Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a0Wct7tqQ__q6opEIFBAHioS0ss.roa
File:                     a0Wct7tqQ__q6opEIFBAHioS0ss.roa (raw, json)
Hash identifier:          aa42m6qdu/ZpKwZy6iM+2nL9DfZD2wESUamRT2gJppU=
Subject key identifier:   6B:45:9C:B7:BB:6A:43:FF:EA:EA:8A:44:20:50:40:1E:2A:12:D2:CB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A12EF94DE0B06BA53DD8AC09235F7FCE4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a0Wct7tqQ__q6opEIFBAHioS0ss.roa
Signing time:             Sun 20 Aug 2023 12:33:25 +0000
ROA not before:           Sun 20 Aug 2023 12:33:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     269
IP address blocks:        2a0e:b107:381::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:12:ef:94:de:0b:06:ba:53:dd:8a:c0:92:35:f7:fc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 20 12:33:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6b459cb7bb6a43ffeaea8a442050401e2a12d2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1a:4a:04:6a:8f:56:d9:94:9c:78:d0:96:6c:
                    77:26:be:86:75:37:57:74:1f:39:a4:8a:1e:6a:67:
                    a7:b7:89:9b:8c:41:7e:d5:1e:e5:b0:f0:e8:c9:fa:
                    9a:fc:fb:11:b1:f3:cc:8c:f8:1d:13:6c:ae:08:25:
                    63:eb:20:83:b9:b4:b7:3f:81:83:20:f3:fb:9d:ee:
                    c8:c7:35:5e:d2:09:8d:c3:81:e0:c9:87:6e:a9:4c:
                    0c:a7:2c:f0:b9:60:14:73:2f:cd:08:a2:1c:00:80:
                    0b:cb:fc:2d:18:10:6e:5d:96:58:c2:eb:3f:53:3a:
                    0f:0b:33:cd:bc:24:10:59:5e:c7:3e:cd:71:10:e0:
                    c1:51:c8:1e:de:e2:f6:fd:c1:ae:92:82:35:70:07:
                    fa:69:80:1c:bd:d7:e0:1c:4d:cf:e7:0a:19:f3:d1:
                    9e:8f:25:f6:4a:f9:9a:7b:15:9f:19:53:95:00:33:
                    e6:41:04:a1:ea:6e:54:d5:60:21:3e:5a:de:78:df:
                    8b:51:56:5f:ca:9b:a8:8e:45:5a:e2:25:56:48:98:
                    62:f0:0d:58:2e:90:01:d5:90:a5:7d:b7:e1:60:99:
                    77:0d:34:7f:be:d4:be:ec:47:fb:f0:48:f7:ca:fa:
                    8e:a8:77:02:80:ed:b7:bd:97:e9:36:88:70:21:79:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:45:9C:B7:BB:6A:43:FF:EA:EA:8A:44:20:50:40:1E:2A:12:D2:CB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a0Wct7tqQ__q6opEIFBAHioS0ss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:381::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:ed:62:47:9c:8a:c2:0b:ad:47:b5:c6:45:aa:2c:18:ac:7f:
         72:88:66:3b:fc:e2:fb:76:12:5f:0a:d5:dc:a4:ad:36:cb:48:
         ff:87:14:40:c8:f7:5a:5c:3b:82:4f:15:0d:f9:7a:49:3c:50:
         d0:64:60:b3:ce:3e:6b:94:6c:3d:7f:ca:bb:6a:24:98:ca:88:
         a5:e0:84:c2:10:28:2a:21:ce:8e:8c:57:1c:40:e2:72:32:91:
         84:49:ac:7e:90:91:0f:c8:0d:13:65:56:05:66:f1:d5:7a:90:
         85:a2:c3:7a:99:48:56:60:6f:6f:95:ab:bb:5a:1b:b8:71:c0:
         cc:ea:21:ca:21:6c:36:68:c3:f5:bf:65:e2:69:87:0e:d1:b5:
         d9:3c:f3:93:9e:7e:23:5e:d5:2d:d7:56:1f:e6:a5:83:55:60:
         68:9c:c3:89:b3:18:6b:f6:15:4f:1e:2f:a6:b1:2b:4c:ee:1f:
         24:54:6e:53:9f:f4:dd:b3:41:a3:c3:44:38:cc:06:49:61:04:
         49:eb:00:33:55:ec:9c:b8:f5:4f:d6:3e:d3:93:c3:9f:c3:b2:
         62:bf:14:59:6c:87:7b:69:48:23:02:77:72:44:58:2a:b1:ec:
         6c:7b:05:8f:14:ca:82:ef:6e:59:86:b4:c5:a6:30:4c:33:83:
         81:d0:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----