Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/teCnLIIOUHYvqkZVM3VI0iLaxdg.roa
File:                     teCnLIIOUHYvqkZVM3VI0iLaxdg.roa (raw, json)
Hash identifier:          TqKVCUtpVO1fVikILLcfXqIj3MY8eb7gHJNJq3c8+2I=
Subject key identifier:   B5:E0:A7:2C:82:0E:50:76:2F:AA:46:55:33:75:48:D2:22:DA:C5:D8
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0188342D02FF7D87E6738803C4F8D81BC686
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/teCnLIIOUHYvqkZVM3VI0iLaxdg.roa
Signing time:             Fri 19 May 2023 13:22:25 +0000
ROA not before:           Fri 19 May 2023 13:22:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0e:b107:1870::/48 maxlen: 48
                          2a0c:3b87:ff00::/40 maxlen: 48
                          2a0e:b107:9f4::/48 maxlen: 48
                          2a0c:3b87:ffff::/48 maxlen: 48
                          2a0e:97c0:791::/48 maxlen: 48
                          2a0e:b107:1b9e::/48 maxlen: 48
                          2a0e:97c0:792::/48 maxlen: 48
                          2a0e:97c0:1000::/38 maxlen: 48
                          2a0e:b107:5d0::/44 maxlen: 48
                          2a0e:97c0:750::/48 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a10:ccc7:9000::/38 maxlen: 48
                          2a06:de01:400::/38 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a0e:97c0:76f::/48 maxlen: 48
                          2a0e:97c0:73f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:34:2d:02:ff:7d:87:e6:73:88:03:c4:f8:d8:1b:c6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 19 13:22:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b5e0a72c820e50762faa4655337548d222dac5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f3:0b:e2:07:e4:fc:c6:36:2c:19:13:41:fa:
                    ba:33:ce:a7:78:61:ff:e9:75:75:6b:d8:6c:0f:98:
                    0e:6c:aa:e7:cb:f0:f1:f6:c6:f0:d5:22:c9:47:90:
                    b7:a7:fb:a5:c8:11:93:df:be:33:65:25:79:48:93:
                    76:56:e8:f0:af:b2:51:01:99:6e:42:a5:a1:43:23:
                    65:bd:c8:21:44:6c:ab:96:47:85:85:b6:11:2f:2c:
                    52:90:23:90:91:db:b6:2f:96:10:82:53:31:65:a9:
                    06:fd:2e:6a:fc:b0:53:f3:05:6e:d9:96:f3:36:6c:
                    b3:0d:98:68:1a:fe:df:ca:af:3b:08:41:2d:9b:76:
                    f6:3e:5e:43:d0:31:91:88:71:d1:67:3e:b2:a5:b5:
                    95:95:a8:08:59:2f:74:59:1d:67:41:c5:d8:62:e9:
                    8a:c1:dc:34:38:72:f3:ef:14:70:34:0f:e7:78:7d:
                    cc:fb:73:e3:c2:cd:8b:f0:70:d1:8e:16:1e:bf:48:
                    ea:dc:41:90:5c:b2:98:16:09:0e:6d:60:53:48:e1:
                    87:38:cd:11:37:d6:e0:30:19:57:b3:aa:82:6f:34:
                    d9:4c:74:96:b7:34:0c:9d:ea:ee:34:65:c4:fc:b6:
                    a3:cd:0e:2d:b0:41:4d:80:85:7f:7d:6c:81:3a:ea:
                    ac:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E0:A7:2C:82:0E:50:76:2F:AA:46:55:33:75:48:D2:22:DA:C5:D8
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/teCnLIIOUHYvqkZVM3VI0iLaxdg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de01:400::/38
                  2a0c:3b87:ff00::/40
                  2a0e:97c0:73f::/48
                  2a0e:97c0:750::/48
                  2a0e:97c0:76f::/48
                  2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
                  2a0e:97c0:1000::/38
                  2a0e:b107:5d0::/44
                  2a0e:b107:9f4::/48
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48
                  2a0e:b107:1b9e::/48
                  2a10:ccc7:9000::/38

    Signature Algorithm: sha256WithRSAEncryption
         bc:5b:56:05:72:5f:3c:f9:c3:bd:92:cb:e9:09:a3:1c:c8:a9:
         a6:fa:10:c6:d2:47:61:ed:10:42:61:ab:a5:10:11:3e:00:d8:
         10:b2:cb:e5:0b:80:3c:16:8f:bb:be:b7:09:e2:8b:7a:54:c8:
         20:f8:c8:5d:70:5d:b6:56:e0:5d:25:6f:89:e1:b8:eb:3a:bd:
         93:c9:6a:67:e8:fd:4b:10:bb:94:db:71:30:3c:7f:81:82:d8:
         03:ac:23:28:67:89:a1:3e:a8:5f:74:00:8c:ee:49:53:2f:49:
         f6:3a:09:89:03:94:94:bc:72:ba:4d:87:e3:34:f1:dd:06:e1:
         6d:5d:ca:26:1f:05:59:ed:84:e3:7e:bd:4d:89:74:cb:5d:5d:
         ba:fe:32:d7:79:7f:a9:05:36:f6:85:6d:6c:31:81:12:c5:6e:
         fb:82:fa:15:91:70:a8:89:f1:69:fe:57:25:59:9d:a7:1a:83:
         58:d0:2f:fe:85:78:42:17:99:53:7c:61:01:b7:a7:5e:c1:f2:
         cf:a2:24:c0:f5:a6:5a:f6:2d:a6:de:ea:bd:46:69:ce:f0:cd:
         52:13:fc:e4:d0:0e:38:a3:57:d3:0e:fd:93:6b:83:f1:50:e9:
         c8:d5:cc:29:80:16:0b:b0:0d:ee:92:c9:28:b7:6d:b9:ff:9f:
         d3:95:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----