Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gC_04PWIfwEIA-6X1tQskh4U0BY.roa
File:                     gC_04PWIfwEIA-6X1tQskh4U0BY.roa (raw, json)
Hash identifier:          pkkxsrfFeNTKQTpGiovsfHLwHc7gmH3pfNCrEdNMA1o=
Subject key identifier:   80:2F:F4:E0:F5:88:7F:01:08:03:EE:97:D6:D4:2C:92:1E:14:D0:16
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48B02D595A9FEF695AFF180C5803AB2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gC_04PWIfwEIA-6X1tQskh4U0BY.roa
Signing time:             Tue 24 Jan 2023 16:09:53 +0000
ROA not before:           Tue 24 Jan 2023 16:09:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212268
IP address blocks:        2a0e:b107:f28::/48 maxlen: 48
                          2a0e:b107:f2a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8b:02:d5:95:a9:fe:f6:95:af:f1:80:c5:80:3a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=802ff4e0f5887f010803ee97d6d42c921e14d016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0c:9e:8f:96:7a:e3:28:2a:34:76:08:d4:dc:
                    a8:8c:5e:4c:18:ba:ff:cf:dd:b5:d7:6a:a9:e4:e5:
                    24:d6:92:11:6b:6a:31:be:a6:01:8a:fe:69:df:fd:
                    4e:c1:f2:ce:7c:7a:e9:84:12:e0:5f:42:cf:1c:0c:
                    cf:5c:63:4c:3b:36:cc:9c:5e:9b:d1:79:67:18:1d:
                    61:0a:9e:ef:eb:17:56:a7:27:7d:f2:61:58:eb:0e:
                    60:d8:e6:34:39:8b:44:46:fc:03:16:c5:55:dd:c1:
                    8e:04:61:8e:8d:e4:8f:95:49:44:db:ee:65:b8:99:
                    f1:88:04:3f:11:ca:9d:71:a2:9a:4f:9e:f8:1f:aa:
                    45:cc:76:e3:f1:4a:fd:f0:88:05:7a:10:00:3e:ed:
                    be:e7:73:89:d2:f0:33:f3:51:b9:09:90:33:2a:67:
                    32:17:9b:6f:d6:3c:77:57:39:ba:84:58:79:84:c1:
                    de:6d:d6:b0:7d:2c:49:53:da:9b:01:54:0a:c7:fd:
                    24:22:a4:81:f2:d7:44:7b:26:0b:46:c7:38:d8:0d:
                    83:0e:3b:84:44:e2:ac:1f:87:80:b6:e4:e5:7b:e6:
                    47:e6:d0:16:d4:a7:55:50:3b:e0:12:a9:15:7f:aa:
                    0c:96:53:83:74:7f:1e:00:22:1a:69:22:de:bf:31:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2F:F4:E0:F5:88:7F:01:08:03:EE:97:D6:D4:2C:92:1E:14:D0:16
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gC_04PWIfwEIA-6X1tQskh4U0BY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:f28::/48
                  2a0e:b107:f2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:5b:2f:8b:cf:86:e0:a9:a0:a2:19:c8:99:46:a1:e1:6b:dc:
         eb:16:ec:05:04:35:6e:48:31:73:c4:db:9c:15:d0:24:73:99:
         a3:e3:74:46:49:ca:8c:09:5a:b8:45:93:2c:8b:d6:66:4c:2c:
         b7:3a:9c:05:0d:22:db:81:4e:3a:88:f4:b6:d1:4d:75:7e:10:
         af:1b:45:ab:65:a7:d4:62:4f:fa:88:ad:62:ca:f1:7b:84:07:
         5f:c1:a6:9b:70:37:30:a3:82:e5:64:99:2d:8c:fb:b6:59:40:
         00:68:4f:c7:8b:1f:d7:f1:ab:21:d8:7e:f1:8c:50:81:8f:19:
         dd:f9:d9:64:59:b9:e0:5d:55:ca:df:d6:a7:34:66:c5:af:11:
         d4:d7:ed:2b:12:08:4f:9d:78:4e:fe:84:5e:62:88:ec:96:ae:
         3d:1d:39:a2:ff:59:21:ef:1c:2c:bb:8a:89:26:4e:6e:b7:52:
         69:63:3f:06:cd:f0:3c:b6:c3:ef:5a:c1:2a:dd:42:b5:31:85:
         9a:61:e1:b5:40:50:72:f0:98:ba:67:bb:de:9b:fc:74:f9:d0:
         b7:44:ea:2c:1b:20:cb:d8:5a:7e:2c:ee:db:bf:b4:58:13:e4:
         a6:a1:f9:db:74:09:f3:78:9b:9b:d3:23:bc:85:a0:f9:02:b0:
         26:7c:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----