Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uEh6r3SaGTJg6ZjtRZoDG6mck5g.roa
File:                     uEh6r3SaGTJg6ZjtRZoDG6mck5g.roa (raw, json)
Hash identifier:          EIMgOUo3RxDoLrMdecc4nFCZu+/uhHT1HE+7M/6kqQw=
Subject key identifier:   B8:48:7A:AF:74:9A:19:32:60:E9:98:ED:45:9A:03:1B:A9:9C:93:98
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BE079D150928664E39E3F47CB51ABCAF9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uEh6r3SaGTJg6ZjtRZoDG6mck5g.roa
Signing time:             Sat 18 Nov 2023 03:29:21 +0000
ROA not before:           Sat 18 Nov 2023 03:29:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215980
IP address blocks:        2a0e:97c0:e30::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:e0:79:d1:50:92:86:64:e3:9e:3f:47:cb:51:ab:ca:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 18 03:29:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b8487aaf749a193260e998ed459a031ba99c9398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:f5:00:f3:44:2a:81:39:00:75:22:bc:0f:
                    df:76:e0:15:d7:6e:1f:c0:ed:f1:f9:e6:b2:ed:d0:
                    fc:a5:28:44:6b:f6:9a:fc:e4:f6:75:90:37:c6:a9:
                    d2:26:6e:af:09:2e:0f:9b:0c:03:b9:cd:a1:15:25:
                    6b:d6:7d:92:0b:e1:be:82:6f:8f:76:de:00:c4:ed:
                    47:21:4a:cc:60:e1:a4:fb:8f:89:63:85:c8:7e:68:
                    32:58:0a:68:62:da:f7:28:4f:71:d7:0a:da:70:23:
                    35:22:ee:11:9d:48:fd:75:8f:05:d2:f8:f5:cd:89:
                    f7:ca:5f:0c:33:de:f0:df:2b:ed:19:7e:0d:60:5e:
                    ec:9e:2a:4d:7e:fd:66:58:7b:ed:e9:05:8c:9c:df:
                    86:57:11:cd:95:c5:75:1d:97:a6:ba:e2:82:11:58:
                    56:96:a0:6c:37:fd:b4:7b:69:54:57:00:6e:5d:ba:
                    1e:ca:63:ea:f7:a9:9a:ce:7f:f4:c0:fc:6f:a4:ba:
                    c0:39:43:19:f0:7c:5d:c7:15:38:31:0e:dc:66:d7:
                    ca:3b:cc:88:16:64:34:bd:8f:54:07:f4:7b:c5:c5:
                    bb:39:98:00:fd:41:fe:b5:a0:ad:94:6d:ff:1e:6d:
                    de:26:01:53:dd:a4:2c:59:d9:8a:a2:97:39:50:69:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:48:7A:AF:74:9A:19:32:60:E9:98:ED:45:9A:03:1B:A9:9C:93:98
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uEh6r3SaGTJg6ZjtRZoDG6mck5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:e30::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:19:0b:64:eb:21:27:88:78:5d:fc:df:24:21:cb:e2:77:1c:
         05:d2:9d:28:70:68:1d:f9:96:a8:cc:4d:63:0d:cf:a5:d1:9c:
         0c:c9:1a:4d:66:54:ac:d4:37:f7:83:5c:f5:98:30:79:b4:6c:
         0a:35:bf:1c:f9:f1:a2:3c:01:fc:7e:15:bb:31:8f:ec:b2:4b:
         4b:a3:0c:fd:23:2a:c6:2c:64:bf:ca:96:c7:d5:bc:5d:34:76:
         ab:ab:1c:67:60:bd:50:1c:81:1c:de:43:a9:d4:ff:66:64:59:
         31:c3:14:4c:b9:f9:4c:e0:dd:6f:27:dc:95:ed:37:e3:36:97:
         3f:38:47:75:63:74:e1:42:2c:b1:de:7b:34:ab:30:01:31:86:
         64:ee:b6:13:4d:7f:b3:a9:c6:c3:a0:f2:c7:b9:80:b6:ba:40:
         4a:12:8a:70:75:16:29:0e:d9:58:1e:37:cb:d4:3b:79:bb:84:
         54:3b:2b:6f:07:b3:65:a7:a0:d3:c2:f2:f0:f8:bf:1a:f9:f0:
         42:43:8e:01:05:1e:0b:f7:cb:de:cd:d5:e6:20:ab:08:6b:27:
         90:4f:04:78:df:37:2e:f0:78:3a:5e:3c:3e:b6:47:1a:14:7a:
         d3:10:dd:d6:41:6e:84:2f:e3:02:af:31:9f:cb:d9:74:f0:5c:
         5d:37:11:99
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYvgedFQkoZk454/R8tRq8r5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMxMTE4MDMyOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODQ4N2FhZjc0OWExOTMyNjBlOTk4ZWQ0NTlhMDMxYmE5OWM5Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc31APNEKoE5AHUivA/fduAV124f
wO3x+eay7dD8pShEa/aa/OT2dZA3xqnSJm6vCS4PmwwDuc2hFSVr1n2SC+G+gm+P
dt4AxO1HIUrMYOGk+4+JY4XIfmgyWApoYtr3KE9x1wracCM1Iu4RnUj9dY8F0vj1
zYn3yl8MM97w3yvtGX4NYF7snipNfv1mWHvt6QWMnN+GVxHNlcV1HZemuuKCEVhW
lqBsN/20e2lUVwBuXboeymPq96mazn/0wPxvpLrAOUMZ8HxdxxU4MQ7cZtfKO8yI
FmQ0vY9UB/R7xcW7OZgA/UH+taCtlG3/Hm3eJgFT3aQsWdmKopc5UGkFAQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLhIeq90mhkyYOmY7UWaAxupnJOYMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdUVoNnIzU2FHVEpnNlpqdFJab0RHNm1jazVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwA4w
MA0GCSqGSIb3DQEBCwUAA4IBAQAhGQtk6yEniHhd/N8kIcvidxwF0p0ocGgd+Zao
zE1jDc+l0ZwMyRpNZlSs1Df3g1z1mDB5tGwKNb8c+fGiPAH8fhW7MY/ssktLowz9
IyrGLGS/ypbH1bxdNHarqxxnYL1QHIEc3kOp1P9mZFkxwxRMuflM4N1vJ9yV7Tfj
Npc/OEd1Y3ThQiyx3ns0qzABMYZk7rYTTX+zqcbDoPLHuYC2ukBKEopwdRYpDtlY
HjfL1Dt5u4RUOytvB7Nlp6DTwvLw+L8a+fBCQ44BBR4L98vezdXmIKsIayeQTwR4
3zcu8Hg6Xjw+tkcaFHrTEN3WQW6EL+MCrzGfy9l08FxdNxGZ
-----END CERTIFICATE-----