Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rSdOQtj94uAT2fN6-kUI9_O0QJo.roa
File:                     rSdOQtj94uAT2fN6-kUI9_O0QJo.roa (raw, json)
Hash identifier:          p2msttpGdcQfZjaARDosse3v+UhWs27Qs2OnUEvvLKg=
Subject key identifier:   AD:27:4E:42:D8:FD:E2:E0:13:D9:F3:7A:FA:45:08:F7:F3:B4:40:9A
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7D5B8E141667419B51CE6F3C9FE4C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rSdOQtj94uAT2fN6-kUI9_O0QJo.roa
Signing time:             Mon 02 Jan 2023 05:15:19 +0000
ROA not before:           Mon 02 Jan 2023 05:15:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208680
IP address blocks:        2a0e:b107:790::/48 maxlen: 48
                          2a0e:b107:795::/48 maxlen: 48
                          2a0e:b107:79a::/48 maxlen: 48
                          2a0e:b107:79f::/48 maxlen: 48
                          2a0e:b107:794::/48 maxlen: 48
                          2a0e:b107:799::/48 maxlen: 48
                          2a0e:b107:79e::/48 maxlen: 48
                          2a0e:b107:793::/48 maxlen: 48
                          2a0e:b107:798::/48 maxlen: 48
                          2a0e:b107:79d::/48 maxlen: 48
                          2a0e:b107:792::/48 maxlen: 48
                          2a0e:b107:797::/48 maxlen: 48
                          2a0e:b107:79c::/48 maxlen: 48
                          2a0e:b107:791::/48 maxlen: 48
                          2a0e:b107:796::/48 maxlen: 48
                          2a0e:b107:79b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:d5:b8:e1:41:66:74:19:b5:1c:e6:f3:c9:fe:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad274e42d8fde2e013d9f37afa4508f7f3b4409a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:62:d2:38:66:f5:9a:f4:29:27:a9:f2:5f:
                    e3:dc:94:e0:92:b8:2e:e5:32:d4:65:1d:63:0e:a3:
                    76:7e:bd:f4:0f:b0:14:3d:2c:e8:e1:22:6f:77:a1:
                    ba:fc:a3:d3:c0:6f:50:1c:ed:5c:24:ec:97:c4:ed:
                    fb:1b:bb:ad:27:a7:ff:da:29:05:8c:ec:40:d4:aa:
                    88:28:92:26:cd:63:bb:01:11:e5:51:95:c0:56:9b:
                    bb:d7:be:47:4d:1c:58:ef:d9:34:ba:d5:cd:ed:20:
                    d9:45:99:35:c8:a0:45:3f:ce:21:f9:bc:b6:4e:ac:
                    4e:6a:16:b4:4b:19:73:58:19:dd:5e:52:a2:54:d1:
                    83:58:25:8b:96:fa:4c:7c:a1:4c:82:b1:6e:40:22:
                    93:0c:c2:df:ac:bb:7d:26:b9:11:57:0b:01:51:70:
                    7b:ba:62:70:14:44:31:f7:94:e1:22:72:08:ca:2e:
                    2e:af:c9:42:bb:17:c8:90:85:6a:8f:14:eb:92:80:
                    89:b6:91:5f:44:eb:3a:b0:7c:f2:2f:93:df:2b:ce:
                    9e:a2:31:be:a4:ac:c2:92:a8:f0:d3:c2:ee:61:fd:
                    4c:89:87:c2:62:57:e8:f5:5a:a0:f2:3e:57:83:09:
                    27:2c:ec:5a:74:00:72:e5:da:f3:68:68:17:cd:d4:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:27:4E:42:D8:FD:E2:E0:13:D9:F3:7A:FA:45:08:F7:F3:B4:40:9A
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rSdOQtj94uAT2fN6-kUI9_O0QJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:790::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:0c:e0:10:91:fe:cd:f1:fa:7d:23:a7:f9:99:0b:02:36:19:
         b9:9a:02:74:c6:21:23:35:e3:34:7f:fb:9c:09:5e:7f:4f:4d:
         2e:b0:46:52:1c:13:9c:9d:70:cc:10:cc:f6:5a:dc:d2:bf:9e:
         f0:f0:70:bf:21:61:69:7a:f0:e6:8c:d8:b0:7f:aa:6f:4c:b6:
         9e:8d:50:d9:2a:df:25:c2:a7:41:2a:30:df:80:ce:62:b5:9b:
         b9:80:64:52:33:df:aa:68:f3:51:7f:f2:c3:09:f0:c0:ae:7b:
         74:74:36:28:0f:5a:c5:e6:7e:70:28:19:59:38:5f:de:89:db:
         53:a7:6b:bc:16:2c:83:e8:74:91:27:c1:60:bd:8e:85:7b:9e:
         15:98:5a:d4:90:91:d7:b6:3a:a3:92:bc:8d:65:22:3b:ef:5a:
         9b:14:f6:90:d1:3f:ff:22:20:0b:0c:b9:02:e9:b3:78:a1:3a:
         6c:97:e0:ab:00:c2:28:42:b5:b7:88:70:37:66:7a:a1:30:ab:
         b0:de:ef:d6:b1:6b:07:ac:1a:0f:fc:cb:4c:11:28:f6:91:5e:
         45:f6:00:de:67:93:de:7b:ad:ef:54:81:86:d8:fe:3c:59:d3:
         73:28:7e:33:c4:c2:b0:90:7b:b4:91:6e:65:d2:a3:bf:a6:24:
         2b:ae:56:07
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw59W44UFmdBm1HObzyf5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDI3NGU0MmQ4ZmRlMmUwMTNkOWYzN2FmYTQ1MDhmN2YzYjQ0MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvti0jhm9Zr0KSep8l/j3JTgkrgu
5TLUZR1jDqN2fr30D7AUPSzo4SJvd6G6/KPTwG9QHO1cJOyXxO37G7utJ6f/2ikF
jOxA1KqIKJImzWO7ARHlUZXAVpu7175HTRxY79k0utXN7SDZRZk1yKBFP84h+by2
TqxOaha0SxlzWBndXlKiVNGDWCWLlvpMfKFMgrFuQCKTDMLfrLt9JrkRVwsBUXB7
umJwFEQx95ThInIIyi4ur8lCuxfIkIVqjxTrkoCJtpFfROs6sHzyL5PfK86eojG+
pKzCkqjw08LuYf1MiYfCYlfo9Vqg8j5XgwknLOxadABy5drzaGgXzdR8+QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK0nTkLY/eLgE9nzevpFCPfztECaMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvclNkT1F0ajk0dUFUMmZONi1rVUk5X08wUUpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBweQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBADOAQkf7N8fp9I6f5mQsCNhm5mgJ0xiEjNeM0
f/ucCV5/T00usEZSHBOcnXDMEMz2WtzSv57w8HC/IWFpevDmjNiwf6pvTLaejVDZ
Kt8lwqdBKjDfgM5itZu5gGRSM9+qaPNRf/LDCfDArnt0dDYoD1rF5n5wKBlZOF/e
idtTp2u8FiyD6HSRJ8FgvY6Fe54VmFrUkJHXtjqjkryNZSI771qbFPaQ0T//IiAL
DLkC6bN4oTpsl+CrAMIoQrW3iHA3ZnqhMKuw3u/WsWsHrBoP/MtMESj2kV5F9gDe
Z5Pee63vVIGG2P48WdNzKH4zxMKwkHu0kW5l0qO/piQrrlYH
-----END CERTIFICATE-----