Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hwe5H4zGJzoHEgPkgJSKiEMJECA.roa
File:                     hwe5H4zGJzoHEgPkgJSKiEMJECA.roa (raw, json)
Hash identifier:          V5GLq3Dp6XlzFv+exRs+ZWIUfQg1p5wPVAjA4LeDBgI=
Subject key identifier:   87:07:B9:1F:8C:C6:27:3A:07:12:03:E4:80:94:8A:88:43:09:10:20
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018685850FF8049A4374A96A9958ADFB00FD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hwe5H4zGJzoHEgPkgJSKiEMJECA.roa
Signing time:             Fri 24 Feb 2023 22:22:15 +0000
ROA not before:           Fri 24 Feb 2023 22:22:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210397
IP address blocks:        2a0e:97c0:78f::/48 maxlen: 48
                          2a0e:97c0:78a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:85:85:0f:f8:04:9a:43:74:a9:6a:99:58:ad:fb:00:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 24 22:22:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8707b91f8cc6273a071203e480948a8843091020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1d:e9:79:70:26:79:a3:dc:74:02:f3:63:18:
                    fb:7e:03:c7:85:de:8f:24:6a:36:29:ca:85:f3:24:
                    3b:eb:30:f2:8b:8d:b1:3b:99:7b:f8:6f:cf:ab:e0:
                    c7:e9:6a:76:90:60:5d:10:0b:90:1b:fe:e5:c8:4a:
                    48:7e:05:b2:2b:b6:8e:4e:62:ab:31:28:93:97:b6:
                    eb:9a:7e:1f:03:53:9e:30:b8:4b:85:94:47:75:52:
                    b4:86:fd:c2:0f:73:d3:55:a1:2a:b2:26:91:38:d1:
                    e1:af:fb:1d:79:05:e0:80:43:1e:9f:e2:23:9d:d4:
                    6f:59:1e:41:2b:58:04:ce:f1:87:37:a5:ed:28:14:
                    ed:25:3d:be:65:fe:df:6a:e8:89:1e:82:df:ea:e3:
                    f6:5d:a3:d9:a7:ce:59:2d:36:53:3e:6c:79:be:4b:
                    76:54:22:2b:b2:54:1a:5a:49:af:cc:63:91:93:13:
                    f1:ca:a2:a7:92:5e:f8:01:84:b2:7a:5f:df:d0:c7:
                    3f:de:76:7c:1e:fa:a2:0d:ea:11:a8:c8:8c:3f:d6:
                    9d:9f:91:f9:44:9b:f6:c2:0b:28:3d:f1:50:99:12:
                    24:3b:f7:31:9e:19:49:d1:9e:23:dd:99:6f:7a:ef:
                    a6:20:c2:52:d9:06:cd:ae:50:5f:42:82:98:37:31:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:07:B9:1F:8C:C6:27:3A:07:12:03:E4:80:94:8A:88:43:09:10:20
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hwe5H4zGJzoHEgPkgJSKiEMJECA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:78a::/48
                  2a0e:97c0:78f::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:80:ff:7c:5d:cb:bb:36:06:79:3d:fb:3d:a7:56:4d:95:
         92:54:6b:23:9b:11:57:e3:92:60:f4:e4:88:02:1d:85:4f:ea:
         b2:62:61:02:d7:7d:48:e2:7f:78:af:bd:d0:39:84:15:d2:42:
         6f:e9:fd:df:38:00:db:97:03:b9:32:aa:54:31:a0:d3:27:69:
         51:a4:49:1d:c7:a3:ae:6d:2f:06:5d:68:78:13:e2:cf:b8:f6:
         06:7c:3f:48:c8:65:d7:ed:d0:cb:09:51:76:10:b5:da:08:27:
         76:47:fb:64:6e:4e:2b:89:c4:51:05:40:de:82:1b:10:2e:04:
         80:43:78:64:ce:92:0f:52:1f:21:a3:e5:ed:1c:69:f5:92:e5:
         b1:f4:ac:b6:a0:65:b8:be:14:44:3b:da:67:5e:3a:0c:6c:20:
         d9:c7:a1:2f:4f:90:54:61:a1:c4:a3:c0:3e:38:37:8f:b2:a4:
         04:a0:55:4b:b6:b9:6d:e2:82:90:d3:56:e3:38:4f:25:d9:29:
         64:75:96:ea:e7:37:b2:e4:f5:86:26:b2:79:1f:c7:f6:a4:f5:
         48:b2:1e:ab:d9:0a:51:9a:28:ab:37:6f:58:71:dc:52:07:7a:
         c2:97:12:7e:5f:fe:0a:1f:0c:1d:ea:75:fb:12:cb:2d:9d:54:
         bd:6f:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----