Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pT0xePaGDuPak4WHtK9HP05E4ck.roa
File:                     pT0xePaGDuPak4WHtK9HP05E4ck.roa (raw, json)
Hash identifier:          ljYzYeiZDyd2HE6xiDr+SZMRPDgzfmlyr13x5mEpgTs=
Subject key identifier:   A5:3D:31:78:F6:86:0E:E3:DA:93:85:87:B4:AF:47:3F:4E:44:E1:C9
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48ACB2233AC989FEAC24540FF3DEC21
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pT0xePaGDuPak4WHtK9HP05E4ck.roa
Signing time:             Tue 24 Jan 2023 16:09:39 +0000
ROA not before:           Tue 24 Jan 2023 16:09:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142553
IP address blocks:        2a0e:b107:17f0::/44 maxlen: 48
                          2a0e:b107:1787::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:cb:22:33:ac:98:9f:ea:c2:45:40:ff:3d:ec:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a53d3178f6860ee3da938587b4af473f4e44e1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:bd:c8:a8:61:fb:54:99:fe:92:d2:94:7b:
                    5b:32:59:88:a9:c8:e0:ce:67:1b:eb:78:0c:95:3c:
                    f4:3b:9c:d3:2f:dc:de:75:7f:d5:98:25:4c:16:eb:
                    49:49:8f:5b:19:cd:66:72:6b:29:23:86:66:14:24:
                    c8:af:fd:91:7a:2f:7e:c8:db:b5:6a:1c:16:e9:5a:
                    53:f0:f2:bd:39:67:da:09:b6:08:e0:f2:d7:ae:fa:
                    70:be:8b:53:ac:9f:d0:1f:ef:ee:63:f1:21:fe:b1:
                    4d:9e:ce:a8:3d:9e:84:be:f5:07:9c:45:2b:44:50:
                    d6:19:14:28:4e:a6:14:03:76:9b:a4:90:d7:8c:03:
                    49:fd:2e:fa:c0:1c:8c:dc:fa:e8:ce:59:36:c8:f7:
                    4f:52:4a:d4:2f:f1:a1:0f:c3:97:e9:39:43:e3:1b:
                    9b:28:c5:82:7c:9d:25:d1:00:1d:52:67:50:00:e3:
                    8f:f2:9c:6e:6e:c5:eb:ec:89:2c:4e:38:17:90:55:
                    5e:71:98:45:60:60:18:a0:db:bf:fc:9f:1d:89:4d:
                    e4:8d:2e:3c:5c:70:2e:14:7b:41:cc:e0:ee:08:b2:
                    e3:f4:2b:5b:c9:b8:cf:d9:4a:7e:88:a1:4f:6f:bd:
                    15:c8:8f:97:a9:5f:da:3c:24:17:c4:97:af:ac:a9:
                    bc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3D:31:78:F6:86:0E:E3:DA:93:85:87:B4:AF:47:3F:4E:44:E1:C9
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pT0xePaGDuPak4WHtK9HP05E4ck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1787::/48
                  2a0e:b107:17f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:72:7e:ad:28:fb:54:4b:a5:2c:1e:4f:4e:94:bb:ae:66:21:
         33:b6:8b:5d:4f:3b:3c:6c:f4:b2:54:21:f8:93:a4:a8:34:be:
         f3:bc:d3:b6:d4:b2:61:0f:26:e6:eb:85:85:be:b3:4a:7d:3b:
         88:3d:1a:b3:90:c8:b3:ac:61:d4:be:ec:ac:54:95:4d:88:d3:
         be:16:17:88:e6:53:9a:a9:3c:e7:d1:41:14:21:34:25:f5:02:
         4e:8b:93:a3:e4:17:df:62:3a:9f:07:52:8d:95:40:36:6c:87:
         79:08:a3:4a:ad:2b:4e:10:38:0b:35:51:0d:86:db:90:45:90:
         8b:b9:c0:30:7a:cf:1c:c9:63:4e:dd:f0:95:9d:89:e4:10:35:
         18:a9:87:de:12:70:a6:70:ff:0d:5f:20:6f:a4:24:3e:ea:2e:
         50:70:76:de:50:de:d0:92:d8:92:d7:5e:9d:7f:8e:c3:79:d1:
         59:aa:08:5b:90:94:c2:c7:49:b5:ab:91:42:d9:20:17:0c:38:
         3e:3e:cf:4b:a5:6c:15:03:8d:4e:7a:25:e9:df:42:78:9c:2b:
         39:23:4b:5a:4b:5b:b4:fd:57:e7:30:93:b8:63:4f:4c:90:15:
         62:4b:70:b0:94:6a:cb:1d:5b:32:0c:ed:94:a1:fb:d3:df:cf:
         88:fe:be:83
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYXkissiM6yYn+rCRUD/PewhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTNkMzE3OGY2ODYwZWUzZGE5Mzg1ODdiNGFmNDczZjRlNDRlMWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfS9yKhh+1SZ/pLSlHtbMlmIqcjg
zmcb63gMlTz0O5zTL9zedX/VmCVMFutJSY9bGc1mcmspI4ZmFCTIr/2Rei9+yNu1
ahwW6VpT8PK9OWfaCbYI4PLXrvpwvotTrJ/QH+/uY/Eh/rFNns6oPZ6EvvUHnEUr
RFDWGRQoTqYUA3abpJDXjANJ/S76wByM3Prozlk2yPdPUkrUL/GhD8OX6TlD4xub
KMWCfJ0l0QAdUmdQAOOP8pxubsXr7IksTjgXkFVecZhFYGAYoNu//J8diU3kjS48
XHAuFHtBzODuCLLj9CtbybjP2Up+iKFPb70VyI+XqV/aPCQXxJevrKm8gQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKU9MXj2hg7j2pOFh7SvRz9OROHJMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvcFQweGVQYUdEdVBhazRXSHRLOUhQMDVFNGNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6xBxeH
AwcEKg6xBxfwMA0GCSqGSIb3DQEBCwUAA4IBAQAzcn6tKPtUS6UsHk9OlLuuZiEz
totdTzs8bPSyVCH4k6SoNL7zvNO21LJhDybm64WFvrNKfTuIPRqzkMizrGHUvuys
VJVNiNO+FheI5lOaqTzn0UEUITQl9QJOi5Oj5BffYjqfB1KNlUA2bId5CKNKrStO
EDgLNVENhtuQRZCLucAwes8cyWNO3fCVnYnkEDUYqYfeEnCmcP8NXyBvpCQ+6i5Q
cHbeUN7QktiS116df47DedFZqghbkJTCx0m1q5FC2SAXDDg+Ps9LpWwVA41OeiXp
30J4nCs5I0taS1u0/VfnMJO4Y09MkBViS3CwlGrLHVsyDO2UofvT38+I/r6D
-----END CERTIFICATE-----