Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jNPtx2fYXqOWvkjNMHXiiIzxl2o.roa
File:                     jNPtx2fYXqOWvkjNMHXiiIzxl2o.roa (raw, json)
Hash identifier:          b93fCJHyQ9QJAGWCojJptSrbnpGxJpwUiinoJ7wF0Yg=
Subject key identifier:   8C:D3:ED:C7:67:D8:5E:A3:96:BE:48:CD:30:75:E2:88:8C:F1:97:6A
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01869B6B0102B55B2825B1EB2D177F4AE907
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jNPtx2fYXqOWvkjNMHXiiIzxl2o.roa
Signing time:             Wed 01 Mar 2023 04:25:26 +0000
ROA not before:           Wed 01 Mar 2023 04:25:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200160
IP address blocks:        2a0e:b107:660::/44 maxlen: 48
                          2a0e:b107:640::/44 maxlen: 48
                          2a0e:b107:1d60::/44 maxlen: 48
                          2a0e:b107:600::/44 maxlen: 48
                          2a0e:b107:1e00::/44 maxlen: 48
                          2a0e:b107:5e0::/44 maxlen: 48
                          2a0e:b107:6c0::/44 maxlen: 48
                          2a0e:b107:800::/44 maxlen: 48
                          2a0e:b107:5f0::/44 maxlen: 48
                          2a0e:b107:670::/44 maxlen: 48
                          2a0e:b107:bb0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9b:6b:01:02:b5:5b:28:25:b1:eb:2d:17:7f:4a:e9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar  1 04:25:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8cd3edc767d85ea396be48cd3075e2888cf1976a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:38:67:95:df:87:a2:70:28:25:f5:44:bf:
                    aa:65:92:a8:8c:39:50:1e:24:b2:88:20:60:33:43:
                    d6:c5:ca:83:a8:f2:a5:fc:ac:40:ff:66:81:34:b6:
                    e7:16:6e:a6:4a:4e:51:0a:c1:ec:4b:11:ca:69:f6:
                    db:41:84:a9:bc:23:50:e0:2f:90:41:8a:9a:66:ba:
                    29:1a:96:46:b1:72:71:ce:5f:b2:85:58:c5:65:4d:
                    b0:f5:46:6c:53:cf:d9:c7:52:f2:95:c2:1c:a2:26:
                    fb:26:e6:ba:0c:bb:5e:58:bd:c8:a6:f6:f0:19:e5:
                    5c:68:d7:6c:82:89:2f:ef:8e:f1:71:05:40:4a:ad:
                    d6:c4:f8:17:bf:68:32:8e:39:0a:e8:ae:ba:a6:c3:
                    3b:1f:ea:5b:1e:53:82:8a:b4:4e:e6:c7:d6:aa:19:
                    38:c3:ec:a1:bb:36:99:e6:fe:cf:e2:0d:2e:76:af:
                    44:be:0e:64:90:29:ef:94:0b:97:88:b1:ad:cb:85:
                    5b:e7:3d:fc:49:a8:0c:02:73:a6:ec:27:15:c6:f5:
                    5e:1c:90:5f:b8:54:40:b0:92:a4:8a:1f:11:d2:82:
                    1c:ce:c9:34:56:60:26:f6:84:4e:c4:2f:e7:8f:19:
                    e9:5e:f4:f0:b1:5b:6b:ba:f5:d4:a5:ea:9a:2b:77:
                    e2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D3:ED:C7:67:D8:5E:A3:96:BE:48:CD:30:75:E2:88:8C:F1:97:6A
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jNPtx2fYXqOWvkjNMHXiiIzxl2o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:5e0::-2a0e:b107:60f:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:640::/44
                  2a0e:b107:660::/43
                  2a0e:b107:6c0::/44
                  2a0e:b107:800::/44
                  2a0e:b107:bb0::/44
                  2a0e:b107:1d60::/44
                  2a0e:b107:1e00::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:90:49:e6:1a:51:33:9e:a0:44:2f:b2:76:c4:3d:75:f2:dc:
         63:f9:3a:5b:ee:c4:30:e2:32:8a:b7:06:11:d9:13:db:6b:a4:
         31:29:34:87:4e:bd:af:29:22:4f:b2:b1:11:f7:45:5a:6a:b7:
         50:11:52:70:e7:0e:62:c2:0b:b4:32:34:0b:9a:b6:be:bb:69:
         4d:95:12:9e:85:65:ee:21:92:44:3d:06:b8:13:2f:3d:18:ac:
         b3:d6:43:6f:1a:26:70:dc:24:94:ae:ae:8c:6f:e6:c7:f4:1f:
         02:f4:9c:c4:58:ba:fb:22:d6:dd:db:fd:e1:b7:a4:42:c8:c6:
         ed:35:03:b0:2b:08:bf:06:7b:1d:a6:5a:bb:db:ff:93:13:e7:
         fb:5f:63:5a:33:fd:0f:1b:70:49:f2:fb:13:3e:43:fd:6a:41:
         82:9f:ea:c5:16:9b:eb:b8:65:46:c8:ac:12:2a:0b:bb:a1:45:
         54:b0:cf:b6:a0:24:9d:7c:60:f1:f1:a7:48:06:ec:68:8b:c6:
         e0:5e:cc:22:b3:d3:77:ad:1d:43:0b:10:f9:ed:a2:6d:d6:09:
         b8:bf:2e:b8:be:b6:2e:de:61:7c:b8:bf:9e:3e:63:af:71:0c:
         af:ff:ec:e3:69:df:7f:95:f7:2e:41:75:7b:40:35:0d:bc:59:
         d7:1b:8c:26
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAYabawECtVsoJbHrLRd/SukHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMzAxMDQyNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2QzZWRjNzY3ZDg1ZWEzOTZiZTQ4Y2QzMDc1ZTI4ODhjZjE5NzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsY4Z5Xfh6JwKCX1RL+qZZKojDlQ
HiSyiCBgM0PWxcqDqPKl/KxA/2aBNLbnFm6mSk5RCsHsSxHKafbbQYSpvCNQ4C+Q
QYqaZropGpZGsXJxzl+yhVjFZU2w9UZsU8/Zx1LylcIcoib7Jua6DLteWL3Ipvbw
GeVcaNdsgokv747xcQVASq3WxPgXv2gyjjkK6K66psM7H+pbHlOCirRO5sfWqhk4
w+yhuzaZ5v7P4g0udq9Evg5kkCnvlAuXiLGty4Vb5z38SagMAnOm7CcVxvVeHJBf
uFRAsJKkih8R0oIczsk0VmAm9oROxC/njxnpXvTwsVtruvXUpeqaK3fihwIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFIzT7cdn2F6jlr5IzTB14oiM8ZdqMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvak5QdHgyZllYcU9XdmtqTk1IWGlpSXp4bDJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBZBAIAAjBTMBIDBwUqDrEH
BeADBwQqDrEHBgADBwQqDrEHBkADBwUqDrEHBmADBwQqDrEHBsADBwQqDrEHCAAD
BwQqDrEHC7ADBwQqDrEHHWADBwQqDrEHHgAwDQYJKoZIhvcNAQELBQADggEBAESQ
SeYaUTOeoEQvsnbEPXXy3GP5OlvuxDDiMoq3BhHZE9trpDEpNIdOva8pIk+ysRH3
RVpqt1ARUnDnDmLCC7QyNAuatr67aU2VEp6FZe4hkkQ9BrgTLz0YrLPWQ28aJnDc
JJSuroxv5sf0HwL0nMRYuvsi1t3b/eG3pELIxu01A7ArCL8Gex2mWrvb/5MT5/tf
Y1oz/Q8bcEny+xM+Q/1qQYKf6sUWm+u4ZUbIrBIqC7uhRVSwz7agJJ18YPHxp0gG
7GiLxuBezCKz03etHUMLEPntom3WCbi/Lri+ti7eYXy4v54+Y69xDK//7ONp33+V
9y5BdXtANQ28WdcbjCY=
-----END CERTIFICATE-----