Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eVdLgrBGIHM_AK6zasffZ5uv5rc.roa
File:                     eVdLgrBGIHM_AK6zasffZ5uv5rc.roa (raw, json)
Hash identifier:          m9XTf0uer10fxGFgxFxru/ACeALSXvHdv+SRLtLD8hA=
Subject key identifier:   79:57:4B:82:B0:46:20:73:3F:00:AE:B3:6A:C7:DF:67:9B:AF:E6:B7
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A3CFA701C6D13436D3AB1485931788019
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eVdLgrBGIHM_AK6zasffZ5uv5rc.roa
Signing time:             Mon 28 Aug 2023 16:29:20 +0000
ROA not before:           Mon 28 Aug 2023 16:29:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44024
IP address blocks:        2a10:2f01:330::/44 maxlen: 48
                          2a06:de00:7000::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3c:fa:70:1c:6d:13:43:6d:3a:b1:48:59:31:78:80:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 28 16:29:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79574b82b04620733f00aeb36ac7df679bafe6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:10:4f:a4:18:57:93:12:b0:08:17:d2:b7:fc:
                    9c:f0:87:88:1d:73:dd:d4:50:93:6f:87:4b:8c:ba:
                    b2:6e:eb:a6:fb:5e:ab:80:22:48:51:47:96:86:25:
                    57:4b:b5:1b:9b:23:88:52:73:19:84:4e:0e:9a:db:
                    3a:8d:65:ef:b6:3d:cd:42:35:06:25:93:b8:49:a1:
                    56:55:80:4a:df:ff:4b:99:b4:df:91:17:5a:d7:0b:
                    20:39:48:e7:d7:85:23:70:b7:5e:56:71:90:b3:8a:
                    68:09:02:88:50:35:46:ed:a1:a7:fb:45:d5:e9:3c:
                    d5:75:14:8f:fe:b9:22:61:93:ab:3b:4c:e4:d1:2d:
                    21:c5:db:7d:05:11:eb:eb:0a:46:f7:98:84:b3:d5:
                    5c:e3:95:41:12:3e:8e:e7:00:a5:90:27:c3:5c:fb:
                    eb:bd:34:16:42:b8:8c:6d:f9:8a:9e:30:05:52:a0:
                    14:99:a1:5f:af:39:e5:47:8f:24:c2:62:12:7e:7b:
                    5c:5c:9b:c6:45:9f:61:86:71:a4:1f:2b:f2:e2:d9:
                    28:33:b6:c2:7e:3a:15:58:56:d7:2c:45:8a:b1:60:
                    a8:7c:f5:40:3f:23:9b:f7:a3:9b:b0:84:ab:a9:0a:
                    3e:7b:bf:e5:93:66:b0:86:79:57:36:0a:b1:83:31:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:57:4B:82:B0:46:20:73:3F:00:AE:B3:6A:C7:DF:67:9B:AF:E6:B7
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eVdLgrBGIHM_AK6zasffZ5uv5rc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de00:7000::/44
                  2a10:2f01:330::/44

    Signature Algorithm: sha256WithRSAEncryption
         cc:61:95:3a:bc:ac:da:9e:dc:8a:72:7c:f6:6c:0d:a3:a5:fc:
         df:ff:ba:9f:56:b0:dd:2f:e9:71:0b:cd:19:58:cd:d3:20:89:
         4d:3b:4d:bf:30:4d:5c:9d:d2:2a:8c:96:a9:fc:67:fa:6f:92:
         13:36:ac:eb:07:59:93:4f:2a:e7:03:50:84:b1:4b:d5:f2:fa:
         bc:26:10:88:d1:3e:22:34:da:86:2f:78:6e:5d:22:5e:2e:d8:
         44:c9:74:f4:62:69:79:5e:19:37:6a:7e:a3:f0:e4:39:ea:6c:
         2d:10:20:83:bc:f7:32:59:17:81:2c:2e:6c:0b:fc:81:9f:37:
         94:d9:be:97:b4:b7:82:b8:0e:46:a0:6a:6f:0d:bd:70:0d:16:
         e8:17:7a:39:a3:f7:6a:51:8a:93:2e:e5:57:b6:3f:93:9e:fc:
         48:e5:0e:70:8d:ef:d4:da:4e:08:2c:d0:74:f3:6d:9d:e3:36:
         49:58:d2:fc:2a:22:8e:40:5a:72:f7:d8:bb:a9:db:e6:cc:c8:
         ce:c1:8b:57:02:75:26:d2:26:54:e2:72:42:16:f6:8f:cc:5c:
         2f:b3:b4:6d:1a:33:d5:79:b2:38:90:54:19:6c:9e:d3:f8:f7:
         52:24:34:db:8e:20:3f:a5:89:09:4d:22:87:28:3d:71:54:95:
         ba:ab:6c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----