Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kkZctBTUBSnZnpSrzQnL5rNhyBs.roa
File:                     kkZctBTUBSnZnpSrzQnL5rNhyBs.roa (raw, json)
Hash identifier:          3GmGcU/9TjUbikQF2hqwU11coxM6sZImEac0GKnA2T4=
Subject key identifier:   92:46:5C:B4:14:D4:05:29:D9:9E:94:AB:CD:09:CB:E6:B3:61:C8:1B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48ACE58530D3E400E9B0906DA196F99
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kkZctBTUBSnZnpSrzQnL5rNhyBs.roa
Signing time:             Tue 24 Jan 2023 16:09:40 +0000
ROA not before:           Tue 24 Jan 2023 16:09:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201398
IP address blocks:        2a0e:b107:1c88::/48 maxlen: 48
                          2a0e:b107:1c80::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:ce:58:53:0d:3e:40:0e:9b:09:06:da:19:6f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=92465cb414d40529d99e94abcd09cbe6b361c81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:78:ae:73:03:08:3c:9e:ae:03:bc:9b:53:
                    bb:21:fe:ad:2c:f7:db:8a:c6:6f:56:78:2d:28:3a:
                    90:22:bf:23:b0:95:34:ce:76:56:a8:f7:3c:75:e9:
                    05:6b:09:ec:1d:23:c4:a1:01:c8:34:18:98:58:1e:
                    a5:96:48:c6:33:4b:b9:2a:4b:ae:49:35:e1:51:28:
                    58:7d:9a:7f:85:64:44:b5:e6:2a:0d:88:ce:75:1d:
                    02:d0:c3:6b:db:20:e0:0d:07:9b:e9:5b:1f:97:fe:
                    d9:f4:51:e6:b1:1d:ba:04:9c:6a:80:72:bb:81:3d:
                    26:7b:b6:b4:6d:84:15:a2:83:53:93:88:91:d3:f1:
                    c2:12:57:8f:76:28:e1:b6:64:ef:f7:06:59:4d:b2:
                    a6:34:7c:49:54:09:6c:80:0f:1f:f6:07:9e:f6:63:
                    68:4e:7a:5b:9c:e1:b1:70:93:45:51:e7:a0:d1:b9:
                    2b:db:f1:37:3e:7c:1d:6a:37:27:f2:a6:55:85:c4:
                    d2:32:2b:93:80:aa:19:c0:f9:dd:8f:88:c4:41:57:
                    ba:e2:58:76:12:4d:1f:ca:4d:c4:22:04:ad:92:fb:
                    ad:3d:a0:93:83:6d:b0:39:9a:41:d1:53:08:19:bf:
                    ca:03:39:75:2e:1e:27:b3:3a:97:bb:74:e2:54:31:
                    70:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:46:5C:B4:14:D4:05:29:D9:9E:94:AB:CD:09:CB:E6:B3:61:C8:1B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kkZctBTUBSnZnpSrzQnL5rNhyBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1c80::/44

    Signature Algorithm: sha256WithRSAEncryption
         b6:4b:e6:0f:fa:46:d7:1a:d5:3b:8c:00:19:c5:7d:78:da:0e:
         80:ca:ed:8c:cb:ef:3c:6f:4c:af:f7:fc:1b:e3:d4:15:19:4d:
         9a:92:8b:cf:2c:b8:72:48:bd:a9:4f:42:f5:15:d6:f2:3e:91:
         b7:b4:4d:7c:67:5e:9e:82:46:55:f6:7a:64:34:2e:f2:55:56:
         32:cd:28:18:a2:76:ee:ef:60:44:a4:c9:3b:e1:47:ff:28:f4:
         0d:22:58:16:2f:05:73:1f:86:f9:64:27:28:3f:c6:6d:ee:dd:
         a0:97:b4:eb:68:43:a4:6c:64:42:05:ad:6a:95:46:b1:97:ce:
         7c:7d:ec:89:91:30:d1:5d:1b:11:50:4a:c3:4c:57:90:96:6b:
         dc:7b:5c:98:ec:8f:6e:c9:12:ae:b0:ab:eb:56:c0:ce:f0:78:
         ae:7e:52:f6:ff:59:86:75:ac:73:65:9d:41:59:19:1c:7a:2f:
         d0:42:fd:b9:f0:3c:13:a1:87:07:31:fd:23:92:c6:d8:0c:e8:
         d1:82:66:af:07:d7:89:5c:3d:c4:99:66:91:53:d4:ae:89:90:
         ab:40:f3:3a:3d:63:99:00:ce:7e:d0:53:31:fd:24:2b:26:d8:
         fd:b0:61:41:30:e6:27:2d:72:ff:94:88:f5:db:52:50:c3:79:
         17:3d:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----