Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gC6koTQD9675493ATsKdheJsMAg.roa
File:                     gC6koTQD9675493ATsKdheJsMAg.roa (raw, json)
Hash identifier:          VcL6oqy+rKIZT1YoSk0EOUAedhs7a3uCGBuAUOURylQ=
Subject key identifier:   80:2E:A4:A1:34:03:F7:AE:F9:E3:DD:C0:4E:C2:9D:85:E2:6C:30:08
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E8208D6FEBF880ECBB056F1D671225
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gC6koTQD9675493ATsKdheJsMAg.roa
Signing time:             Mon 02 Jan 2023 05:15:38 +0000
ROA not before:           Mon 02 Jan 2023 05:15:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212934
IP address blocks:        2a0e:b107:bb0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:20:8d:6f:eb:f8:80:ec:bb:05:6f:1d:67:12:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=802ea4a13403f7aef9e3ddc04ec29d85e26c3008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:08:40:98:f1:24:c6:20:ae:c3:f3:10:09:eb:
                    24:bc:92:a8:56:d9:3a:cc:7d:fd:aa:07:e8:fa:d2:
                    c5:34:41:3b:b8:1c:f5:47:0e:68:2e:46:af:2e:7a:
                    7a:7e:86:2a:5f:03:2f:63:b1:b1:2b:bf:19:15:45:
                    8e:e6:d0:fb:70:96:3a:ca:3f:47:0c:f7:d3:c6:69:
                    37:06:b3:09:fb:e1:1b:eb:64:24:15:a1:6a:bb:ae:
                    fb:6e:f2:7a:d8:2f:13:8c:45:3a:51:3a:90:df:14:
                    af:93:99:2a:85:b5:6c:7d:ab:60:36:a2:8b:17:67:
                    27:d3:81:f8:6e:bd:69:90:a6:08:36:e9:cf:59:5c:
                    71:e0:85:6f:14:ce:d6:ca:53:75:a3:05:f9:b9:96:
                    0a:73:ad:68:a9:6c:ed:a7:d5:cd:57:b8:6d:7f:a7:
                    df:19:4b:4f:61:b4:ba:5f:95:50:11:af:e9:b2:82:
                    d2:9e:58:48:09:20:68:ec:c3:ea:c2:ab:61:7e:62:
                    ea:37:7e:18:31:c3:d4:d5:22:8a:03:44:29:f7:0e:
                    a2:0b:8c:7e:37:b0:b4:1b:2b:8c:6d:c0:88:aa:e1:
                    c9:e4:a1:6a:70:1f:c0:f1:42:3b:94:33:49:2b:d7:
                    6a:2d:f4:59:e1:5f:e1:59:32:4e:58:57:64:89:6b:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2E:A4:A1:34:03:F7:AE:F9:E3:DD:C0:4E:C2:9D:85:E2:6C:30:08
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gC6koTQD9675493ATsKdheJsMAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:bb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5b:2e:7a:b8:1e:ef:f3:28:49:d3:99:09:ac:ad:c9:45:5c:9f:
         4a:8c:e6:88:4f:a6:60:0c:82:34:cb:81:90:ff:d2:15:ea:8f:
         e9:5a:b7:16:72:02:02:fb:98:ba:e0:c4:74:79:ab:57:3d:42:
         28:48:b9:e9:a2:f4:40:b4:2f:d1:a4:38:b6:36:e0:9a:56:72:
         f5:9e:90:8a:4a:c7:23:e7:d3:b0:8a:6a:f8:04:b5:f5:38:98:
         0d:c4:f2:42:5a:3b:12:6f:a6:52:14:72:32:ec:2e:25:2d:15:
         f1:7d:64:c6:15:81:fb:3a:09:00:de:4f:4d:a1:0c:e0:9f:c6:
         6a:9d:6d:6c:f0:78:46:c6:30:50:13:d0:87:71:fd:2e:71:57:
         61:5e:84:58:d2:3a:81:51:61:14:81:4f:cf:89:22:64:85:46:
         fe:cc:7e:ec:11:6c:95:4b:b7:25:d4:97:29:99:e0:e6:13:d1:
         0f:c0:bf:cb:37:2c:96:d6:a3:a8:41:b9:48:e7:21:6e:64:64:
         04:b2:7c:05:1f:bd:f6:58:0b:03:5a:10:42:56:32:80:60:39:
         bb:ec:a4:5f:d5:8d:f9:d8:df:27:03:d5:91:c7:c6:53:a9:42:
         ed:96:39:75:1a:1a:03:3d:37:48:9f:4f:cf:76:38:b9:be:12:
         06:32:3c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----