Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_0KhKGrPU-fWrrgAjJCfhO4QC6g.roa
File:                     _0KhKGrPU-fWrrgAjJCfhO4QC6g.roa (raw, json)
Hash identifier:          u5jZBMC6rF7Gr/fDoESvAmxr7PD5ggwYAjp5EYskDFM=
Subject key identifier:   FF:42:A1:28:6A:CF:53:E7:D6:AE:B8:00:8C:90:9F:84:EE:10:0B:A8
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0188E90324DA42A6FBFCE5DB594C6C728A7A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_0KhKGrPU-fWrrgAjJCfhO4QC6g.roa
Signing time:             Fri 23 Jun 2023 16:07:57 +0000
ROA not before:           Fri 23 Jun 2023 16:07:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198016
IP address blocks:        2a0e:97c0:d00::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e9:03:24:da:42:a6:fb:fc:e5:db:59:4c:6c:72:8a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun 23 16:07:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff42a1286acf53e7d6aeb8008c909f84ee100ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:f1:8b:ac:2c:22:cf:57:7a:43:79:e8:76:
                    e6:9e:05:1a:e1:4d:24:c0:31:d9:29:55:31:8e:d0:
                    a9:da:17:e4:df:45:46:c8:68:cd:c2:d7:cc:a5:67:
                    ea:c7:8f:21:f4:39:48:4c:02:83:a9:cc:2e:bf:41:
                    aa:0e:a7:39:f0:0d:88:a9:79:4b:5e:b9:e5:e2:0a:
                    92:e4:46:58:19:7c:54:58:90:a3:f1:22:c0:98:7e:
                    0a:41:fb:38:09:40:eb:8b:1f:03:d9:0f:ab:29:e5:
                    a0:8d:29:e8:f7:60:a9:12:e2:87:fd:37:be:67:25:
                    a8:d4:e5:6e:62:de:78:33:09:a1:9e:90:66:ed:3c:
                    1f:b2:36:89:67:65:6f:e8:15:de:68:31:af:87:a2:
                    f8:42:02:8e:b2:32:b4:a0:19:06:ff:e1:e6:d6:a0:
                    58:91:95:48:6c:c9:85:fd:eb:d1:04:2c:89:7e:07:
                    23:07:d9:b1:4a:08:9a:90:5c:2c:94:8c:09:20:62:
                    0c:48:2d:a5:d1:33:9c:b9:39:7d:6c:86:46:c7:c4:
                    d6:f2:bb:c9:d3:4a:6c:55:48:79:76:92:44:bd:f4:
                    5c:87:cd:9d:e8:f9:9e:ef:73:96:99:f0:c9:64:4d:
                    4e:de:2c:10:aa:e6:3b:67:be:17:01:0a:48:6e:df:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:42:A1:28:6A:CF:53:E7:D6:AE:B8:00:8C:90:9F:84:EE:10:0B:A8
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_0KhKGrPU-fWrrgAjJCfhO4QC6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:d00::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:44:93:84:09:a9:9d:48:25:e0:ce:90:eb:29:75:04:c1:10:
         f6:b1:62:f0:c1:ca:ec:ff:61:05:98:44:be:bf:36:de:dc:35:
         4a:46:a2:9c:0d:c1:27:da:03:00:b9:ce:1d:dd:79:31:33:c2:
         5b:3e:d2:4a:b4:82:a5:e5:e3:d6:24:dd:c1:e5:e7:05:f6:56:
         d8:6a:e4:b8:56:2a:2a:82:6b:ea:52:2d:95:83:7a:9e:c1:ee:
         3c:37:77:4f:06:0d:84:90:1c:8c:ec:2b:2c:38:df:ca:59:57:
         08:98:22:48:c7:c0:66:9f:7b:39:12:ca:8d:a7:c7:e8:d1:e7:
         53:8f:88:1c:b3:d9:3d:ff:29:48:d9:19:b8:59:ad:b2:1d:68:
         cd:35:b7:36:98:cf:0a:ac:da:e3:3f:c4:af:99:c3:c5:b8:a7:
         da:f7:be:b8:03:74:dc:2b:0d:ca:a7:ec:b5:3e:33:f0:30:34:
         21:92:4c:07:20:43:fb:4b:eb:54:9c:59:81:68:a5:99:80:d4:
         5b:a1:74:4b:eb:20:b0:88:49:e8:53:50:38:2c:4a:1d:3b:bf:
         fc:66:64:34:f4:94:86:bc:6b:0c:17:24:ed:57:e3:b1:53:74:
         b0:d2:b3:7d:35:5b:ca:a4:7d:3f:4b:29:0f:22:54:03:cf:d0:
         dc:e4:10:cf
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYjpAyTaQqb7/OXbWUxscop6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNjIzMTYwNzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjQyYTEyODZhY2Y1M2U3ZDZhZWI4MDA4YzkwOWY4NGVlMTAwYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTTxi6wsIs9XekN56HbmngUa4U0k
wDHZKVUxjtCp2hfk30VGyGjNwtfMpWfqx48h9DlITAKDqcwuv0GqDqc58A2IqXlL
Xrnl4gqS5EZYGXxUWJCj8SLAmH4KQfs4CUDrix8D2Q+rKeWgjSno92CpEuKH/Te+
ZyWo1OVuYt54MwmhnpBm7TwfsjaJZ2Vv6BXeaDGvh6L4QgKOsjK0oBkG/+Hm1qBY
kZVIbMmF/evRBCyJfgcjB9mxSgiakFwslIwJIGIMSC2l0TOcuTl9bIZGx8TW8rvJ
00psVUh5dpJEvfRch82d6Pme73OWmfDJZE1O3iwQquY7Z74XAQpIbt9XrQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP9CoShqz1Pn1q64AIyQn4TuEAuoMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvXzBLaEtHclBVLWZXcnJnQWpKQ2ZoTzRRQzZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwA0A
MA0GCSqGSIb3DQEBCwUAA4IBAQAzRJOECamdSCXgzpDrKXUEwRD2sWLwwcrs/2EF
mES+vzbe3DVKRqKcDcEn2gMAuc4d3XkxM8JbPtJKtIKl5ePWJN3B5ecF9lbYauS4
VioqgmvqUi2Vg3qewe48N3dPBg2EkByM7CssON/KWVcImCJIx8Bmn3s5EsqNp8fo
0edTj4gcs9k9/ylI2Rm4Wa2yHWjNNbc2mM8KrNrjP8SvmcPFuKfa9764A3TcKw3K
p+y1PjPwMDQhkkwHIEP7S+tUnFmBaKWZgNRboXRL6yCwiEnoU1A4LEodO7/8ZmQ0
9JSGvGsMFyTtV+OxU3Sw0rN9NVvKpH0/SykPIlQDz9Dc5BDP
-----END CERTIFICATE-----