Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bu_yhXSwZ4fqWBQjJjbd8tZVbus.roa
File:                     bu_yhXSwZ4fqWBQjJjbd8tZVbus.roa (raw, json)
Hash identifier:          jqQ87oyaydN1TjmAhd7cnP3caJszI4aZCdPNFgfvOfk=
Subject key identifier:   6E:EF:F2:85:74:B0:67:87:EA:58:14:23:26:36:DD:F2:D6:55:6E:EB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E80CE693F03315AFC6FDEE3A978A27
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bu_yhXSwZ4fqWBQjJjbd8tZVbus.roa
Signing time:             Mon 02 Jan 2023 05:15:33 +0000
ROA not before:           Mon 02 Jan 2023 05:15:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211722
IP address blocks:        2a0e:b107:12f0::/48 maxlen: 48
                          2a0e:b107:12f5::/48 maxlen: 48
                          2a0e:b107:12fa::/48 maxlen: 48
                          2a0e:b107:12f4::/48 maxlen: 48
                          2a0e:b107:12fe::/48 maxlen: 48
                          2a0e:b107:12f3::/48 maxlen: 48
                          2a0e:b107:12f8::/48 maxlen: 48
                          2a0e:b107:12fd::/48 maxlen: 48
                          2a0e:b107:12f2::/48 maxlen: 48
                          2a0e:b107:12f7::/48 maxlen: 48
                          2a0e:b107:12fc::/48 maxlen: 48
                          2a0e:b107:12f1::/48 maxlen: 48
                          2a0e:b107:12f6::/48 maxlen: 48
                          2a0e:b107:12fb::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:0c:e6:93:f0:33:15:af:c6:fd:ee:3a:97:8a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6eeff28574b06787ea5814232636ddf2d6556eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:b2:3d:ba:b9:b7:65:04:c9:4c:f9:90:f8:
                    2a:ed:d3:bc:c7:18:43:27:a7:8f:a2:19:a1:e4:ae:
                    8d:29:1c:79:75:c9:0d:25:d5:6f:60:ff:78:68:1b:
                    3a:71:3d:8b:be:38:84:98:f5:b7:84:82:4d:fe:69:
                    89:2c:a6:aa:41:7c:70:a6:b3:53:a8:c2:f0:f1:cc:
                    74:6b:4b:9c:a2:5a:87:98:2a:b2:62:44:22:3b:00:
                    42:b4:c2:0c:ec:9d:19:39:84:b6:30:62:48:a3:05:
                    af:94:60:e0:6e:76:4e:25:4c:af:f5:42:ca:33:cb:
                    4e:9d:d0:e0:3f:cd:e9:e9:a2:50:c7:ce:69:70:89:
                    23:8b:c2:81:0d:4b:8b:69:85:4a:66:82:93:98:4f:
                    7d:98:b8:02:01:db:a3:3a:45:bf:54:a6:b2:cd:c2:
                    fa:68:00:fa:ee:12:98:5c:25:4a:bf:91:62:bd:fd:
                    bb:d8:f2:50:80:7d:e6:8f:9b:1a:f3:ab:cc:79:a6:
                    bd:93:bf:e8:4d:77:ae:7d:47:fd:b8:e1:a5:e1:6c:
                    c5:0d:1a:12:a8:de:a3:e7:bd:46:c3:bc:e9:95:5e:
                    b4:12:16:90:f3:ae:bc:57:53:9d:59:c4:b9:69:7e:
                    71:1f:5f:71:6a:be:76:75:fc:1d:c8:cf:c7:11:5c:
                    ed:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EF:F2:85:74:B0:67:87:EA:58:14:23:26:36:DD:F2:D6:55:6E:EB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bu_yhXSwZ4fqWBQjJjbd8tZVbus.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:12f0::-2a0e:b107:12f8:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:12fa::-2a0e:b107:12fe:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         a5:ee:47:0c:29:5c:ff:1a:0e:bb:33:2b:a9:89:21:e0:30:0e:
         84:cd:ac:7a:5c:65:c7:7a:c8:f3:02:dc:44:61:f8:17:da:53:
         47:30:43:b1:f9:48:5c:bd:b5:9d:9e:a8:dc:db:b9:c8:3f:c7:
         aa:f2:41:fe:cf:8a:ae:4a:29:c1:d7:8a:6c:32:ed:8a:10:7f:
         16:9b:7b:fc:8d:86:60:cb:d8:fa:c0:14:f5:e8:06:05:1f:2e:
         87:84:6d:62:20:50:73:56:50:10:24:81:ad:85:d5:74:08:20:
         f6:c9:59:be:50:8e:74:1c:93:32:5c:b5:69:17:0d:f9:45:50:
         ba:f2:15:83:f4:78:6f:ea:47:5f:22:aa:54:9d:95:68:70:5a:
         08:48:61:50:6b:dc:a6:f6:c6:90:6c:76:0d:75:6a:57:36:78:
         89:fe:93:30:88:d0:a0:d9:7d:eb:17:d5:36:68:30:64:5c:47:
         35:4a:35:6c:16:2f:af:88:74:63:73:81:a9:ad:1b:8c:be:4e:
         76:ad:9f:5a:4f:83:d1:e5:5f:9a:df:e0:0a:90:66:8b:05:29:
         52:5b:b4:da:c6:26:27:8b:e7:40:47:d6:0a:38:42:80:5c:5f:
         e1:bc:ed:83:6c:1c:ac:65:56:67:26:04:74:8c:cf:d3:cc:bc:
         4d:37:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----