Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/js61YGQ4h8ug9S6XFlEIZXrDipg.roa
File:                     js61YGQ4h8ug9S6XFlEIZXrDipg.roa (raw, json)
Hash identifier:          QBOI3BPwCaEeY0UjvQ+JDaoCvikdWrZggUIphqwqS6A=
Subject key identifier:   8E:CE:B5:60:64:38:87:CB:A0:F5:2E:97:16:51:08:65:7A:C3:8A:98
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E785BD7AA0CBD3B833B762B10AA186
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/js61YGQ4h8ug9S6XFlEIZXrDipg.roa
Signing time:             Mon 02 Jan 2023 05:14:59 +0000
ROA not before:           Mon 02 Jan 2023 05:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56758
IP address blocks:        2a0e:97c0:660::/44 maxlen: 48
                          2a0e:b107:17a0::/44 maxlen: 48
                          2a10:cc40:b000::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:85:bd:7a:a0:cb:d3:b8:33:b7:62:b1:0a:a1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8eceb560643887cba0f52e97165108657ac38a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:be:b1:cf:ad:9a:9b:4f:f5:b1:1e:6d:e0:60:
                    f0:0e:88:f3:b5:1e:a0:9b:59:e9:8d:41:f2:8f:10:
                    47:a3:95:b0:5a:19:7c:5f:2b:a3:5e:c6:b9:2f:47:
                    40:20:9e:95:67:a6:57:78:bf:f8:a9:6e:19:0c:29:
                    3b:2b:05:90:2a:46:46:15:52:a6:da:b8:4d:e8:b8:
                    36:a2:3d:63:cd:eb:29:14:44:09:c7:52:6e:03:bb:
                    24:43:47:bd:80:ac:de:68:43:b0:8b:fb:ac:5d:70:
                    3b:d2:b7:ef:a0:ee:4b:0b:e5:3d:85:6e:55:09:12:
                    e9:e6:9a:71:5f:fe:65:be:7a:e9:81:52:36:4c:71:
                    0e:11:ef:2b:81:0d:4f:6f:92:55:cc:d3:cc:17:54:
                    72:bd:5a:15:5e:09:57:40:fd:11:05:c2:b5:e7:2e:
                    92:3c:9d:7e:8e:24:d9:52:b2:a5:9c:d0:14:11:a0:
                    89:a7:71:79:39:be:3f:1b:95:24:5f:71:24:3a:1e:
                    a9:77:ad:56:8d:80:f9:aa:88:8b:65:fd:c0:80:3a:
                    68:fa:0f:ac:b0:04:d2:d0:b5:e2:bb:06:7a:02:11:
                    3a:cb:bc:0d:e2:95:f1:d9:2d:5f:2e:92:27:e6:a2:
                    4e:d1:9d:8f:0d:60:1d:d1:78:26:4c:c3:43:e9:f5:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CE:B5:60:64:38:87:CB:A0:F5:2E:97:16:51:08:65:7A:C3:8A:98
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/js61YGQ4h8ug9S6XFlEIZXrDipg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:660::/44
                  2a0e:b107:17a0::/44
                  2a10:cc40:b000::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:05:d9:74:92:97:f9:ae:4c:2d:ec:02:3f:ec:65:30:bc:6c:
         82:c9:17:6f:1f:60:44:14:2a:70:b0:23:db:75:b0:be:17:9a:
         68:b2:fd:61:bc:07:e1:22:d5:47:bb:ab:81:a6:6a:ba:31:94:
         ac:d3:e7:76:e2:1e:51:a0:5a:00:9a:47:03:8d:0e:7e:cc:f8:
         41:ca:5e:af:d4:f2:65:d8:f3:5d:4b:32:e5:8c:08:b4:a2:75:
         b3:96:6e:24:9b:e3:ea:8b:23:cc:11:ea:33:6f:40:f8:33:3b:
         09:0e:24:28:1c:58:8a:92:1f:8a:a6:cd:a1:3a:ef:de:53:7c:
         4f:99:cd:10:d4:b3:cc:16:2b:b9:1d:4c:bf:13:2e:ff:43:a8:
         79:5c:0b:13:80:e9:44:53:b8:7e:c5:17:e4:14:9c:a3:b4:a1:
         be:38:d9:13:90:8e:14:f3:f3:73:ff:e3:33:3c:2e:f4:ec:9f:
         90:16:36:b9:3c:11:13:d8:3e:2b:8b:8c:51:26:bd:16:f2:b7:
         4f:19:bd:b0:84:fb:8a:9a:fe:48:a9:1b:b4:5a:f3:9c:20:a1:
         70:27:eb:4b:ce:8b:6a:29:5a:df:49:ec:20:98:86:16:3e:0a:
         91:57:67:40:94:12:44:be:43:5a:70:52:00:2e:c4:b8:dc:b3:
         c9:0a:0b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----