Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gTzuyRptDuKdQ92-wvzvcG3vL_c.roa
File:                     gTzuyRptDuKdQ92-wvzvcG3vL_c.roa (raw, json)
Hash identifier:          nYgB5jZAX2TwmO7LgyM8bFuFv6cTpYdYssFCs6c6Yqo=
Subject key identifier:   81:3C:EE:C9:1A:6D:0E:E2:9D:43:DD:BE:C2:FC:EF:70:6D:EF:2F:F7
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AB8C68F416C15FD103EDF356DCC86
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gTzuyRptDuKdQ92-wvzvcG3vL_c.roa
Signing time:             Tue 24 Jan 2023 16:09:34 +0000
ROA not before:           Tue 24 Jan 2023 16:09:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a0e:b107:19a0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:b8:c6:8f:41:6c:15:fd:10:3e:df:35:6d:cc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=813ceec91a6d0ee29d43ddbec2fcef706def2ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:11:1c:5e:63:63:87:a8:a2:27:be:ff:da:2d:
                    07:a7:94:b1:90:b2:df:9f:4a:81:1e:db:e9:dd:03:
                    17:7b:3b:ec:fe:92:66:24:0a:19:f3:bd:96:d4:43:
                    7e:dd:c3:2c:3a:d5:4b:d7:b7:1e:e1:96:fb:04:37:
                    09:c6:db:98:7a:45:3d:ef:8c:19:fb:10:c9:72:af:
                    b5:8b:e8:a4:8e:7c:23:48:cd:d5:62:38:11:d1:ef:
                    e3:a2:15:c6:53:55:e7:3a:2e:65:9f:f6:20:ea:09:
                    91:5a:7b:c3:94:01:c7:66:41:5a:50:6e:27:6a:2c:
                    0b:e5:66:c4:a9:98:57:65:bd:0f:90:f7:14:29:17:
                    98:22:39:d4:dd:9e:50:42:c8:3b:13:4e:84:f4:1e:
                    ef:97:25:f7:0d:7b:24:0c:e2:aa:23:89:50:16:7d:
                    12:64:34:a3:0c:e8:ae:0a:fc:c9:b7:03:a4:be:75:
                    c1:d9:8a:81:75:1d:00:84:60:e7:21:21:b9:7c:89:
                    2b:88:11:c3:3d:e6:ce:8e:60:d3:81:db:03:de:e8:
                    43:db:58:89:b1:f8:b0:98:69:c0:2c:a5:c6:47:f6:
                    a8:78:d8:55:c6:27:a3:36:96:02:58:1f:08:6f:a8:
                    63:a2:ca:39:9b:7a:9a:a1:ba:5e:52:a1:10:8f:54:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3C:EE:C9:1A:6D:0E:E2:9D:43:DD:BE:C2:FC:EF:70:6D:EF:2F:F7
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gTzuyRptDuKdQ92-wvzvcG3vL_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:19a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:d0:49:75:c9:41:34:a3:ed:00:a1:b4:77:2b:6a:51:35:66:
         2b:1a:b3:c2:e1:60:f3:7e:e5:c1:49:34:6e:04:c4:f0:6f:b1:
         db:97:ad:83:ad:be:82:94:6b:1a:47:ac:7e:4f:72:f2:43:db:
         50:5b:16:b9:7e:45:36:25:42:b4:75:2d:bf:fe:96:9d:af:b5:
         c7:e2:c2:dc:48:db:f6:99:6a:b6:86:fd:fd:44:0a:c5:74:78:
         4d:58:15:21:eb:d7:7d:30:2f:a2:24:bc:14:0c:2c:44:87:d3:
         26:d9:a3:1e:f2:0c:45:c1:8f:9b:7a:40:71:0d:cf:3b:51:b5:
         b5:af:dd:7c:ac:c1:e3:b5:9c:92:c0:b4:91:a9:7f:93:0f:c0:
         e5:bd:a7:71:09:63:7d:6e:31:61:57:5e:b1:1b:f7:51:c5:51:
         61:a1:61:61:27:89:af:52:7f:20:25:d7:ad:f3:31:7c:e0:61:
         72:e8:36:de:f2:ff:9f:09:15:c5:e5:ef:d9:91:39:5f:23:00:
         8f:ef:d3:07:3e:b3:04:fe:08:94:ff:73:da:d9:2d:c0:84:f7:
         bc:05:b6:ac:5f:99:a0:5f:37:1f:62:7e:23:ed:94:13:05:fb:
         e9:32:94:7f:f0:44:0f:f7:1a:8b:c3:85:52:1d:f9:2f:29:1e:
         44:49:b6:38
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXkirjGj0FsFf0QPt81bcyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTNjZWVjOTFhNmQwZWUyOWQ0M2RkYmVjMmZjZWY3MDZkZWYyZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgREcXmNjh6iiJ77/2i0Hp5SxkLLf
n0qBHtvp3QMXezvs/pJmJAoZ872W1EN+3cMsOtVL17ce4Zb7BDcJxtuYekU974wZ
+xDJcq+1i+ikjnwjSM3VYjgR0e/johXGU1XnOi5ln/Yg6gmRWnvDlAHHZkFaUG4n
aiwL5WbEqZhXZb0PkPcUKReYIjnU3Z5QQsg7E06E9B7vlyX3DXskDOKqI4lQFn0S
ZDSjDOiuCvzJtwOkvnXB2YqBdR0AhGDnISG5fIkriBHDPebOjmDTgdsD3uhD21iJ
sfiwmGnALKXGR/aoeNhVxiejNpYCWB8Ib6hjoso5m3qaobpeUqEQj1St+wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIE87skabQ7inUPdvsL873Bt7y/3MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZ1R6dXlScHREdUtkUTkyLXd2enZjRzN2TF9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxmg
MA0GCSqGSIb3DQEBCwUAA4IBAQA20El1yUE0o+0AobR3K2pRNWYrGrPC4WDzfuXB
STRuBMTwb7Hbl62Drb6ClGsaR6x+T3LyQ9tQWxa5fkU2JUK0dS2//padr7XH4sLc
SNv2mWq2hv39RArFdHhNWBUh69d9MC+iJLwUDCxEh9Mm2aMe8gxFwY+bekBxDc87
UbW1r918rMHjtZySwLSRqX+TD8DlvadxCWN9bjFhV16xG/dRxVFhoWFhJ4mvUn8g
Jdet8zF84GFy6Dbe8v+fCRXF5e/ZkTlfIwCP79MHPrME/giU/3Pa2S3AhPe8Bbas
X5mgXzcfYn4j7ZQTBfvpMpR/8EQP9xqLw4VSHfkvKR5ESbY4
-----END CERTIFICATE-----