Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k6yoYtaMEzHjiD8EGbMKqlTnpU4.roa
File:                     k6yoYtaMEzHjiD8EGbMKqlTnpU4.roa (raw, json)
Hash identifier:          1k+DCW9c9a6btNB8mFk2aGLCg8U6+BfAqYlpntCARvI=
Subject key identifier:   93:AC:A8:62:D6:8C:13:31:E3:88:3F:04:19:B3:0A:AA:54:E7:A5:4E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187E2B546695726551912CE075D4066BECC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k6yoYtaMEzHjiD8EGbMKqlTnpU4.roa
Signing time:             Wed 03 May 2023 17:42:23 +0000
ROA not before:           Wed 03 May 2023 17:42:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199310
IP address blocks:        2a0e:97c0:220::/44 maxlen: 48
                          2a0e:b107:2440::/44 maxlen: 48
                          2a0e:b107:21c0::/45 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e2:b5:46:69:57:26:55:19:12:ce:07:5d:40:66:be:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May  3 17:42:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93aca862d68c1331e3883f0419b30aaa54e7a54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:12:1d:17:03:97:a8:dd:f6:c0:01:ce:55:
                    b4:31:6e:1e:9a:40:64:9c:03:c9:87:7a:0e:42:e4:
                    0f:06:a2:4a:c9:1f:33:d4:2c:90:3e:9f:95:56:43:
                    44:71:e0:ba:55:63:bd:49:59:91:7b:6f:d4:d3:9d:
                    41:17:4a:fe:ac:35:d6:3a:e6:c7:db:6b:83:81:82:
                    d4:88:63:ad:d9:d7:b2:93:23:20:86:a6:70:84:7c:
                    12:a6:19:ba:39:e7:de:a4:61:7a:eb:23:ba:46:d3:
                    7c:35:f5:b7:b4:fa:19:8f:2d:5a:21:ed:63:e1:e9:
                    25:45:32:07:24:b3:aa:be:99:e3:ef:b1:8a:be:03:
                    af:4e:a0:eb:8d:3d:94:b3:fc:63:4a:2e:fe:fd:3b:
                    32:68:a8:2e:57:d4:54:4e:1f:c4:50:af:f6:b2:c3:
                    5a:1d:e7:7b:98:dd:10:1d:67:aa:57:81:7c:42:99:
                    06:3f:12:de:3b:e9:ce:f2:99:ef:48:c1:d6:64:26:
                    81:38:15:07:50:4d:e9:a8:25:b7:64:f1:c9:67:9e:
                    f1:5f:3a:f1:e0:d0:e2:05:f3:61:fb:a9:7f:b9:0c:
                    59:1c:a6:1d:46:7d:16:5d:58:27:5b:19:33:ca:da:
                    90:41:0d:87:03:3e:aa:a1:de:e8:0b:a7:dc:bf:e2:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AC:A8:62:D6:8C:13:31:E3:88:3F:04:19:B3:0A:AA:54:E7:A5:4E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k6yoYtaMEzHjiD8EGbMKqlTnpU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:220::/44
                  2a0e:b107:21c0::/45
                  2a0e:b107:2440::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:b6:54:a2:47:7e:8a:c8:24:c4:89:01:0d:5f:b2:ee:c8:c2:
         12:45:b6:e1:f5:75:de:cb:cc:fe:a0:51:1d:f4:c3:4b:df:3f:
         fc:43:f9:0b:e2:9c:c6:e1:f7:9e:29:8b:73:5d:90:06:3a:8e:
         6a:f0:4b:40:b1:4a:aa:f8:25:73:89:9a:d6:ef:27:61:39:e3:
         7a:bd:d2:4d:f4:bc:e2:5a:2c:e2:b0:35:ac:ce:69:85:8c:2d:
         47:97:5d:83:53:36:16:c8:67:7f:1e:f9:d5:a3:9b:d3:6c:9d:
         54:e5:ee:79:30:92:23:96:b1:cc:25:63:a8:4d:06:18:71:1e:
         0b:fd:64:23:82:b1:d0:f3:0d:23:98:25:fe:0d:1e:79:03:9d:
         20:27:0e:67:db:44:fe:28:f2:56:b2:cd:76:93:a4:77:0e:20:
         d1:6f:f8:11:e1:3c:7b:cd:41:99:05:31:05:0a:27:4a:6f:76:
         59:7d:d3:1a:fe:01:e4:ab:87:3a:84:39:10:2e:74:a3:9b:15:
         48:47:13:b4:5b:91:f9:d4:70:85:fe:f3:d5:6a:3e:d3:13:e4:
         6d:fd:a8:ce:f5:5f:1c:d2:0f:1d:f1:cd:9e:c1:e0:b1:04:20:
         b2:03:19:37:41:da:b5:9a:d2:e3:ca:cd:7b:ea:8d:cb:89:a5:
         66:e6:fb:9e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYfitUZpVyZVGRLOB11AZr7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNTAzMTc0MjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2FjYTg2MmQ2OGMxMzMxZTM4ODNmMDQxOWIzMGFhYTU0ZTdhNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g0SHRcDl6jd9sABzlW0MW4emkBk
nAPJh3oOQuQPBqJKyR8z1CyQPp+VVkNEceC6VWO9SVmRe2/U051BF0r+rDXWOubH
22uDgYLUiGOt2deykyMghqZwhHwSphm6OefepGF66yO6RtN8NfW3tPoZjy1aIe1j
4eklRTIHJLOqvpnj77GKvgOvTqDrjT2Us/xjSi7+/TsyaKguV9RUTh/EUK/2ssNa
Hed7mN0QHWeqV4F8QpkGPxLeO+nO8pnvSMHWZCaBOBUHUE3pqCW3ZPHJZ57xXzrx
4NDiBfNh+6l/uQxZHKYdRn0WXVgnWxkzytqQQQ2HAz6qod7oC6fcv+ITwwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJOsqGLWjBMx44g/BBmzCqpU56VOMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvazZ5b1l0YU1FekhqaUQ4RUdiTUtxbFRucFU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKg6XwAIg
AwcDKg6xByHAAwcEKg6xByRAMA0GCSqGSIb3DQEBCwUAA4IBAQAptlSiR36KyCTE
iQENX7LuyMISRbbh9XXey8z+oFEd9MNL3z/8Q/kL4pzG4feeKYtzXZAGOo5q8EtA
sUqq+CVziZrW7ydhOeN6vdJN9LziWizisDWszmmFjC1Hl12DUzYWyGd/HvnVo5vT
bJ1U5e55MJIjlrHMJWOoTQYYcR4L/WQjgrHQ8w0jmCX+DR55A50gJw5n20T+KPJW
ss12k6R3DiDRb/gR4Tx7zUGZBTEFCidKb3ZZfdMa/gHkq4c6hDkQLnSjmxVIRxO0
W5H51HCF/vPVaj7TE+Rt/ajO9V8c0g8d8c2eweCxBCCyAxk3Qdq1mtLjys176o3L
iaVm5vue
-----END CERTIFICATE-----