Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jgidP17KQYk65pOJtBgmvr9QGmA.roa
File:                     jgidP17KQYk65pOJtBgmvr9QGmA.roa (raw, json)
Hash identifier:          Tu2mXsz3dWmLo5XTNhiDXvnu9kScvvjDlaEV6EKRCUs=
Subject key identifier:   8E:08:9D:3F:5E:CA:41:89:3A:E6:93:89:B4:18:26:BE:BF:50:1A:60
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A287D612C327C5FC51F4950A3656FA864
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jgidP17KQYk65pOJtBgmvr9QGmA.roa
Signing time:             Thu 24 Aug 2023 17:00:20 +0000
ROA not before:           Thu 24 Aug 2023 17:00:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216411
IP address blocks:        2a0e:b107:2050::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:28:7d:61:2c:32:7c:5f:c5:1f:49:50:a3:65:6f:a8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 24 17:00:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e089d3f5eca41893ae69389b41826bebf501a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:a0:83:fe:08:02:8a:87:57:2b:08:fa:f5:
                    51:8e:85:e3:66:8a:46:81:35:34:9a:4f:c0:fc:c6:
                    77:91:67:30:40:8d:fd:b0:da:60:e5:e3:e0:65:64:
                    cf:9a:6c:e3:31:4b:a1:b3:f6:27:3f:d3:51:a5:e9:
                    c0:12:1f:07:de:72:bb:2c:66:cc:62:ea:ac:96:b7:
                    90:fa:69:68:f4:16:75:0d:3d:a2:71:52:96:29:93:
                    98:af:08:c3:34:c1:84:ba:35:e2:3d:3e:f5:b5:80:
                    02:32:4a:ac:90:7d:88:af:67:5c:06:e4:69:10:de:
                    fc:a5:70:3a:d5:56:83:e2:59:13:9a:3e:ce:f3:44:
                    6b:cd:59:54:9e:78:0a:da:6f:30:cb:11:90:13:18:
                    f3:1a:61:ea:ef:e6:62:92:cd:71:39:a2:89:f7:9c:
                    96:80:8f:a4:1e:b1:56:13:56:6e:d6:af:c7:48:07:
                    f2:7f:23:e4:f9:f1:99:d2:84:4b:9a:12:a4:fe:11:
                    84:7e:55:8c:17:35:d8:e9:5c:42:29:74:f8:72:7a:
                    38:7c:a5:eb:29:6d:fd:5f:b5:39:3e:b8:fe:ca:84:
                    c0:1f:5a:57:d0:09:db:ad:05:31:7b:71:d6:c1:5c:
                    89:bf:e0:25:3d:50:96:3c:bd:71:b0:b2:eb:18:c4:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:08:9D:3F:5E:CA:41:89:3A:E6:93:89:B4:18:26:BE:BF:50:1A:60
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jgidP17KQYk65pOJtBgmvr9QGmA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:2050::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:27:db:f7:4c:ec:0c:0f:48:08:f6:9c:27:76:c8:9d:b1:
         8c:f4:7b:cb:b8:6e:c7:b0:b8:da:67:ad:56:ca:e0:b1:c1:40:
         0b:13:24:d8:ff:78:6c:4c:b2:1a:5d:89:57:5f:3c:ba:e4:c0:
         b3:99:ba:f1:0b:48:61:ba:dd:8a:3e:f2:f6:13:3e:fe:3a:cc:
         54:6d:c0:66:b5:b2:38:7c:f1:cf:73:c4:90:d3:6d:e8:f4:44:
         9c:d6:28:58:a4:8c:91:85:da:32:8f:1e:52:22:89:a4:95:c6:
         ff:20:0c:68:95:2c:86:38:22:bc:9e:2d:99:a0:53:c2:85:b9:
         a8:de:13:43:45:04:1d:73:f2:f8:b3:68:22:cb:69:bd:27:b7:
         8f:a5:99:af:ba:44:c4:54:b5:85:33:c7:0b:c7:a4:b1:3c:36:
         e7:36:d6:3b:5f:c2:7d:9f:db:57:4c:cc:c6:b5:70:4d:b3:84:
         f5:64:96:32:45:30:dc:a9:35:be:bb:4e:21:0b:38:64:e1:b1:
         1d:eb:33:d0:5f:8f:21:99:b5:a2:0b:58:0d:5e:d3:37:26:ba:
         41:2e:7d:74:33:e0:1d:de:39:7a:4a:91:0d:ea:a8:73:0f:15:
         14:81:2b:5a:6e:4c:eb:eb:fb:dc:c1:25:f5:5e:5d:e4:8e:0d:
         19:18:e7:24
-----BEGIN CERTIFICATE-----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