Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iT40tNWgct9bKTYlTH9OpMHfM-o.roa
File:                     iT40tNWgct9bKTYlTH9OpMHfM-o.roa (raw, json)
Hash identifier:          WzIIO1cegBmLC29mVjpbz1GTNZg3aMXs7kq/anVcTe4=
Subject key identifier:   89:3E:34:B4:D5:A0:72:DF:5B:29:36:25:4C:7F:4E:A4:C1:DF:33:EA
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E81C6D8B8E56AEF02AA535D5A84386
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iT40tNWgct9bKTYlTH9OpMHfM-o.roa
Signing time:             Mon 02 Jan 2023 05:15:37 +0000
ROA not before:           Mon 02 Jan 2023 05:15:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212746
IP address blocks:        2a0e:b107:d00::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:1c:6d:8b:8e:56:ae:f0:2a:a5:35:d5:a8:43:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=893e34b4d5a072df5b2936254c7f4ea4c1df33ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:e1:8a:94:37:ba:ee:7c:8f:10:e7:8a:bb:
                    90:d6:16:0a:0a:fa:ca:a3:35:a9:9e:e1:7e:13:3d:
                    87:5d:79:8f:16:03:48:08:33:2a:9d:2f:9a:a7:db:
                    cc:3d:40:06:ff:41:2e:bb:ac:af:07:28:39:66:cf:
                    d8:b3:8e:43:91:51:77:fe:2f:da:27:72:01:bc:43:
                    28:3e:59:c3:c0:e6:fa:8a:69:fa:62:8c:2f:5d:98:
                    9c:e5:56:53:5c:d6:9d:13:bb:d8:44:75:c5:b7:30:
                    34:37:fe:1c:d8:a6:0e:ec:16:9c:5b:fa:6d:d2:73:
                    14:1e:d6:06:5b:aa:58:f6:71:8c:5b:2a:fa:df:67:
                    c2:3b:ad:45:f7:bc:e5:7f:08:b4:ef:01:32:71:51:
                    65:31:5f:98:62:0e:fe:e2:eb:ce:85:63:ad:28:03:
                    b0:8d:6b:fb:90:6f:45:4e:3d:11:b1:91:fa:85:3c:
                    66:21:c5:47:9e:cd:f3:c1:f0:fc:d5:36:84:7c:81:
                    7d:5f:91:50:d1:10:92:31:3a:9a:bb:5b:a2:3f:16:
                    db:8f:b1:7d:c5:71:3e:15:15:e3:78:1b:d0:c5:42:
                    cf:d5:5b:1a:99:6a:cb:40:c9:9d:2f:83:f5:95:54:
                    81:d3:0e:c4:2e:2c:4b:4c:5f:87:f1:b5:2a:b3:15:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3E:34:B4:D5:A0:72:DF:5B:29:36:25:4C:7F:4E:A4:C1:DF:33:EA
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iT40tNWgct9bKTYlTH9OpMHfM-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:d00::/44

    Signature Algorithm: sha256WithRSAEncryption
         03:27:ad:93:fc:7a:f8:27:21:9a:97:06:d8:bd:0f:3c:8b:7c:
         2a:7a:bb:a1:5b:76:d9:b4:1e:4a:ab:8e:78:21:bc:f1:99:66:
         80:0c:d2:2b:29:07:df:76:f1:4d:71:b5:65:75:bd:d7:fa:1d:
         51:4b:43:2f:0d:92:6a:5b:a4:74:db:66:46:78:c9:5e:9f:54:
         2d:ca:9b:70:a1:ac:97:3e:92:5b:bc:e8:d1:a5:03:ba:04:84:
         66:ac:0e:18:50:17:43:4c:3b:c3:f9:4d:ce:98:92:2c:c0:fd:
         32:9c:c2:0b:7d:af:19:57:75:b9:ce:b3:28:c1:23:5d:ed:f4:
         09:3a:5d:e8:47:ff:18:39:f2:3a:76:e3:3f:be:c3:7a:f7:7d:
         8a:cd:2d:78:1d:39:19:b1:f9:79:2e:67:59:19:a9:f4:7e:b1:
         48:8f:d4:49:bc:60:65:88:9e:8b:38:65:2e:d5:c3:82:0b:5f:
         f0:46:f4:b3:52:3c:00:e2:f1:0f:94:2e:78:d9:21:11:10:58:
         b4:bc:9a:e4:cd:f0:05:11:0c:9c:1b:c2:14:eb:01:b4:5c:f6:
         c5:f7:ed:d6:13:d6:91:11:b5:71:0d:06:28:94:4e:cf:ae:ec:
         e5:73:d3:d5:97:36:8d:6a:4c:dc:9f:08:0e:aa:58:fb:5d:64:
         48:7b:5f:f9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw6Bxti45WrvAqpTXVqEOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTNlMzRiNGQ1YTA3MmRmNWIyOTM2MjU0YzdmNGVhNGMxZGYzM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/HhipQ3uu58jxDniruQ1hYKCvrK
ozWpnuF+Ez2HXXmPFgNICDMqnS+ap9vMPUAG/0Euu6yvByg5Zs/Ys45DkVF3/i/a
J3IBvEMoPlnDwOb6imn6YowvXZic5VZTXNadE7vYRHXFtzA0N/4c2KYO7BacW/pt
0nMUHtYGW6pY9nGMWyr632fCO61F97zlfwi07wEycVFlMV+YYg7+4uvOhWOtKAOw
jWv7kG9FTj0RsZH6hTxmIcVHns3zwfD81TaEfIF9X5FQ0RCSMTqau1uiPxbbj7F9
xXE+FRXjeBvQxULP1VsamWrLQMmdL4P1lVSB0w7ELixLTF+H8bUqsxWewQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIk+NLTVoHLfWyk2JUx/TqTB3zPqMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvaVQ0MHROV2djdDliS1RZbFRIOU9wTUhmTS1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBw0A
MA0GCSqGSIb3DQEBCwUAA4IBAQADJ62T/Hr4JyGalwbYvQ88i3wqeruhW3bZtB5K
q454IbzxmWaADNIrKQffdvFNcbVldb3X+h1RS0MvDZJqW6R022ZGeMlen1Qtyptw
oayXPpJbvOjRpQO6BIRmrA4YUBdDTDvD+U3OmJIswP0ynMILfa8ZV3W5zrMowSNd
7fQJOl3oR/8YOfI6duM/vsN6932KzS14HTkZsfl5LmdZGan0frFIj9RJvGBliJ6L
OGUu1cOCC1/wRvSzUjwA4vEPlC542SEREFi0vJrkzfAFEQycG8IU6wG0XPbF9+3W
E9aREbVxDQYolE7Pruzlc9PVlzaNakzcnwgOqlj7XWRIe1/5
-----END CERTIFICATE-----