Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jDX-qIVwWIoQBzg612D0tRUsjjM.roa
File:                     jDX-qIVwWIoQBzg612D0tRUsjjM.roa (raw, json)
Hash identifier:          zMBrHZJ+cieOo2erg4O5zNu+kPsAPujUbtOO7OsglaI=
Subject key identifier:   8C:35:FE:A8:85:70:58:8A:10:07:38:3A:D7:60:F4:B5:15:2C:8E:33
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E82C070CE0032AE54B1AE809416E93
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jDX-qIVwWIoQBzg612D0tRUsjjM.roa
Signing time:             Mon 02 Jan 2023 05:15:41 +0000
ROA not before:           Mon 02 Jan 2023 05:15:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213367
IP address blocks:        2a0e:97c0:6e0::/44 maxlen: 48
                          2a0e:97c0:6e0::/48 maxlen: 48
                          2a0e:97c0:6ee::/47 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:2c:07:0c:e0:03:2a:e5:4b:1a:e8:09:41:6e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8c35fea88570588a1007383ad760f4b5152c8e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5e:f2:66:77:36:7b:a2:f7:e2:1e:3b:94:13:
                    83:ed:91:47:66:a4:fa:d7:a1:04:05:54:c4:8d:7b:
                    a0:82:72:fb:c6:70:35:7f:f7:29:64:18:8c:18:13:
                    8a:95:76:29:58:07:6e:70:58:c0:68:d0:9b:3c:d9:
                    66:5c:88:89:0b:ae:74:c3:e2:43:10:7c:8c:9f:40:
                    8b:54:d4:41:eb:1e:3d:b7:2e:99:18:81:a5:8f:72:
                    3b:f1:dc:40:97:f2:75:ed:73:67:00:b5:59:5f:f1:
                    80:42:f7:d5:e6:de:9b:b8:ef:04:03:e9:fb:cd:3c:
                    a7:18:bb:d0:b1:6a:1a:6d:9c:a9:5c:48:4d:9b:2a:
                    06:2c:0c:49:9f:05:fc:21:a5:2e:ae:70:28:3c:42:
                    3b:e3:12:ae:15:df:21:c2:33:a5:c9:79:2c:a1:b3:
                    25:47:01:6c:34:24:b8:48:55:17:7b:08:87:27:cf:
                    3c:2b:22:35:32:5c:27:ad:d6:f0:6b:ce:99:54:54:
                    51:5d:13:af:75:5e:06:24:65:c1:80:d7:ca:7b:dc:
                    d7:1c:3c:aa:45:d6:77:7a:6e:67:64:44:c7:cd:ed:
                    de:f9:ac:9f:98:60:91:3c:2d:37:a0:09:93:06:ae:
                    94:2e:d6:78:3f:83:85:ed:3c:72:12:3b:33:de:5b:
                    a2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:FE:A8:85:70:58:8A:10:07:38:3A:D7:60:F4:B5:15:2C:8E:33
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jDX-qIVwWIoQBzg612D0tRUsjjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:6e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2f:0a:2d:90:70:bc:2f:b3:cc:e1:94:d7:5c:1b:ca:26:7f:ab:
         e8:66:6f:13:8d:03:4b:9b:dd:fd:cc:ae:a2:dd:fd:8f:9b:80:
         6f:e9:02:c2:3d:e6:dc:fb:c0:0c:41:7e:8e:2b:cc:d6:94:e5:
         ab:d5:f0:14:d0:6c:d8:04:7c:9d:84:f0:6a:bf:0e:df:d1:4b:
         ae:f4:bb:6f:f3:3a:32:1e:42:53:00:d4:41:04:53:f2:b9:f2:
         fc:8a:c3:5a:66:8e:43:ad:21:e4:65:9f:e5:00:09:cf:88:40:
         f6:14:e8:a1:c1:7e:08:f9:18:91:08:79:50:03:6e:49:1e:7a:
         96:5c:f5:0d:70:e1:da:bc:49:3f:86:d7:00:12:a3:fc:27:e3:
         33:f4:36:b1:11:2d:58:c7:f4:36:6b:ca:cf:75:b9:db:97:d2:
         99:1a:e9:d0:3d:d3:34:8a:47:7e:c5:7e:2f:ce:3e:36:37:06:
         29:11:c6:d5:9d:b4:48:90:a3:04:46:d2:94:35:25:be:0a:5d:
         67:e6:9e:e6:26:17:6e:04:1c:a5:a0:75:34:83:0e:73:a3:4c:
         43:48:94:56:94:db:e1:5d:2f:38:5c:65:90:2e:63:16:aa:25:
         68:4e:0e:73:23:0e:de:96:ef:4c:a5:4c:26:af:29:1b:57:98:
         63:06:c9:31
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw6CwHDOADKuVLGugJQW6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzM1ZmVhODg1NzA1ODhhMTAwNzM4M2FkNzYwZjRiNTE1MmM4ZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi17yZnc2e6L34h47lBOD7ZFHZqT6
16EEBVTEjXuggnL7xnA1f/cpZBiMGBOKlXYpWAducFjAaNCbPNlmXIiJC650w+JD
EHyMn0CLVNRB6x49ty6ZGIGlj3I78dxAl/J17XNnALVZX/GAQvfV5t6buO8EA+n7
zTynGLvQsWoabZypXEhNmyoGLAxJnwX8IaUurnAoPEI74xKuFd8hwjOlyXksobMl
RwFsNCS4SFUXewiHJ888KyI1Mlwnrdbwa86ZVFRRXROvdV4GJGXBgNfKe9zXHDyq
RdZ3em5nZETHze3e+ayfmGCRPC03oAmTBq6ULtZ4P4OF7TxyEjsz3luiGQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIw1/qiFcFiKEAc4Otdg9LUVLI4zMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvakRYLXFJVndXSW9RQnpnNjEyRDB0UlVzampNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAbg
MA0GCSqGSIb3DQEBCwUAA4IBAQAvCi2QcLwvs8zhlNdcG8omf6voZm8TjQNLm939
zK6i3f2Pm4Bv6QLCPebc+8AMQX6OK8zWlOWr1fAU0GzYBHydhPBqvw7f0Uuu9Ltv
8zoyHkJTANRBBFPyufL8isNaZo5DrSHkZZ/lAAnPiED2FOihwX4I+RiRCHlQA25J
HnqWXPUNcOHavEk/htcAEqP8J+Mz9DaxES1Yx/Q2a8rPdbnbl9KZGunQPdM0ikd+
xX4vzj42NwYpEcbVnbRIkKMERtKUNSW+Cl1n5p7mJhduBByloHU0gw5zo0xDSJRW
lNvhXS84XGWQLmMWqiVoTg5zIw7elu9MpUwmrykbV5hjBskx
-----END CERTIFICATE-----