMYH58CvfQoeAqPO
clxfQH05mO86y63Q3Lc8i7mZcGgQEhlETyiMGB6YXyu8l0+Yg2TPLZNHKPC0IDa4
VO+yN4ojzRt3X+DL51SG4lh/Y3N55B2oU2mtCCJTTi5VQXKKkXXK4mFQ0D7jdVm5
w5r1mwGHqP2o3tI5DTvN5gjC/1s4XzqQkuuzaNRxrh38zwRG0LkFV9U/2wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGSfssmbnKPHXkOfySvXePDka0nNMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvWkoteXladWNvOGRlUTVfSks5ZDQ4T1JyU2MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBw8o
MA0GCSqGSIb3DQEBCwUAA4IBAQCr1AQ/uHfoGS2wtn7bjrlW3+t+VvtGzZSAFQ+2
8g7sX8x2ErjAAx61z4Zp65H6el/h+VsslsVFma/sPkDjVo4pw1w/XAup/2qrKNim
GCkKK5OnAnwmTjx+MmZ8+xjsyOF44jWbvDuGW/XssfrY0ENP/J0ARaEXxbezYKNB
9/1h2HmCmxmkl1k0lotNLE/vIdyJUEsiPHAGIaDTKfZLoiuI5uwoaYKWTCrjptdN
YM7tWAC7XkaNW7zoRASYcjsWSJsy+W8VwxxqxNL517d2/nAtFLIynwEkhCvW7bKI
rOwEIxk5+FiYJrQ74JK+brIezB6QAkct58nSdbkbSDG5O+HQ
-----END CERTIFICATE-----