Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c9qrK3262lR4xKnVSTAc5LXUj6o.roa
File:                     c9qrK3262lR4xKnVSTAc5LXUj6o.roa (raw, json)
Hash identifier:          rH99d+UWKU46OzECApJzCQemPFPppQ1eca3xAe0TENM=
Subject key identifier:   73:DA:AB:2B:7D:BA:DA:54:78:C4:A9:D5:49:30:1C:E4:B5:D4:8F:AA
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019337633C58C919B10CC436B436C6188910
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c9qrK3262lR4xKnVSTAc5LXUj6o.roa
Signing time:             Sat 16 Nov 2024 23:51:10 +0000
ROA not before:           Sat 16 Nov 2024 23:51:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215980
IP address blocks:        2a0e:97c0:e30::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 14:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:37:63:3c:58:c9:19:b1:0c:c4:36:b4:36:c6:18:89:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 16 23:51:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=73daab2b7dbada5478c4a9d549301ce4b5d48faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:81:64:a0:4e:0a:d7:96:8a:ec:46:c5:a4:b2:
                    bc:0c:6e:45:a0:a4:17:57:db:8e:1f:a4:f1:5d:ed:
                    fc:14:4d:7f:61:ae:3f:8f:33:8c:1b:d6:4e:27:8c:
                    29:79:e9:1a:e1:16:e3:51:50:ba:be:af:75:5b:4b:
                    81:13:73:ae:d4:b6:02:b1:34:56:16:5c:a9:50:33:
                    f9:f2:53:e3:7c:f4:75:ef:22:d1:5a:7e:4a:c6:4b:
                    31:2f:85:7e:b5:69:91:5c:77:13:7e:0f:4e:20:75:
                    a2:0e:04:63:a4:55:49:3b:82:e1:f5:a1:85:de:30:
                    53:70:d4:80:87:80:d8:44:71:6c:ef:2e:d6:c2:93:
                    33:a7:cb:fe:bd:cd:fa:0e:51:c7:96:c3:3a:2c:15:
                    0e:d8:01:8a:70:ef:39:03:f4:d2:5a:f1:10:90:01:
                    e3:d4:02:87:4d:a7:f5:51:3c:50:44:b2:c0:e8:03:
                    f1:6e:ed:c9:c0:b2:cb:5e:65:eb:7d:42:5c:7e:ff:
                    99:0d:84:f7:5d:68:ca:e0:48:4e:ff:e7:40:ad:8c:
                    4e:8e:69:29:83:a9:89:da:5a:5f:0c:d5:25:9b:a1:
                    ee:94:52:92:dd:56:5f:7f:b3:74:5b:63:9a:bf:98:
                    17:85:20:1e:fe:da:cd:7a:4b:6b:ba:f2:d3:68:61:
                    e6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DA:AB:2B:7D:BA:DA:54:78:C4:A9:D5:49:30:1C:E4:B5:D4:8F:AA
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c9qrK3262lR4xKnVSTAc5LXUj6o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:e30::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:33:22:28:d3:78:0e:2a:ac:30:1b:4b:b0:0e:38:52:f7:83:
         ab:1d:70:e4:50:94:7f:68:60:0a:fa:54:21:8e:69:f8:b9:43:
         6d:cd:ea:9d:d2:ac:bb:f2:c0:7c:35:1c:79:30:c6:b3:55:ae:
         18:5c:4e:d1:c0:df:88:0d:07:73:11:71:5d:c2:ed:55:d6:f1:
         19:cf:f4:39:f7:9a:06:c9:74:74:9d:c2:38:b2:70:e3:09:5d:
         52:74:39:81:3c:6e:60:f7:6d:42:93:0a:61:b6:63:78:ed:9b:
         8a:7f:a5:aa:d8:cd:05:39:e0:2c:e4:5c:d3:2b:bd:b9:73:c4:
         04:3f:c9:e8:da:0c:13:a6:c4:52:47:fb:92:f6:cd:06:a6:21:
         59:5f:90:8e:41:2f:9d:19:e1:6c:7a:2e:5c:a5:7d:4f:4a:3e:
         0f:25:02:70:db:39:c3:d0:81:25:00:92:98:06:f9:f2:4e:d8:
         dd:77:13:6e:1b:98:95:ba:7e:ef:8b:3d:33:62:c7:c1:55:15:
         db:56:27:9c:9a:04:cb:e3:4e:95:56:ce:62:5a:df:f9:cf:ad:
         bf:0e:fd:9f:c1:6a:7b:1c:7d:29:1e:86:4a:e3:dc:6d:ae:7f:
         56:84:d9:67:78:91:ea:5f:71:6b:97:96:06:a6:01:38:b0:dd:
         08:55:84:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----