Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sjMcVkeCXgRsgBRenSA_j6VPzSI.roa
File:                     sjMcVkeCXgRsgBRenSA_j6VPzSI.roa (raw, json)
Hash identifier:          FyjCotz9nodLn0fsNkGFCU/oJP68x7czh8aTxmo62vc=
Subject key identifier:   B2:33:1C:56:47:82:5E:04:6C:80:14:5E:9D:20:3F:8F:A5:4F:CD:22
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7F781301B9AEAF5F23393A704FE5F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sjMcVkeCXgRsgBRenSA_j6VPzSI.roa
Signing time:             Mon 02 Jan 2023 05:15:28 +0000
ROA not before:           Mon 02 Jan 2023 05:15:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210980
IP address blocks:        2a0e:b107:ae0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:f7:81:30:1b:9a:ea:f5:f2:33:93:a7:04:fe:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b2331c5647825e046c80145e9d203f8fa54fcd22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:07:28:01:79:bc:63:25:e2:47:e1:35:c3:
                    a3:e0:5d:d6:7c:f8:fd:ae:81:93:7c:6a:2b:cd:9f:
                    e2:af:e5:78:6e:41:03:a6:62:b0:f0:7d:07:26:bd:
                    aa:b4:5f:61:31:91:ac:88:bc:df:bb:77:1c:cf:1e:
                    f1:9a:dc:26:29:30:13:ac:63:43:7a:c4:f1:2b:08:
                    eb:1e:b0:bd:59:86:e3:72:6a:72:be:80:1b:9e:d5:
                    8a:47:73:4b:69:af:be:74:a5:83:53:88:29:4c:04:
                    01:0f:55:8c:02:4a:6a:25:df:ec:0f:fe:42:7a:fd:
                    a4:88:d5:35:d7:df:65:f2:4e:4a:94:a5:91:48:81:
                    92:5b:2c:ec:5c:2b:bd:dd:33:99:32:1a:1e:f8:e2:
                    0c:46:de:85:70:ae:d5:b9:9f:f6:e6:1a:01:18:2e:
                    0f:97:b4:24:0e:61:ae:4b:2a:a9:97:66:06:67:04:
                    14:6a:e9:62:6c:31:7e:53:77:f8:6e:f7:1c:d1:0d:
                    2b:47:1d:ab:ab:30:d9:de:69:c0:8a:2e:6e:07:18:
                    71:19:da:9a:90:77:c8:d2:3f:6a:01:a6:64:70:51:
                    d8:17:f0:d1:fa:32:3d:48:0a:19:db:01:30:0f:4b:
                    a9:b5:63:40:5c:63:20:47:cd:06:95:8d:f3:10:43:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:33:1C:56:47:82:5E:04:6C:80:14:5E:9D:20:3F:8F:A5:4F:CD:22
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sjMcVkeCXgRsgBRenSA_j6VPzSI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:ae0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:64:9f:5e:d2:8f:c3:e0:06:38:19:53:e0:3c:47:4e:76:96:
         15:73:7a:44:62:30:2f:0b:da:bd:b0:ce:cb:52:37:d6:09:14:
         0b:bd:cf:8b:98:0f:a4:12:51:70:0b:d0:d4:55:61:5c:50:e6:
         2f:0f:4d:f2:8e:55:2e:7e:e4:4f:e4:a1:22:30:9b:ad:b8:37:
         a3:93:26:ee:2a:47:fc:37:8c:ab:50:81:98:51:23:0b:56:85:
         19:6e:87:08:27:6d:ca:03:5f:ed:36:f4:2e:72:cf:1e:33:0e:
         f0:1f:a0:00:3f:0b:50:cd:a5:bc:6b:e0:6c:70:81:30:98:43:
         36:ac:92:dd:7b:f6:7f:49:c1:7e:76:10:cd:6b:cb:52:30:b1:
         61:04:9e:53:3a:76:d9:91:06:3e:2e:f2:f9:3f:43:74:77:03:
         3e:c2:96:61:0d:b8:ee:8e:f4:aa:4e:84:d3:5a:99:e7:26:bb:
         a1:d2:e3:2f:cf:0a:6e:fb:eb:01:8f:a8:e9:7f:20:49:c2:22:
         5b:9f:47:c0:36:78:77:11:44:1b:2c:fc:46:93:e8:3d:b3:d9:
         a7:bd:62:10:6d:ff:01:e1:b2:82:ed:b9:eb:16:ee:4f:53:77:
         7b:69:11:ea:cd:1d:fc:c3:ff:45:d0:53:6f:c4:74:d7:ae:a4:
         1a:bb:39:fc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw5/eBMBua6vXyM5OnBP5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjMzMWM1NjQ3ODI1ZTA0NmM4MDE0NWU5ZDIwM2Y4ZmE1NGZjZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdwHKAF5vGMl4kfhNcOj4F3WfPj9
roGTfGorzZ/ir+V4bkEDpmKw8H0HJr2qtF9hMZGsiLzfu3cczx7xmtwmKTATrGND
esTxKwjrHrC9WYbjcmpyvoAbntWKR3NLaa++dKWDU4gpTAQBD1WMAkpqJd/sD/5C
ev2kiNU1199l8k5KlKWRSIGSWyzsXCu93TOZMhoe+OIMRt6FcK7VuZ/25hoBGC4P
l7QkDmGuSyqpl2YGZwQUaulibDF+U3f4bvcc0Q0rRx2rqzDZ3mnAii5uBxhxGdqa
kHfI0j9qAaZkcFHYF/DR+jI9SAoZ2wEwD0uptWNAXGMgR80GlY3zEEMQPwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLIzHFZHgl4EbIAUXp0gP4+lT80iMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvc2pNY1ZrZUNYZ1JzZ0JSZW5TQV9qNlZQelNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwrg
MA0GCSqGSIb3DQEBCwUAA4IBAQBsZJ9e0o/D4AY4GVPgPEdOdpYVc3pEYjAvC9q9
sM7LUjfWCRQLvc+LmA+kElFwC9DUVWFcUOYvD03yjlUufuRP5KEiMJutuDejkybu
Kkf8N4yrUIGYUSMLVoUZbocIJ23KA1/tNvQucs8eMw7wH6AAPwtQzaW8a+BscIEw
mEM2rJLde/Z/ScF+dhDNa8tSMLFhBJ5TOnbZkQY+LvL5P0N0dwM+wpZhDbjujvSq
ToTTWpnnJruh0uMvzwpu++sBj6jpfyBJwiJbn0fANnh3EUQbLPxGk+g9s9mnvWIQ
bf8B4bKC7bnrFu5PU3d7aRHqzR38w/9F0FNvxHTXrqQauzn8
-----END CERTIFICATE-----