Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cv-j5cbhyzykr9kQb8JarjrTLEI.roa
File:                     cv-j5cbhyzykr9kQb8JarjrTLEI.roa (raw, json)
Hash identifier:          1O8T1PhB4N+a6tW1LTJJwMIGu8kcpWxf3ZcaK1KTz1M=
Subject key identifier:   72:FF:A3:E5:C6:E1:CB:3C:A4:AF:D9:10:6F:C2:5A:AE:3A:D3:2C:42
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7D4081EABBC9CB0DEEC0CB066D5C6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cv-j5cbhyzykr9kQb8JarjrTLEI.roa
Signing time:             Mon 02 Jan 2023 05:15:19 +0000
ROA not before:           Mon 02 Jan 2023 05:15:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208375
IP address blocks:        2a0e:97c0:c90::/48 maxlen: 48
                          2a0e:97c0:c9e::/48 maxlen: 48
                          2a0e:97c0:c91::/48 maxlen: 48
                          2a0e:97c0:c9f::/48 maxlen: 48
                          2a0e:97c0:c92::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:d4:08:1e:ab:bc:9c:b0:de:ec:0c:b0:66:d5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=72ffa3e5c6e1cb3ca4afd9106fc25aae3ad32c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:45:41:51:24:a7:d9:76:08:c2:96:f4:42:
                    9a:39:49:14:08:52:e3:68:d5:f3:60:9e:cb:eb:97:
                    ed:36:c5:a1:3a:1c:ee:32:be:e1:4e:33:39:ec:26:
                    b8:3c:f1:64:b3:67:81:8b:6f:51:cb:df:4e:a0:c1:
                    5a:b1:22:d3:e5:8d:b4:fd:00:9b:57:cb:00:b7:cc:
                    cd:34:f2:75:3c:f5:f4:5d:02:a0:90:95:6f:bc:bb:
                    64:3a:04:36:d3:3d:45:46:09:49:75:22:c9:96:80:
                    67:ba:93:ec:92:b8:fd:da:0a:88:09:e6:f4:a7:b3:
                    56:73:ad:15:33:94:fb:aa:b7:a9:b0:1b:ee:3c:d0:
                    20:02:f1:9e:9a:b0:e8:90:e3:67:7d:a9:d7:b7:11:
                    10:33:c9:a3:19:65:db:d9:02:cd:00:76:9e:8c:63:
                    9c:f2:b8:db:e3:42:d1:de:bc:8d:08:8b:5f:64:e0:
                    24:c5:e6:56:cf:ea:9b:8a:9e:ba:f2:a1:93:d8:d7:
                    bc:f9:81:82:17:15:e4:0b:84:44:2b:f1:18:83:59:
                    09:4e:27:98:1d:7f:1d:08:f7:b2:49:77:94:e9:32:
                    2f:57:8c:2a:35:a9:08:98:5d:8d:0c:d7:0c:f8:4a:
                    45:23:89:30:da:d2:c2:46:bb:e0:73:ec:af:78:4b:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FF:A3:E5:C6:E1:CB:3C:A4:AF:D9:10:6F:C2:5A:AE:3A:D3:2C:42
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cv-j5cbhyzykr9kQb8JarjrTLEI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:c90::-2a0e:97c0:c92:ffff:ffff:ffff:ffff:ffff
                  2a0e:97c0:c9e::/47

    Signature Algorithm: sha256WithRSAEncryption
         0e:54:b2:22:d5:fd:7e:f8:5d:82:5e:45:44:8e:9d:96:c3:30:
         dc:86:a1:85:7c:74:c2:0c:28:01:a0:f6:2e:18:36:71:94:6b:
         63:f2:cc:a8:dc:cc:b6:ad:c3:8b:2c:a9:e4:c0:c8:65:85:e0:
         a0:91:c0:a0:8f:3b:be:15:26:17:83:7a:c3:ba:c9:a4:e1:36:
         ab:6d:0d:c7:cc:7f:62:de:ad:7c:e1:07:ba:ac:bd:4d:f4:9c:
         43:5c:a9:f4:c6:2b:80:88:1a:55:c9:52:72:7c:cc:30:6a:dd:
         d5:a5:a1:2f:6d:4b:3e:53:52:94:5a:61:9c:18:6c:af:d7:a6:
         f3:70:12:91:9a:b3:d0:f3:64:b4:86:8b:87:3c:c1:ce:a2:27:
         77:81:28:4d:77:26:1b:01:62:58:0b:16:dc:32:e4:7b:80:df:
         14:17:db:a7:46:04:ec:17:85:31:25:ff:15:fc:a0:fe:cc:9f:
         a8:7c:66:b1:11:3c:66:19:c2:6a:78:47:51:fc:50:d2:c4:f3:
         ba:dc:50:89:a1:70:75:b9:61:38:ac:73:97:17:d9:ba:bd:87:
         21:b0:69:f6:be:8a:3e:27:64:54:cf:7d:c7:45:eb:26:2e:ed:
         c3:87:b0:56:ab:bb:97:5a:55:11:72:e7:9f:77:00:e5:66:43:
         3a:15:1a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----