Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/usbQ2if7_6AU_Kqhgcx06yUPp8M.roa
File:                     usbQ2if7_6AU_Kqhgcx06yUPp8M.roa (raw, json)
Hash identifier:          b4EebR7ydzAcSHlZhnhev6DpwKr3cNUnmG9lQEjtZAk=
Subject key identifier:   BA:C6:D0:DA:27:FB:FF:A0:14:FC:AA:A1:81:CC:74:EB:25:0F:A7:C3
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01879043E884CE830410C18F7B525ACB3DE8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/usbQ2if7_6AU_Kqhgcx06yUPp8M.roa
Signing time:             Mon 17 Apr 2023 17:29:42 +0000
ROA not before:           Mon 17 Apr 2023 17:29:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200270
IP address blocks:        2a0e:b107:2130::/44 maxlen: 48
                          2a10:2f00:190::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:90:43:e8:84:ce:83:04:10:c1:8f:7b:52:5a:cb:3d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 17 17:29:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bac6d0da27fbffa014fcaaa181cc74eb250fa7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bb:b4:2a:9e:a5:c9:cb:ed:1b:01:81:68:44:
                    16:6a:bf:a1:1f:c5:95:ab:da:4e:c8:31:44:04:8c:
                    fc:0d:66:08:80:ac:0a:23:32:e4:74:84:c5:22:d5:
                    c3:c1:cc:17:5c:0b:c8:25:54:ff:c1:bb:51:14:1a:
                    c1:9e:79:27:a8:1f:12:26:bf:d7:20:f4:ba:f1:5c:
                    a6:33:af:6c:d5:b1:9c:bf:f8:a5:d5:90:f9:34:21:
                    d4:cf:cf:bf:b3:2c:b6:2e:74:a8:22:3a:79:c0:42:
                    68:81:8a:81:31:3d:52:6e:ca:6b:17:87:a8:76:bd:
                    34:cb:db:78:51:e7:9b:cb:7a:c9:71:31:15:61:f0:
                    90:ab:d0:51:0d:71:e3:5d:b6:6f:6c:07:72:25:a7:
                    bb:99:48:68:7a:fd:4e:bf:8f:1d:51:4a:c4:84:44:
                    f5:73:cc:24:4e:27:e4:03:1a:5a:83:f1:3e:3e:2f:
                    e8:69:3a:4e:1e:05:ef:8b:03:74:ae:f2:ac:7d:c0:
                    94:28:cf:20:4f:fc:d8:29:18:95:d0:bf:18:f5:24:
                    49:8a:01:48:5a:67:f9:ca:65:52:9c:91:26:49:d2:
                    97:77:0b:04:3a:30:ca:e5:56:9a:47:fb:74:46:7c:
                    3e:d8:bc:cc:5c:06:4a:36:06:f4:c6:4f:15:7b:db:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C6:D0:DA:27:FB:FF:A0:14:FC:AA:A1:81:CC:74:EB:25:0F:A7:C3
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/usbQ2if7_6AU_Kqhgcx06yUPp8M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:2130::/44
                  2a10:2f00:190::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:a4:f2:83:69:ca:6d:41:06:9e:5c:60:c3:a3:c5:4d:ad:00:
         a4:14:7b:12:2f:6e:2a:c0:47:22:d8:07:d2:c3:55:4b:bd:0a:
         a6:b8:15:bd:d9:b1:0b:eb:05:d6:62:f4:20:72:dd:0e:24:ef:
         2c:51:26:2d:d4:78:1f:44:dd:20:0f:bb:8a:57:5b:ae:12:20:
         38:59:2a:91:5a:21:10:42:70:a3:20:35:11:6e:80:d5:20:f6:
         8c:d1:fa:b4:ea:b5:95:ed:71:d8:d3:f1:e6:95:4d:d2:11:d5:
         b6:75:c5:86:f5:d4:94:07:33:94:8a:f6:de:7a:62:29:da:8e:
         da:1c:ea:73:27:16:58:1e:dd:43:7f:58:ab:33:5b:61:ca:d3:
         56:4c:ef:d9:4f:40:a1:8f:4a:33:a4:77:09:79:b3:56:f3:8a:
         c1:ad:6f:5d:ff:67:49:ea:f3:d5:c8:08:b1:e1:70:0e:26:a1:
         98:ee:94:11:9e:be:ea:25:12:30:c6:83:d7:d4:e2:43:8d:08:
         e2:6a:c3:35:9e:02:64:f0:ef:43:a4:18:a1:b2:f0:f1:08:02:
         5c:3d:5d:da:88:3d:2f:c2:c1:0f:d9:ff:3e:a5:93:e2:b2:63:
         e3:16:83:6e:72:2a:0b:20:d8:de:d8:d5:33:f9:7f:89:7b:63:
         86:b6:a1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----