Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/edyMkGOyAbiIc0Ak42Hzoy1fk2c.roa
File:                     edyMkGOyAbiIc0Ak42Hzoy1fk2c.roa (raw, json)
Hash identifier:          Su0KzEJ7ZiDyZWWPw3Pz/Ns89c6sEjAX0sWE60zxv6A=
Subject key identifier:   79:DC:8C:90:63:B2:01:B8:88:73:40:24:E3:61:F3:A3:2D:5F:93:67
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7AA0DBDDEEABE318DB9438339F4BD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/edyMkGOyAbiIc0Ak42Hzoy1fk2c.roa
Signing time:             Mon 02 Jan 2023 05:15:08 +0000
ROA not before:           Mon 02 Jan 2023 05:15:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202458
IP address blocks:        2a0e:97c0:c00::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:aa:0d:bd:de:ea:be:31:8d:b9:43:83:39:f4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79dc8c9063b201b888734024e361f3a32d5f9367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:20:b0:8b:d4:24:2a:8d:a6:c8:4a:4a:77:72:
                    ff:2b:03:17:4b:e2:c0:6b:4b:a9:e4:43:c9:89:a2:
                    6f:68:ae:b9:91:e3:cc:d4:cf:bc:e0:0c:e4:9f:55:
                    14:8c:4a:fc:f2:3f:d6:aa:85:e5:f3:25:3a:34:4f:
                    86:d0:8a:7a:ec:36:47:d4:9b:3e:07:df:4b:a2:9a:
                    32:e5:72:29:54:d1:d2:08:66:b6:40:29:65:d2:f8:
                    06:20:ed:74:66:23:70:47:99:f6:a8:e8:de:ce:45:
                    72:38:1a:68:2f:a8:9f:88:04:17:ea:ff:58:ed:67:
                    15:59:28:96:1d:cf:16:69:2d:d5:ee:18:e2:f3:9e:
                    b7:19:a5:81:d8:7f:73:df:e3:e7:c8:41:04:ca:9e:
                    ee:1c:63:9c:7c:4b:9a:19:91:26:6b:b9:bb:f5:57:
                    3c:61:54:0d:16:5c:cb:20:9a:1a:38:c2:55:e3:70:
                    48:33:f7:d2:ff:16:1e:82:a2:74:67:3f:e1:7d:b7:
                    5d:3f:16:ae:60:7f:46:bd:0f:d0:7e:18:e3:43:08:
                    ae:cc:82:66:6a:99:38:8d:0f:8e:de:c6:a6:75:64:
                    00:da:ac:9e:68:89:a4:d2:36:6e:20:61:a8:7a:90:
                    0f:97:a2:1e:f8:ce:30:2b:33:17:dc:37:83:dd:3f:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DC:8C:90:63:B2:01:B8:88:73:40:24:E3:61:F3:A3:2D:5F:93:67
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/edyMkGOyAbiIc0Ak42Hzoy1fk2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:c00::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:65:92:68:01:8a:5a:1a:1b:be:69:10:3e:8b:bd:54:ee:
         aa:61:6c:93:2e:26:bf:b2:8e:4d:4f:e5:24:52:55:76:40:85:
         00:43:34:0d:ee:c6:e3:c7:61:be:5d:32:b4:28:bd:12:b1:25:
         04:bf:35:0f:fa:31:61:00:71:8d:35:7d:6e:d3:77:d0:f7:07:
         f6:f8:e3:41:2d:d4:7f:e7:94:2c:c7:89:52:99:92:ae:98:99:
         3a:9a:4e:42:4b:e8:c3:68:7a:41:2d:5a:6d:cd:4e:16:25:f0:
         55:86:03:27:89:a2:bc:fb:e6:13:26:8f:c3:5b:1a:ce:4f:6e:
         d0:01:7a:45:b1:d6:af:b2:e7:a3:09:56:62:3d:e2:31:22:16:
         a6:02:86:57:df:73:c4:4f:4a:89:37:a2:9e:3c:63:59:d3:bd:
         59:6c:7e:ed:31:e0:c8:f1:eb:4f:c8:c3:73:a0:1f:b0:67:0d:
         df:04:49:4c:22:3a:24:36:92:f1:82:c2:be:8a:92:03:93:70:
         ea:b8:d9:80:d0:6f:07:ff:1f:b4:d6:2b:1b:d8:42:e2:ff:84:
         42:e0:de:f3:b4:db:a6:b8:b2:75:3d:f6:53:38:cd:8b:fb:1a:
         a9:7c:cc:b3:25:cb:91:5e:9c:4a:27:0c:73:2e:c1:43:02:2b:
         33:89:a2:eb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw56oNvd7qvjGNuUODOfS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWRjOGM5MDYzYjIwMWI4ODg3MzQwMjRlMzYxZjNhMzJkNWY5MzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSCwi9QkKo2myEpKd3L/KwMXS+LA
a0up5EPJiaJvaK65kePM1M+84Azkn1UUjEr88j/WqoXl8yU6NE+G0Ip67DZH1Js+
B99Lopoy5XIpVNHSCGa2QCll0vgGIO10ZiNwR5n2qOjezkVyOBpoL6ifiAQX6v9Y
7WcVWSiWHc8WaS3V7hji8563GaWB2H9z3+PnyEEEyp7uHGOcfEuaGZEma7m79Vc8
YVQNFlzLIJoaOMJV43BIM/fS/xYegqJ0Zz/hfbddPxauYH9GvQ/QfhjjQwiuzIJm
apk4jQ+O3samdWQA2qyeaImk0jZuIGGoepAPl6Ie+M4wKzMX3DeD3T/QewIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHncjJBjsgG4iHNAJONh86MtX5NnMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZWR5TWtHT3lBYmlJYzBBazQySHpveTFmazJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAwA
MA0GCSqGSIb3DQEBCwUAA4IBAQCPzmWSaAGKWhobvmkQPou9VO6qYWyTLia/so5N
T+UkUlV2QIUAQzQN7sbjx2G+XTK0KL0SsSUEvzUP+jFhAHGNNX1u03fQ9wf2+ONB
LdR/55Qsx4lSmZKumJk6mk5CS+jDaHpBLVptzU4WJfBVhgMniaK8++YTJo/DWxrO
T27QAXpFsdavsuejCVZiPeIxIhamAoZX33PET0qJN6KePGNZ071ZbH7tMeDI8etP
yMNzoB+wZw3fBElMIjokNpLxgsK+ipIDk3DquNmA0G8H/x+01isb2ELi/4RC4N7z
tNumuLJ1PfZTOM2L+xqpfMyzJcuRXpxKJwxzLsFDAisziaLr