Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d-DzoO1f4rM_2x4oqCDEh4kAu6U.roa
File:                     d-DzoO1f4rM_2x4oqCDEh4kAu6U.roa (raw, json)
Hash identifier:          rRzRU5mKLSJQjkq0lTdvpyeYSRfgsEQQsvtc/7PnZ7U=
Subject key identifier:   77:E0:F3:A0:ED:5F:E2:B3:3F:DB:1E:28:A8:20:C4:87:89:00:BB:A5
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0193097154A859CEA3EA3A27CBA9DD79B59F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d-DzoO1f4rM_2x4oqCDEh4kAu6U.roa
Signing time:             Fri 08 Nov 2024 01:44:02 +0000
ROA not before:           Fri 08 Nov 2024 01:44:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        93.88.203.0/24 maxlen: 24
                          2a0e:97c0:411::/48 maxlen: 48
                          2a0e:97c0:8e0::/48 maxlen: 48
                          2a0e:b107:19a0::/48 maxlen: 48
                          2a0e:b107:1a63::/48 maxlen: 48
                          2a0e:b107:1a64::/48 maxlen: 48
                          2a0e:b107:2880::/46 maxlen: 48

Validation:               Failed, certificate revoked on Sun 10 Nov 2024 07:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:09:71:54:a8:59:ce:a3:ea:3a:27:cb:a9:dd:79:b5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov  8 01:44:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=77e0f3a0ed5fe2b33fdb1e28a820c4878900bba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:d8:1e:3d:d3:74:26:f1:69:cc:75:24:dc:
                    17:42:24:36:92:3e:0f:b7:43:3d:dc:60:b0:50:89:
                    8d:88:4e:99:51:9d:89:b6:83:e6:5f:a7:9f:b3:79:
                    4a:d3:55:d0:ca:58:0b:2f:7a:cd:8f:63:20:ed:0f:
                    ad:0f:18:54:33:91:6f:14:dd:b1:f4:63:a1:0b:2e:
                    d5:85:33:f4:a3:4b:78:b2:75:e3:1b:4d:91:48:2e:
                    51:d2:47:18:9e:90:07:3b:a9:9d:a4:2d:a0:c8:3d:
                    33:b6:09:41:f1:a4:61:48:f6:e4:63:08:1a:88:32:
                    83:1b:e0:eb:2a:26:0f:98:e3:85:26:48:07:86:5d:
                    90:5a:36:29:87:a2:37:5a:ad:ec:bd:a0:a7:3d:df:
                    84:a5:2c:ba:70:19:69:04:82:ea:12:e9:be:63:14:
                    0d:23:ee:14:c7:dd:f5:24:f6:9f:6e:af:2f:7a:01:
                    1a:c1:69:a3:01:e8:6c:16:9f:08:6b:1c:8e:cd:b9:
                    23:fc:5a:d9:b4:5e:f3:e6:ac:65:09:a3:14:d1:99:
                    b0:3d:b0:7b:ea:bd:e0:04:de:9d:45:a3:97:0f:f9:
                    02:0f:77:64:1f:9b:4e:9f:b7:3c:86:7f:4c:cf:cb:
                    f2:ad:da:5f:83:42:32:04:6d:8a:68:33:31:eb:71:
                    8e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E0:F3:A0:ED:5F:E2:B3:3F:DB:1E:28:A8:20:C4:87:89:00:BB:A5
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d-DzoO1f4rM_2x4oqCDEh4kAu6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.88.203.0/24
                IPv6:
                  2a0e:97c0:411::/48
                  2a0e:97c0:8e0::/48
                  2a0e:b107:19a0::/48
                  2a0e:b107:1a63::-2a0e:b107:1a64:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:2880::/46

    Signature Algorithm: sha256WithRSAEncryption
         64:71:f2:06:99:8f:13:a8:e6:e3:45:96:4d:53:f3:de:d4:61:
         53:55:da:aa:fe:a2:62:af:0d:52:78:39:3f:a4:98:a5:f8:56:
         29:14:58:3a:ce:3d:8b:85:16:ac:a6:3e:50:06:a0:64:e4:65:
         c9:8e:5a:f5:8f:34:3c:8e:53:16:54:27:27:38:0e:4b:25:d9:
         1f:52:7c:bf:c5:f8:0e:b9:0d:23:9e:40:2b:d5:4a:4f:07:cd:
         29:26:1d:57:cd:1c:c3:3e:f3:0e:7d:b2:04:b1:0e:4b:47:98:
         10:d9:98:0b:c2:a9:22:d1:a6:f3:42:91:a7:e7:70:3c:c1:9e:
         57:13:20:e4:c9:ed:f1:5c:0d:49:45:ac:7c:93:e4:40:d4:e9:
         b0:fc:7a:f8:4a:4d:88:40:76:b6:3f:6a:ad:f7:63:f6:ed:ef:
         d6:4d:e4:fe:01:0f:4c:d2:d2:cb:d3:dc:79:2e:31:aa:71:7c:
         1b:77:c3:e7:45:9e:82:34:73:89:5f:8f:a3:66:0b:92:c3:47:
         da:15:3e:0a:0f:de:79:3f:af:49:e3:ea:6a:08:d2:c3:ec:63:
         93:0f:34:77:83:a9:c0:15:f3:bb:3a:c1:07:9d:4f:ad:71:c7:
         86:75:54:40:ee:c5:b7:19:12:e7:1e:71:76:bb:48:ff:74:9d:
         63:ff:c2:ae
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZMJcVSoWc6j6jony6ndebWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQxMTA4MDE0NDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2UwZjNhMGVkNWZlMmIzM2ZkYjFlMjhhODIwYzQ4Nzg5MDBiYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMzYHj3TdCbxacx1JNwXQiQ2kj4P
t0M93GCwUImNiE6ZUZ2JtoPmX6efs3lK01XQylgLL3rNj2Mg7Q+tDxhUM5FvFN2x
9GOhCy7VhTP0o0t4snXjG02RSC5R0kcYnpAHO6mdpC2gyD0ztglB8aRhSPbkYwga
iDKDG+DrKiYPmOOFJkgHhl2QWjYph6I3Wq3svaCnPd+EpSy6cBlpBILqEum+YxQN
I+4Ux931JPafbq8vegEawWmjAehsFp8IaxyOzbkj/FrZtF7z5qxlCaMU0ZmwPbB7
6r3gBN6dRaOXD/kCD3dkH5tOn7c8hn9Mz8vyrdpfg0IyBG2KaDMx63GOqwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFHfg86DtX+KzP9seKKggxIeJALulMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZC1Eem9PMWY0ck1fMng0b3FDREVoNGtBdTZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjAMBAIAATAGAwQAXVjLMD4E
AgACMDgDBwAqDpfABBEDBwAqDpfACOADBwAqDrEHGaAwEgMHACoOsQcaYwMHACoO
sQcaZAMHAioOsQcogDANBgkqhkiG9w0BAQsFAAOCAQEAZHHyBpmPE6jm40WWTVPz
3tRhU1Xaqv6iYq8NUng5P6SYpfhWKRRYOs49i4UWrKY+UAagZORlyY5a9Y80PI5T
FlQnJzgOSyXZH1J8v8X4DrkNI55AK9VKTwfNKSYdV80cwz7zDn2yBLEOS0eYENmY
C8KpItGm80KRp+dwPMGeVxMg5Mnt8VwNSUWsfJPkQNTpsPx6+EpNiEB2tj9qrfdj
9u3v1k3k/gEPTNLSy9PceS4xqnF8G3fD50WegjRziV+Po2YLksNH2hU+Cg/eeT+v
SePqagjSw+xjkw80d4OpwBXzuzrBB51PrXHHhnVUQO7FtxkS5x5xdrtI/3SdY//C
rg==
-----END CERTIFICATE-----