Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kBANRTGkQgWPw-l0mk-fmOioJiI.roa
File:                     kBANRTGkQgWPw-l0mk-fmOioJiI.roa (raw, json)
Hash identifier:          E2DJvBI8/vHYt9xxyetQ1ohoPv0qH2sWc1mNhiO6SPM=
Subject key identifier:   90:10:0D:45:31:A4:42:05:8F:C3:E9:74:9A:4F:9F:98:E8:A8:26:22
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01899178993493EE1036327A356BADCCF2A5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kBANRTGkQgWPw-l0mk-fmOioJiI.roa
Signing time:             Wed 26 Jul 2023 09:12:26 +0000
ROA not before:           Wed 26 Jul 2023 09:12:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198055
IP address blocks:        2a0e:b107:1d12::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:91:78:99:34:93:ee:10:36:32:7a:35:6b:ad:cc:f2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul 26 09:12:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=90100d4531a442058fc3e9749a4f9f98e8a82622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:18:58:f9:c8:36:3f:10:00:f5:fe:4c:db:ce:
                    69:1e:9b:b3:88:ad:4f:6a:33:26:b2:53:85:d0:33:
                    65:0e:e1:9e:0f:94:6d:3d:99:28:42:e4:40:bf:c5:
                    67:24:2c:02:61:5c:e8:be:2d:64:6e:99:1a:17:e8:
                    a8:f9:36:e4:ef:cd:98:14:a6:f0:ba:c6:e2:5d:c4:
                    6f:ba:eb:b0:e8:b4:7c:79:ba:df:a0:67:12:ab:53:
                    ad:89:0a:99:35:78:33:af:cb:46:34:32:4e:c6:94:
                    c6:0d:91:f2:cf:12:89:a6:9f:c5:1b:c8:1f:98:ae:
                    15:7f:72:c4:eb:41:36:5a:a9:07:63:99:a1:89:60:
                    a1:09:77:11:22:e5:03:cd:8c:a8:4b:25:24:00:8f:
                    2f:45:f1:69:72:68:84:e8:da:82:8d:e3:9d:9f:52:
                    18:26:00:6f:83:51:48:97:3b:d1:4a:66:55:f3:fc:
                    2e:12:c8:32:52:2a:27:47:01:8f:fa:9c:b1:1b:a0:
                    82:c7:cd:5a:a5:07:a1:5a:13:a0:33:0e:67:4b:31:
                    aa:3d:5d:77:c4:79:50:70:a5:30:ae:15:18:e6:f8:
                    37:67:58:82:be:c3:e6:12:82:d5:2e:a6:42:6b:a3:
                    61:13:e9:a3:fb:b1:31:b1:50:4c:73:95:f9:d3:a8:
                    85:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:10:0D:45:31:A4:42:05:8F:C3:E9:74:9A:4F:9F:98:E8:A8:26:22
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kBANRTGkQgWPw-l0mk-fmOioJiI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1d12::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:86:4e:ec:3f:c0:52:4b:86:6d:7d:3d:bc:6a:6c:cf:79:51:
         ca:8f:bd:60:9a:8c:b5:70:a8:bf:d2:b2:c9:bc:8b:b1:10:19:
         09:c5:45:6d:b3:d0:24:ae:56:65:3b:73:3c:70:97:b0:e4:ec:
         0d:1d:12:2f:c4:9c:66:76:24:c2:92:77:36:c0:e7:ca:98:9a:
         54:41:41:b8:a2:7d:1d:27:fe:d0:d2:79:b0:2a:48:82:2c:e1:
         69:82:2b:86:88:06:7a:6c:4f:28:3b:d3:25:2b:55:56:89:03:
         44:93:10:54:2f:09:38:d1:dd:72:99:8a:3c:cf:24:17:76:39:
         f6:ca:39:cd:de:1b:5a:c2:eb:e8:c7:12:28:50:7e:54:d4:01:
         4b:58:b3:76:40:22:69:cd:01:e6:31:df:fd:08:9d:97:09:48:
         a7:4a:f0:f4:d9:02:a1:a5:33:09:09:a6:cc:3a:59:97:a0:9f:
         04:0f:18:0e:f6:ec:15:09:9e:d4:73:bf:f7:38:5e:ea:3b:9a:
         ff:e3:5f:99:06:68:b2:de:33:09:18:a2:9f:62:58:7a:54:7e:
         cb:41:39:9f:f4:52:e5:9e:8b:83:76:df:49:51:81:de:1f:ac:
         0d:7f:fc:f1:65:90:c9:4f:f3:b4:51:40:cb:ba:91:d5:d7:d3:
         e1:b9:cd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----