Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tiM_0PqcPllLkHotSsVVMWbPGLw.roa
File:                     tiM_0PqcPllLkHotSsVVMWbPGLw.roa (raw, json)
Hash identifier:          j7zt23ZANer6ZIBQqKt6E8czrg2gVTSFso+WiYHOC2w=
Subject key identifier:   B6:23:3F:D0:FA:9C:3E:59:4B:90:7A:2D:4A:C5:55:31:66:CF:18:BC
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48ACF117297993A1FEB8E5987B4D4CE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tiM_0PqcPllLkHotSsVVMWbPGLw.roa
Signing time:             Tue 24 Jan 2023 16:09:40 +0000
ROA not before:           Tue 24 Jan 2023 16:09:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201938
IP address blocks:        2a0e:b107:1cb0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:cf:11:72:97:99:3a:1f:eb:8e:59:87:b4:d4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6233fd0fa9c3e594b907a2d4ac5553166cf18bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1d:3c:40:36:29:ff:9c:35:5e:be:34:db:07:
                    de:4d:fa:96:7d:8b:dc:4d:68:80:c2:01:0a:16:02:
                    7c:64:49:62:35:c7:b3:ce:cb:c5:3e:ac:04:4e:24:
                    36:e0:bb:2c:11:ae:da:72:08:13:f0:1d:0a:8e:c3:
                    c2:39:18:1a:a3:24:a4:c7:e4:13:ec:0d:48:26:11:
                    f3:6b:e5:bd:c4:7b:ca:c0:48:bd:23:20:70:bf:00:
                    76:0e:66:f3:5e:0a:8c:88:f7:87:7d:ce:cd:2c:e1:
                    e1:5b:7f:e6:da:fe:30:62:72:9e:9b:e5:5d:56:32:
                    94:6d:43:d1:5a:e5:14:50:03:89:81:7b:5a:c1:fd:
                    d1:05:7d:5f:a8:d2:5a:a1:37:52:43:d7:80:35:0e:
                    a2:27:be:3b:bd:0a:e4:3e:da:39:c0:ff:9c:1f:d3:
                    f6:ae:d0:4b:10:aa:11:c5:04:d8:b8:55:7f:e7:30:
                    16:d3:71:af:20:29:07:a9:df:72:bd:d0:51:0f:fb:
                    b8:d5:f6:5f:cc:9b:61:18:f2:b1:75:ef:d3:72:61:
                    25:cd:9e:29:a1:28:39:cb:8a:df:63:6e:1a:90:dd:
                    cf:e8:c4:b7:e6:f1:5d:97:09:18:ab:a4:a0:c2:55:
                    42:26:eb:76:cb:53:ed:f4:ec:28:f6:ec:21:83:f1:
                    19:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:23:3F:D0:FA:9C:3E:59:4B:90:7A:2D:4A:C5:55:31:66:CF:18:BC
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tiM_0PqcPllLkHotSsVVMWbPGLw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1cb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:b1:83:bd:c7:31:57:49:3b:cc:29:08:dd:4a:5f:99:a1:92:
         ed:51:ba:1f:0b:d8:30:77:f4:e2:93:db:96:05:32:e8:9b:d4:
         24:d9:06:e9:f6:18:95:d0:37:15:55:43:b2:7c:22:28:38:7d:
         f6:da:e3:97:33:23:73:84:c5:cd:94:d0:86:35:58:91:b5:04:
         8c:51:84:0f:aa:ee:68:d9:a4:df:34:a6:38:0d:57:97:db:e3:
         b7:4b:39:b8:98:32:c6:3a:6d:55:b1:01:dd:66:e6:f3:5e:a1:
         0c:fc:aa:c6:9e:2c:37:0c:4f:72:9d:31:64:c8:37:60:f5:47:
         fc:a5:9c:12:24:8c:80:c9:ce:99:52:07:0e:e6:4c:ad:d2:5b:
         ef:84:85:11:91:d2:1f:a4:f0:a8:39:73:25:39:71:b4:63:03:
         82:c8:c9:d0:25:4c:8b:91:4f:65:18:13:c2:cb:f7:86:fc:26:
         0a:28:7b:dc:72:dc:c7:cb:09:aa:01:c5:20:4d:d5:f1:36:6e:
         f2:b0:63:7d:67:22:51:0b:ac:a8:f0:5c:c5:90:fd:0b:0a:ee:
         f9:fa:79:04:46:fb:73:76:0a:90:d4:46:68:97:3a:5a:ce:5f:
         d0:97:a4:e7:76:ce:5e:b7:47:47:20:8c:00:c6:fc:af:9a:96:
         3e:04:1d:81
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXkis8RcpeZOh/rjlmHtNTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjIzM2ZkMGZhOWMzZTU5NGI5MDdhMmQ0YWM1NTUzMTY2Y2YxOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR08QDYp/5w1Xr402wfeTfqWfYvc
TWiAwgEKFgJ8ZEliNcezzsvFPqwETiQ24LssEa7acggT8B0KjsPCORgaoySkx+QT
7A1IJhHza+W9xHvKwEi9IyBwvwB2DmbzXgqMiPeHfc7NLOHhW3/m2v4wYnKem+Vd
VjKUbUPRWuUUUAOJgXtawf3RBX1fqNJaoTdSQ9eANQ6iJ747vQrkPto5wP+cH9P2
rtBLEKoRxQTYuFV/5zAW03GvICkHqd9yvdBRD/u41fZfzJthGPKxde/TcmElzZ4p
oSg5y4rfY24akN3P6MS35vFdlwkYq6SgwlVCJut2y1Pt9Owo9uwhg/EZrQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLYjP9D6nD5ZS5B6LUrFVTFmzxi8MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdGlNXzBQcWNQbGxMa0hvdFNzVlZNV2JQR0x3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxyw
MA0GCSqGSIb3DQEBCwUAA4IBAQBssYO9xzFXSTvMKQjdSl+ZoZLtUbofC9gwd/Ti
k9uWBTLom9Qk2Qbp9hiV0DcVVUOyfCIoOH322uOXMyNzhMXNlNCGNViRtQSMUYQP
qu5o2aTfNKY4DVeX2+O3Szm4mDLGOm1VsQHdZubzXqEM/KrGniw3DE9ynTFkyDdg
9Uf8pZwSJIyAyc6ZUgcO5kyt0lvvhIURkdIfpPCoOXMlOXG0YwOCyMnQJUyLkU9l
GBPCy/eG/CYKKHvcctzHywmqAcUgTdXxNm7ysGN9ZyJRC6yo8FzFkP0LCu75+nkE
RvtzdgqQ1EZolzpazl/Ql6Tnds5et0dHIIwAxvyvmpY+BB2B
-----END CERTIFICATE-----