Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jES5boBjPkVb4XccoEIlFqWL9Hk.roa
File:                     jES5boBjPkVb4XccoEIlFqWL9Hk.roa (raw, json)
Hash identifier:          IcxeftPYQ38C0Xm3Dwjx/foT5cpwOLn4Kf9fbUHNrBM=
Subject key identifier:   8C:44:B9:6E:80:63:3E:45:5B:E1:77:1C:A0:42:25:16:A5:8B:F4:79
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E78E0F567D97BAB205269DC2559111
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jES5boBjPkVb4XccoEIlFqWL9Hk.roa
Signing time:             Mon 02 Jan 2023 05:15:01 +0000
ROA not before:           Mon 02 Jan 2023 05:15:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        2a0e:97c0:b33::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:8e:0f:56:7d:97:ba:b2:05:26:9d:c2:55:91:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8c44b96e80633e455be1771ca0422516a58bf479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6a:8c:00:0b:68:0c:3d:f0:53:39:e6:2d:98:
                    da:c1:ee:c5:c0:b4:0f:d4:1a:35:30:7a:bf:27:83:
                    0f:30:5e:bb:59:01:55:a4:9a:35:dd:13:88:c5:6f:
                    d6:dc:ed:e8:e0:e9:92:2f:55:d6:6e:8b:b4:63:3b:
                    e3:a7:84:ef:dc:65:0c:6b:d2:0a:ed:27:a3:60:0c:
                    52:84:2d:d2:d6:a9:a8:56:1c:49:46:31:cd:99:15:
                    5e:13:ac:4b:b7:21:3c:44:1e:17:8c:60:45:e0:81:
                    01:12:f0:30:1d:3d:7b:b3:13:6c:7c:4c:6e:68:d9:
                    a8:8e:56:89:c8:87:29:dc:60:7b:d5:04:de:1c:25:
                    58:27:0e:89:3e:8b:2f:7e:03:51:ea:72:eb:7d:8e:
                    15:c4:43:c5:ce:2b:a9:47:a7:51:c7:02:c5:14:1b:
                    2b:6b:b8:05:7b:d6:39:fe:e5:36:a1:61:ae:82:8e:
                    59:7c:3e:b8:1d:d6:c6:ba:bd:a2:1d:83:4b:14:09:
                    7b:95:94:fc:5b:68:9c:71:70:05:e5:b5:b4:6e:82:
                    d6:4f:46:94:9a:ba:cd:4b:69:f7:41:b5:cd:fa:0b:
                    26:d4:80:60:ee:f4:dd:b5:9a:7e:c8:bb:99:3d:5f:
                    da:da:cc:8f:51:53:64:d1:7f:a4:80:7c:3b:40:54:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:44:B9:6E:80:63:3E:45:5B:E1:77:1C:A0:42:25:16:A5:8B:F4:79
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jES5boBjPkVb4XccoEIlFqWL9Hk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:b33::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:f2:0a:3a:a0:5f:65:7d:c0:b4:ab:fe:78:f0:38:17:c1:3a:
         c6:23:03:1b:e0:26:97:cd:b6:19:18:16:5f:6b:7c:c1:31:ee:
         5c:91:11:e3:77:b0:c0:af:1c:c3:2d:2d:d4:23:30:fb:1d:c3:
         37:69:89:79:42:a9:a5:9a:c8:6b:07:33:8b:8d:22:9d:0e:ce:
         df:4e:9c:7d:1e:33:03:51:14:0e:85:37:4c:66:2c:2f:81:23:
         9d:4e:0a:d1:36:79:fb:92:fe:7c:0a:7a:29:a5:e4:01:8f:d1:
         ae:ee:cd:88:63:21:bf:4e:9b:3d:a9:75:af:8a:9a:58:b7:d2:
         97:a7:fd:1e:05:53:b6:a4:5a:0b:4e:5c:e6:c9:bd:61:b2:6e:
         ee:3c:3a:ab:3a:01:3a:45:69:c1:e2:7b:a1:19:e1:9b:7c:34:
         b8:b7:1d:b1:4d:b8:ee:c1:e3:ec:c5:5c:6b:34:78:69:5b:4e:
         29:09:24:8d:1a:cf:1a:0a:9d:5e:7c:79:3f:66:39:88:90:12:
         84:2e:b2:74:44:90:28:7b:fc:65:6c:f6:f4:d2:2d:61:3d:03:
         a7:02:cf:37:16:50:d4:77:b6:03:56:d0:a8:9e:6b:01:2f:f2:
         7d:ab:55:52:06:ad:d2:5a:bc:63:9d:d0:20:e4:90:8e:0b:3a:
         0f:d0:e6:80
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw544PVn2XurIFJp3CVZERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzQ0Yjk2ZTgwNjMzZTQ1NWJlMTc3MWNhMDQyMjUxNmE1OGJmNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GqMAAtoDD3wUznmLZjawe7FwLQP
1Bo1MHq/J4MPMF67WQFVpJo13ROIxW/W3O3o4OmSL1XWbou0Yzvjp4Tv3GUMa9IK
7SejYAxShC3S1qmoVhxJRjHNmRVeE6xLtyE8RB4XjGBF4IEBEvAwHT17sxNsfExu
aNmojlaJyIcp3GB71QTeHCVYJw6JPosvfgNR6nLrfY4VxEPFziupR6dRxwLFFBsr
a7gFe9Y5/uU2oWGugo5ZfD64HdbGur2iHYNLFAl7lZT8W2iccXAF5bW0boLWT0aU
mrrNS2n3QbXN+gsm1IBg7vTdtZp+yLuZPV/a2syPUVNk0X+kgHw7QFQ2PwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIxEuW6AYz5FW+F3HKBCJRali/R5MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvakVTNWJvQmpQa1ZiNFhjY29FSWxGcVdMOUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAsz
MA0GCSqGSIb3DQEBCwUAA4IBAQC88go6oF9lfcC0q/548DgXwTrGIwMb4CaXzbYZ
GBZfa3zBMe5ckRHjd7DArxzDLS3UIzD7HcM3aYl5QqmlmshrBzOLjSKdDs7fTpx9
HjMDURQOhTdMZiwvgSOdTgrRNnn7kv58CnoppeQBj9Gu7s2IYyG/Tps9qXWvippY
t9KXp/0eBVO2pFoLTlzmyb1hsm7uPDqrOgE6RWnB4nuhGeGbfDS4tx2xTbjuwePs
xVxrNHhpW04pCSSNGs8aCp1efHk/ZjmIkBKELrJ0RJAoe/xlbPb00i1hPQOnAs83
FlDUd7YDVtConmsBL/J9q1VSBq3SWrxjndAg5JCOCzoP0OaA
-----END CERTIFICATE-----