Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eemyYMDyY1peqBD-4imcq91_rtY.roa
File:                     eemyYMDyY1peqBD-4imcq91_rtY.roa (raw, json)
Hash identifier:          OlvHKBhTb7pi4fDrmByKOoytUfQNSguBZcLDNTj4i6k=
Subject key identifier:   79:E9:B2:60:C0:F2:63:5A:5E:A8:10:FE:E2:29:9C:AB:DD:7F:AE:D6
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7D6E7F132BDD2E25656785C63A930
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eemyYMDyY1peqBD-4imcq91_rtY.roa
Signing time:             Mon 02 Jan 2023 05:15:20 +0000
ROA not before:           Mon 02 Jan 2023 05:15:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208717
IP address blocks:        2a0e:b107:220::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:d6:e7:f1:32:bd:d2:e2:56:56:78:5c:63:a9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79e9b260c0f2635a5ea810fee2299cabdd7faed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:e7:96:f6:24:53:c4:31:52:90:97:48:ab:
                    57:97:c3:81:79:bc:54:0e:ae:2a:bd:0b:73:8b:fe:
                    e4:46:c3:5f:b3:ed:cc:44:4b:b5:0a:17:57:6d:82:
                    a6:89:c8:56:03:72:8b:cb:64:58:0f:11:ae:e2:8a:
                    86:33:39:d3:5f:ab:50:e5:85:10:bf:a0:fd:4b:3f:
                    22:d3:6e:0a:4a:78:b1:db:e2:22:96:33:52:e7:ae:
                    c5:1e:0d:7c:11:9d:ef:20:97:9f:7f:9d:8e:cf:76:
                    1f:b7:af:42:7a:6e:99:96:b2:35:52:cf:d2:8c:dc:
                    dd:c5:1b:85:1c:f0:19:58:0f:9d:ea:8d:be:89:81:
                    73:73:48:e4:4c:c7:7c:1e:b7:75:4c:be:83:91:27:
                    57:84:d7:40:ce:8f:31:97:84:dc:40:b2:b5:58:4f:
                    32:a4:e7:19:2f:fc:cd:4f:a8:54:cb:4d:7d:61:2d:
                    61:fe:3c:6a:13:29:fe:5d:2a:b2:aa:3d:d4:37:20:
                    2d:bc:d1:44:4b:30:b7:d9:df:91:d0:24:f6:3d:c2:
                    9d:4e:33:91:48:83:54:62:5e:76:c8:a9:c6:8a:87:
                    b9:be:5f:00:be:4a:68:79:d8:da:c3:4d:33:f3:6b:
                    c1:e7:f9:c8:45:b9:ff:9b:46:44:c2:92:bb:23:43:
                    d2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E9:B2:60:C0:F2:63:5A:5E:A8:10:FE:E2:29:9C:AB:DD:7F:AE:D6
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eemyYMDyY1peqBD-4imcq91_rtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:220::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:4b:e8:09:84:b2:49:2b:20:54:be:3a:fb:bf:ec:e5:fe:b7:
         3b:87:b9:49:34:40:9b:a6:80:34:27:e0:3f:f7:ba:68:fc:f0:
         33:1f:85:c3:8e:ff:6d:16:68:9e:2f:af:e9:e2:17:0e:a4:d1:
         e7:c2:36:0a:62:9c:8f:5c:f3:46:81:41:16:eb:0a:c6:60:83:
         ee:37:24:ca:42:4c:92:6b:b8:17:8b:b7:6f:60:b4:69:da:34:
         a4:fa:f9:8d:9b:8b:76:11:e8:5d:7f:ec:f9:79:b1:0f:ef:49:
         42:fc:cc:d4:28:75:ff:4f:a4:c5:e1:06:73:2d:ef:c8:fd:68:
         71:6c:40:dd:16:16:e3:68:73:67:5e:eb:9e:23:3b:46:c7:cf:
         c1:ca:76:1b:a3:d7:a5:30:3a:60:44:b8:d7:28:c9:ce:2a:d7:
         d7:3f:db:df:3c:f5:57:be:49:3d:f4:7e:cb:d4:d8:3e:d1:98:
         de:d0:63:f3:93:d9:50:f3:10:10:d4:ef:ca:21:53:a8:7d:35:
         8a:f3:82:ec:83:9d:2b:51:ca:3c:a0:2d:f0:3f:77:39:f4:d1:
         fe:f7:77:6a:8a:28:d6:b5:2d:85:5e:99:38:63:5f:35:04:c3:
         bd:f3:0b:ba:03:2c:67:73:3b:6e:36:b6:5c:e0:d5:84:76:f3:
         3f:10:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----