Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/inuQzlEmIYDua06FfBwI7VK3HC8.roa
File:                     inuQzlEmIYDua06FfBwI7VK3HC8.roa (raw, json)
Hash identifier:          odOUbDtCG6fM607YZl7xlh0UrrqNUFf1BD1Yv28nhG0=
Subject key identifier:   8A:7B:90:CE:51:26:21:80:EE:6B:4E:85:7C:1C:08:ED:52:B7:1C:2F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018C5ECCC3D720806374F853426BB1F144BD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/inuQzlEmIYDua06FfBwI7VK3HC8.roa
Signing time:             Tue 12 Dec 2023 16:12:06 +0000
ROA not before:           Tue 12 Dec 2023 16:12:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215849
IP address blocks:        2a0e:b107:2830::/45 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5e:cc:c3:d7:20:80:63:74:f8:53:42:6b:b1:f1:44:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec 12 16:12:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8a7b90ce51262180ee6b4e857c1c08ed52b71c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:96:f9:a8:01:07:02:4f:44:84:cf:51:ce:
                    13:f1:60:ee:2c:df:de:a6:04:f3:e5:4b:d1:ff:21:
                    db:6b:7d:33:d9:9f:22:91:11:8d:a9:29:94:3f:22:
                    d0:2c:dc:ab:72:7b:5e:c5:11:cf:77:51:19:0d:e5:
                    ba:5d:d5:dd:f5:58:4b:44:f5:3b:56:8f:b8:a8:a9:
                    c9:62:b2:98:7d:88:f0:57:b0:9c:3e:30:b5:4b:1c:
                    94:19:eb:e9:e2:7e:ca:c3:63:85:95:d6:95:ac:aa:
                    b2:f8:a4:d8:49:91:4d:85:88:77:46:ac:65:39:93:
                    ec:52:15:3f:20:0e:2c:06:41:c8:3e:e5:cd:c1:f9:
                    38:4a:4d:5b:9d:f1:e2:b0:95:c2:8d:b4:b1:fd:ab:
                    57:70:9a:dd:58:f8:98:4b:83:3a:8c:c6:20:b2:d9:
                    dc:22:9f:f3:b3:a9:f1:0d:13:6c:3c:12:07:7d:f1:
                    d4:67:5c:fb:86:19:43:9b:8d:4a:43:6a:dd:a6:e2:
                    fc:b5:0b:d9:f8:cd:9c:b2:62:4d:cf:d9:2f:85:58:
                    54:38:49:ae:a3:04:de:2c:df:72:a4:54:e7:f9:df:
                    02:db:9b:56:34:25:43:ca:7b:7e:f6:eb:67:15:a2:
                    df:f8:06:cf:88:63:55:ea:bd:68:6c:42:cf:dd:a3:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7B:90:CE:51:26:21:80:EE:6B:4E:85:7C:1C:08:ED:52:B7:1C:2F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/inuQzlEmIYDua06FfBwI7VK3HC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:2830::/45

    Signature Algorithm: sha256WithRSAEncryption
         4b:5c:02:4e:a4:32:74:ae:c0:33:27:e7:bf:29:96:a5:83:e2:
         89:5e:cf:95:8f:ca:c1:57:48:61:90:11:69:04:b1:40:d8:7c:
         47:2a:db:3b:36:ac:37:5e:e6:81:f6:2a:fc:59:4e:29:cb:da:
         a0:a3:25:87:dc:b4:ae:3d:d9:64:70:5a:a2:4a:9f:3e:0a:fe:
         fa:16:d6:69:75:f5:08:8a:45:33:6c:9e:14:9f:ee:ef:bf:11:
         6d:93:56:6e:ab:0c:14:39:17:95:a1:5b:8e:a4:4d:1d:1b:0f:
         4f:41:58:4e:c9:24:c4:48:f6:41:2f:0c:18:7d:b2:81:f1:10:
         6e:a2:bd:22:97:bc:5e:f3:54:35:d6:dd:f6:78:2f:45:75:db:
         3f:45:79:3f:95:15:4e:51:f2:45:07:47:f1:0e:e5:5d:df:a2:
         83:43:06:86:4f:fc:26:2b:09:8f:b8:33:69:ed:0e:3b:77:ec:
         5f:69:90:11:ad:96:74:e8:73:cb:60:5f:3a:26:c9:df:7d:4d:
         da:60:07:dd:26:26:f7:cf:f6:14:66:0c:7a:c8:ae:93:c3:b1:
         14:97:7f:f5:82:fd:e8:38:b4:e8:64:f7:21:f6:5b:af:ce:e9:
         3d:26:90:58:c1:ab:7f:bf:72:73:0f:e2:73:45:23:f5:53:a0:
         2c:4a:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----