Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oFW1vuQ70YxQUNIYXVed9K9Kf7E.roa
File:                     oFW1vuQ70YxQUNIYXVed9K9Kf7E.roa (raw, json)
Hash identifier:          Hk6diYkKmuK7rok1qcHykiHTNuQB3JB4dsnGQ2n6uso=
Subject key identifier:   A0:55:B5:BE:E4:3B:D1:8C:50:50:D2:18:5D:57:9D:F4:AF:4A:7F:B1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E784F0CFD6E68BB426887A0F10E48F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oFW1vuQ70YxQUNIYXVed9K9Kf7E.roa
Signing time:             Mon 02 Jan 2023 05:14:59 +0000
ROA not before:           Mon 02 Jan 2023 05:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51076
IP address blocks:        2a0e:97c0:7e5::/48 maxlen: 48
                          2a0e:97c0:7e8::/48 maxlen: 48
                          2a0e:97c0:7e0::/48 maxlen: 48
                          2a0e:97c0:7e3::/48 maxlen: 48
                          2a0e:97c0:7e6::/48 maxlen: 48
                          2a0e:97c0:7e9::/48 maxlen: 48
                          2a0e:97c0:7e1::/48 maxlen: 48
                          2a0e:97c0:7e4::/48 maxlen: 48
                          2a0e:97c0:7e7::/48 maxlen: 48
                          2a0e:97c0:7ea::/48 maxlen: 48
                          2a0e:97c0:7e2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:84:f0:cf:d6:e6:8b:b4:26:88:7a:0f:10:e4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a055b5bee43bd18c5050d2185d579df4af4a7fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e2:8b:0f:34:4a:29:f3:09:d0:2a:91:2a:5e:
                    db:5a:4a:17:a8:73:21:1a:cf:2a:7d:19:79:ac:bc:
                    43:22:b3:cb:0a:3e:6c:ac:13:ad:26:98:66:55:04:
                    8d:01:c9:01:6f:29:0c:7d:7d:de:cb:49:07:ff:a3:
                    95:ec:fd:74:5b:ef:5f:14:90:de:9e:01:af:46:ff:
                    75:4a:1c:b1:94:56:54:9c:83:9e:32:35:76:57:2d:
                    6e:9e:2b:82:7c:30:ba:fd:84:c9:97:9f:70:36:45:
                    47:d1:37:8c:ab:1f:87:8d:90:7e:02:55:2a:a5:0f:
                    41:e6:79:a2:a8:d9:ef:18:f0:21:60:71:b1:87:17:
                    82:4b:af:c7:a8:74:2b:61:d0:a3:de:88:aa:f2:ef:
                    e5:b6:28:02:fa:82:29:9e:31:80:fe:e6:d1:51:58:
                    13:59:cb:3e:95:48:86:13:0c:57:46:14:5f:76:e5:
                    28:c6:bb:c1:58:b3:ea:0c:b4:7b:e0:79:bd:c8:19:
                    1d:c5:96:cf:06:26:47:aa:7d:5b:ee:1e:7e:93:2a:
                    04:5b:b7:b8:66:d5:d5:5e:3e:f9:2b:f2:82:c4:29:
                    8e:df:03:cc:87:cd:1a:af:1f:59:f2:fb:d8:3a:aa:
                    f9:59:8c:c5:0e:f3:9f:77:0d:50:b5:68:fa:b8:7e:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:55:B5:BE:E4:3B:D1:8C:50:50:D2:18:5D:57:9D:F4:AF:4A:7F:B1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oFW1vuQ70YxQUNIYXVed9K9Kf7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:7e0::-2a0e:97c0:7ea:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         12:a3:e4:0f:04:af:d0:8d:5f:4e:ef:80:0d:63:06:72:e1:0d:
         19:77:0c:7f:a7:4f:e6:1a:39:32:89:8c:1e:5d:95:67:d1:c1:
         ee:8d:57:9c:42:0d:08:ea:0a:e4:d2:4a:0b:a2:f9:2c:49:31:
         79:6a:e9:fa:39:8c:7d:9c:bf:73:ec:08:c8:52:97:13:37:4a:
         d6:b7:71:04:ff:93:f8:5c:ee:fa:03:df:78:bb:2a:be:d6:28:
         3f:dc:81:d9:7b:f7:74:bd:f5:2f:37:a8:e4:1f:0d:39:68:4b:
         6b:b9:1a:d4:67:cd:3e:e7:b3:f7:56:ae:8c:5e:4c:74:81:84:
         d3:0d:79:ba:1f:da:78:7a:89:81:1f:09:f0:4d:8f:f6:83:0a:
         d0:88:a0:8a:e3:80:d7:75:69:8b:cf:b8:bb:ad:b0:5b:82:16:
         a1:b7:de:7b:66:c1:1f:ad:35:3e:d4:5c:1b:c5:4a:3d:e1:98:
         82:dc:9a:c3:e7:78:a9:81:f3:17:54:e3:a1:7d:0e:dd:ff:22:
         c1:2e:1c:16:25:83:ee:7b:4c:48:00:ff:19:83:dd:b6:07:23:
         bc:a6:e7:4b:f9:a3:73:fa:87:67:ba:ea:4c:07:d1:16:b9:c8:
         dd:a0:a4:9b:e5:05:a4:41:c6:00:a4:cf:27:ba:3c:22:e5:7a:
         5c:9d:8b:3d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVw54Twz9bmi7QmiHoPEOSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDU1YjViZWU0M2JkMThjNTA1MGQyMTg1ZDU3OWRmNGFmNGE3ZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+KLDzRKKfMJ0CqRKl7bWkoXqHMh
Gs8qfRl5rLxDIrPLCj5srBOtJphmVQSNAckBbykMfX3ey0kH/6OV7P10W+9fFJDe
ngGvRv91ShyxlFZUnIOeMjV2Vy1uniuCfDC6/YTJl59wNkVH0TeMqx+HjZB+AlUq
pQ9B5nmiqNnvGPAhYHGxhxeCS6/HqHQrYdCj3oiq8u/ltigC+oIpnjGA/ubRUVgT
Wcs+lUiGEwxXRhRfduUoxrvBWLPqDLR74Hm9yBkdxZbPBiZHqn1b7h5+kyoEW7e4
ZtXVXj75K/KCxCmO3wPMh80arx9Z8vvYOqr5WYzFDvOfdw1QtWj6uH4TdwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKBVtb7kO9GMUFDSGF1XnfSvSn+xMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvb0ZXMXZ1UTcwWXhRVU5JWVhWZWQ5SzlLZjdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwUqDpfA
B+ADBwAqDpfAB+owDQYJKoZIhvcNAQELBQADggEBABKj5A8Er9CNX07vgA1jBnLh
DRl3DH+nT+YaOTKJjB5dlWfRwe6NV5xCDQjqCuTSSgui+SxJMXlq6fo5jH2cv3Ps
CMhSlxM3Sta3cQT/k/hc7voD33i7Kr7WKD/cgdl793S99S83qOQfDTloS2u5GtRn
zT7ns/dWroxeTHSBhNMNebof2nh6iYEfCfBNj/aDCtCIoIrjgNd1aYvPuLutsFuC
FqG33ntmwR+tNT7UXBvFSj3hmILcmsPneKmB8xdU46F9Dt3/IsEuHBYlg+57TEgA
/xmD3bYHI7ym50v5o3P6h2e66kwH0Ra5yN2gpJvlBaRBxgCkzye6PCLlelydiz0=
-----END CERTIFICATE-----