Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gK6LneZx2-kUKV7JZKjTP4YXiyE.roa
File:                     gK6LneZx2-kUKV7JZKjTP4YXiyE.roa (raw, json)
Hash identifier:          Dyd7+kzmPfd08pGX/lcpNq7fsta+UWLlemboSE8O4a8=
Subject key identifier:   80:AE:8B:9D:E6:71:DB:E9:14:29:5E:C9:64:A8:D3:3F:86:17:8B:21
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0188632CDF2D8321C94BC6474BA0A8BB3E3F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gK6LneZx2-kUKV7JZKjTP4YXiyE.roa
Signing time:             Sun 28 May 2023 16:24:24 +0000
ROA not before:           Sun 28 May 2023 16:24:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41720
IP address blocks:        2a0e:97c1:100::/46 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:63:2c:df:2d:83:21:c9:4b:c6:47:4b:a0:a8:bb:3e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 28 16:24:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=80ae8b9de671dbe914295ec964a8d33f86178b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:84:b7:3b:2f:a3:96:96:88:d3:45:5c:81:
                    ba:ad:a8:b1:90:6e:5f:45:8c:40:e3:2f:f9:72:f4:
                    1f:b4:7e:6c:2b:7c:12:40:24:ae:6a:e4:51:03:d3:
                    ba:6a:ee:21:de:49:5f:90:b9:73:e0:7a:54:75:db:
                    f0:10:f9:96:98:ac:c8:e6:53:35:39:36:e9:57:d3:
                    14:51:0b:e8:c0:96:5a:9e:07:07:05:a1:28:29:1c:
                    06:4e:f3:53:79:6b:f3:69:bd:71:f8:d3:05:80:e5:
                    83:13:ed:a6:ad:96:45:1b:b8:db:5c:2f:9b:c3:55:
                    2f:6d:8f:62:54:8a:6c:92:36:97:a7:41:63:be:7e:
                    0e:09:cd:96:f7:b8:99:9c:51:0f:23:a3:07:ba:13:
                    6b:a5:fb:5a:0b:c9:7e:e6:4d:be:a8:9a:f1:66:7f:
                    cd:f5:dd:3b:3a:e7:01:05:c8:0c:0d:42:be:6a:d9:
                    56:11:12:04:d2:9c:e6:dc:6e:63:f1:7a:1b:3f:76:
                    bd:23:f4:4c:89:10:7f:a9:7f:88:8b:aa:d5:61:5e:
                    1c:73:50:52:9a:cd:d3:28:00:86:a5:d4:9d:ae:5d:
                    58:b8:8a:6d:c8:eb:02:0d:3f:52:6c:ae:fb:5d:a0:
                    70:6d:40:2a:72:1b:8b:70:a5:13:2b:25:f1:68:3f:
                    32:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AE:8B:9D:E6:71:DB:E9:14:29:5E:C9:64:A8:D3:3F:86:17:8B:21
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gK6LneZx2-kUKV7JZKjTP4YXiyE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c1:100::/46

    Signature Algorithm: sha256WithRSAEncryption
         2d:b2:75:cc:01:c0:0f:ce:36:70:c0:eb:66:ab:b6:62:33:60:
         85:a5:9d:8e:b6:a7:df:08:7c:6d:cd:09:8c:ef:e4:2b:5b:e4:
         90:5f:45:af:33:e5:ae:7f:c3:90:4f:72:9c:69:ca:21:60:1c:
         52:a9:02:69:66:c3:20:b1:02:b7:50:52:6f:b0:b0:24:20:17:
         ed:2c:87:7d:cc:da:da:36:2c:9c:7c:7c:ae:46:5c:05:3f:9a:
         fb:81:59:91:25:c3:83:76:06:ef:24:8d:71:bc:8c:ab:2f:d6:
         56:ec:31:86:1d:d3:a4:1a:31:e4:c1:0d:cd:7c:00:28:44:b3:
         a4:c0:0a:6e:7d:7c:5d:a4:98:c0:83:0f:fc:53:57:ba:21:84:
         6d:07:c0:df:0a:31:11:a2:cc:a1:2f:c4:4a:3b:ba:f0:f3:91:
         4a:68:9d:e2:ef:d6:8c:48:ba:de:25:ae:c2:89:9c:f9:48:49:
         1f:f3:92:25:d9:b0:dc:2e:f7:fb:f8:4c:44:4f:45:d8:fe:79:
         34:02:a8:bd:34:40:82:1f:75:97:8b:bc:2c:78:c9:bd:af:be:
         11:65:fc:4a:9d:2c:9c:a8:64:07:6e:dc:1b:cd:c1:52:06:92:
         9e:5c:da:de:1a:8c:9c:17:69:1d:b9:7a:f7:2c:ca:06:52:5f:
         3c:40:e5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----