Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZZLcysClLA9IQbkqxPARHUVq6S0.roa
File:                     ZZLcysClLA9IQbkqxPARHUVq6S0.roa (raw, json)
Hash identifier:          CewgW2vlphPlnS2KdCjKj6KTQje9ibRSs5Q24fNIBrw=
Subject key identifier:   65:92:DC:CA:C0:A5:2C:0F:48:41:B9:2A:C4:F0:11:1D:45:6A:E9:2D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018875BB299FB9CEB6879871144F201547F1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZZLcysClLA9IQbkqxPARHUVq6S0.roa
Signing time:             Thu 01 Jun 2023 06:53:00 +0000
ROA not before:           Thu 01 Jun 2023 06:53:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     53667
IP address blocks:        2a06:de01:400::/38 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:75:bb:29:9f:b9:ce:b6:87:98:71:14:4f:20:15:47:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun  1 06:53:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6592dccac0a52c0f4841b92ac4f0111d456ae92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:3c:b6:8a:18:16:dc:43:f7:35:46:8d:1f:
                    a5:41:35:7a:ae:3c:1d:b9:f6:7b:51:b4:2d:0d:ff:
                    a5:7b:18:a8:41:bf:f8:10:c6:f4:f8:e3:b9:36:15:
                    d6:43:8a:fc:25:e8:2e:98:ba:84:a1:4f:30:95:72:
                    91:f3:da:1d:7e:a3:da:70:4a:7d:ed:4f:aa:64:7d:
                    d2:a5:68:e8:6b:f7:a7:f9:22:06:a7:de:ce:8b:b0:
                    c2:97:cb:ef:44:fe:a4:be:e7:bd:97:02:21:70:f4:
                    c9:5c:71:7b:1d:22:21:2e:2d:4a:fd:7c:09:67:9c:
                    b7:80:5b:ec:e4:d2:d8:1f:4c:78:b3:e2:a8:a2:4f:
                    6b:6a:c0:a5:62:05:d3:14:fa:3b:d1:3c:31:a0:80:
                    39:4a:f0:47:8d:f4:7d:73:66:a6:e1:6e:42:a3:f9:
                    5b:66:b4:06:64:c5:06:f5:0d:7d:d7:71:73:77:1d:
                    03:7b:d9:08:19:ae:52:25:c3:80:2a:da:ea:fd:4c:
                    e8:c7:c1:78:96:6a:44:2e:35:74:ec:a4:3d:45:7a:
                    c4:c9:40:98:03:4c:ee:bb:38:68:f7:94:54:fa:fa:
                    5c:ae:13:fc:b5:a6:b4:f4:a2:3c:19:a8:7d:04:76:
                    c1:4d:c9:8b:95:ae:db:c4:05:cc:d9:8c:ad:b3:ef:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:92:DC:CA:C0:A5:2C:0F:48:41:B9:2A:C4:F0:11:1D:45:6A:E9:2D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZZLcysClLA9IQbkqxPARHUVq6S0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de01:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         b4:80:09:42:7a:6d:5b:09:ea:5a:26:82:c8:f6:b7:86:7d:a5:
         bb:59:57:26:0f:d4:0a:02:4e:f2:cd:8e:9f:e3:3e:e2:98:73:
         45:aa:2a:09:41:56:17:65:63:bc:45:7a:0f:b7:04:37:f7:df:
         69:34:2e:e9:40:60:99:fb:24:61:5f:fc:af:d7:17:59:c9:7e:
         aa:b7:3e:46:73:60:5d:9c:26:0b:93:b3:89:41:b1:07:e9:4f:
         cc:59:e0:ac:50:81:bc:32:9b:da:93:36:81:fd:c2:2f:23:48:
         69:4d:b4:6a:4e:40:f6:06:bf:fb:17:41:1e:48:ee:97:0f:44:
         fd:6b:3e:79:9d:c0:79:96:56:c3:15:a9:5b:ac:2f:65:2e:1e:
         87:88:de:cf:73:3d:83:ba:82:21:1d:c9:f8:e5:b0:29:9f:3f:
         91:70:27:24:28:94:e1:c3:30:56:de:41:aa:a6:86:83:0b:27:
         1b:16:c2:60:dc:28:b8:b8:fb:25:e9:7a:85:1f:69:79:59:33:
         e2:2a:e1:2f:2f:69:94:43:2b:03:90:cc:69:2b:ad:fb:fb:f8:
         7f:52:e8:c0:1d:67:ab:91:85:9e:df:82:95:14:69:b1:71:85:
         62:20:a5:33:12:0a:35:3b:27:3c:3e:76:8e:26:03:be:8e:85:
         3a:5a:2d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----