Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j1t6yn342yullAskos5gwd-n7JY.roa
File:                     j1t6yn342yullAskos5gwd-n7JY.roa (raw, json)
Hash identifier:          Rdu0ugZ7mWodweuj/oJdL/FzB8LofcmV3zIiJ50Xqyo=
Subject key identifier:   8F:5B:7A:CA:7D:F8:DB:2B:A5:94:0B:24:A2:CE:60:C1:DF:A7:EC:96
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7EA2AB6A32AD860BABE18620297A9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j1t6yn342yullAskos5gwd-n7JY.roa
Signing time:             Mon 02 Jan 2023 05:15:25 +0000
ROA not before:           Mon 02 Jan 2023 05:15:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210503
IP address blocks:        2a0e:97c0:630::/48 maxlen: 48
                          2a0e:97c0:63f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:ea:2a:b6:a3:2a:d8:60:ba:be:18:62:02:97:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f5b7aca7df8db2ba5940b24a2ce60c1dfa7ec96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:90:5b:a4:17:86:fd:4c:51:92:1e:cf:2a:
                    1d:00:fa:51:73:b5:86:af:8e:01:18:46:78:4c:ad:
                    04:38:40:a6:ce:fb:ac:cb:70:8b:29:ba:5b:99:6b:
                    7f:a2:23:ab:08:e3:bd:1a:e1:d8:83:77:de:93:df:
                    6c:58:e7:60:0a:2d:ff:24:1b:1d:bb:bb:7c:bf:cb:
                    45:aa:d7:8b:7c:f2:20:83:78:64:84:27:99:8c:94:
                    69:73:1e:33:20:ca:3e:1f:81:44:a0:20:4c:67:da:
                    cd:b0:fb:70:d4:0a:1f:23:f6:f1:93:cd:d5:5c:d0:
                    24:e9:ed:63:f4:15:66:f6:4c:2d:72:a5:ee:b2:bd:
                    2f:e9:62:52:c9:1f:c3:e7:aa:52:1b:74:23:df:6b:
                    24:10:75:a1:fa:b4:6a:44:57:0c:e0:d0:5a:da:94:
                    56:ec:c7:08:7b:f5:76:26:cd:3e:6c:48:14:ed:c1:
                    5c:8c:f8:5b:21:26:e2:cd:f0:91:e0:52:bd:c6:33:
                    80:c2:6a:ae:d7:3f:ef:02:a8:90:74:dc:2e:88:57:
                    d3:af:e9:a8:4d:4f:eb:20:23:d0:6a:ae:d5:71:75:
                    71:73:70:c7:e6:13:d2:db:3d:2c:8c:81:34:70:de:
                    6a:e5:d5:86:0a:15:f3:a0:7a:ab:e4:44:a6:c1:f5:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5B:7A:CA:7D:F8:DB:2B:A5:94:0B:24:A2:CE:60:C1:DF:A7:EC:96
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j1t6yn342yullAskos5gwd-n7JY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:630::/48
                  2a0e:97c0:63f::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:8a:67:0f:60:bc:48:95:37:9e:1b:a1:f3:15:05:03:d1:bf:
         e5:5e:8f:8a:a6:40:b1:c9:c9:be:4b:a2:7f:4a:a9:d2:3f:47:
         31:8b:48:66:87:ff:88:8c:14:4f:f9:67:33:86:3e:46:70:bb:
         72:2e:6c:12:0f:a8:80:b5:74:18:b7:c6:ff:6f:35:5e:81:59:
         5e:88:d3:40:22:ca:76:d7:57:0e:0d:6c:7e:53:53:e9:61:7e:
         04:5b:10:19:d2:2a:a2:f9:73:b3:35:f7:07:61:4b:9a:d1:56:
         ed:dd:78:0d:b0:21:6b:f7:28:f3:e0:3b:94:56:25:ce:ec:2b:
         3c:67:1d:1f:56:3e:3a:77:cb:db:75:37:d9:b5:82:32:5c:a2:
         ec:1f:ba:24:05:e3:94:62:8c:f4:56:e1:1f:7e:e1:a6:1f:a5:
         38:2c:c2:6e:1f:05:58:be:01:38:f3:4a:56:eb:c4:59:a0:b1:
         b4:00:2a:eb:16:82:1b:ae:9e:e8:a1:4e:88:b9:f4:90:81:37:
         bc:04:68:9b:16:5c:92:cb:5b:b2:82:94:b1:3f:58:65:0b:f9:
         09:f9:79:59:2d:2b:90:4d:34:b5:05:34:7a:37:90:3c:05:74:
         12:9e:14:e7:06:55:2f:f9:bd:81:cb:27:8a:b7:ba:2c:6e:b2:
         ea:66:19:80
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVw5+oqtqMq2GC6vhhiApepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjViN2FjYTdkZjhkYjJiYTU5NDBiMjRhMmNlNjBjMWRmYTdlYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4CQW6QXhv1MUZIezyodAPpRc7WG
r44BGEZ4TK0EOECmzvusy3CLKbpbmWt/oiOrCOO9GuHYg3fek99sWOdgCi3/JBsd
u7t8v8tFqteLfPIgg3hkhCeZjJRpcx4zIMo+H4FEoCBMZ9rNsPtw1AofI/bxk83V
XNAk6e1j9BVm9kwtcqXusr0v6WJSyR/D56pSG3Qj32skEHWh+rRqRFcM4NBa2pRW
7McIe/V2Js0+bEgU7cFcjPhbISbizfCR4FK9xjOAwmqu1z/vAqiQdNwuiFfTr+mo
TU/rICPQaq7VcXVxc3DH5hPS2z0sjIE0cN5q5dWGChXzoHqr5ESmwfVTvQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI9besp9+NsrpZQLJKLOYMHfp+yWMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvajF0NnluMzQyeXVsbEFza29zNWd3ZC1uN0pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6XwAYw
AwcAKg6XwAY/MA0GCSqGSIb3DQEBCwUAA4IBAQCqimcPYLxIlTeeG6HzFQUD0b/l
Xo+KpkCxycm+S6J/SqnSP0cxi0hmh/+IjBRP+Wczhj5GcLtyLmwSD6iAtXQYt8b/
bzVegVleiNNAIsp211cODWx+U1PpYX4EWxAZ0iqi+XOzNfcHYUua0Vbt3XgNsCFr
9yjz4DuUViXO7Cs8Zx0fVj46d8vbdTfZtYIyXKLsH7okBeOUYoz0VuEffuGmH6U4
LMJuHwVYvgE480pW68RZoLG0ACrrFoIbrp7ooU6IufSQgTe8BGibFlySy1uygpSx
P1hlC/kJ+XlZLSuQTTS1BTR6N5A8BXQSnhTnBlUv+b2ByyeKt7osbrLqZhmA
-----END CERTIFICATE-----