Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v167jOcU7V1VprosRHUCPnRust4.roa
File:                     v167jOcU7V1VprosRHUCPnRust4.roa (raw, json)
Hash identifier:          tVXmjcEk1UhsY2Wanyynwiy/luPmMvIMtwCp8kUH35E=
Subject key identifier:   BF:5E:BB:8C:E7:14:ED:5D:55:A6:BA:2C:44:75:02:3E:74:6E:B2:DE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CC9BD55E4910420E4D5B5FE9B77CC9E13
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v167jOcU7V1VprosRHUCPnRust4.roa
Signing time:             Tue 02 Jan 2024 10:34:37 +0000
ROA not before:           Tue 02 Jan 2024 10:34:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216084
IP address blocks:        2a0e:97c0::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 21:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bd:55:e4:91:04:20:e4:d5:b5:fe:9b:77:cc:9e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 10:34:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bf5ebb8ce714ed5d55a6ba2c4475023e746eb2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e3:fd:41:44:6e:80:46:38:b4:b9:44:65:f2:
                    bf:42:f2:68:8d:e5:34:4a:c1:0d:30:2b:e9:0f:03:
                    49:0e:b6:16:22:73:82:37:48:15:84:b1:17:70:35:
                    86:d7:6a:b3:cb:cb:a2:72:92:47:70:8d:29:c5:37:
                    69:e9:6d:87:ca:cb:49:1b:77:73:30:78:d0:58:06:
                    a6:88:b5:df:74:dd:91:8d:1f:8c:1f:1a:ff:e0:b0:
                    f7:41:36:92:17:de:97:87:06:e8:ec:84:03:14:49:
                    d9:26:23:7d:06:d9:38:98:61:5f:04:c9:a2:ef:a1:
                    10:83:3c:07:6f:2a:20:4d:52:66:44:31:74:fe:cf:
                    11:a1:a0:29:e4:8d:25:ab:ae:23:08:6c:d3:63:2b:
                    ea:33:d4:fa:b4:ea:60:6a:cb:4e:be:df:f9:0d:55:
                    30:19:bc:32:ab:3a:29:88:d8:c0:22:3c:fa:1c:2b:
                    4e:22:6f:e8:85:3c:f0:2b:0a:13:a7:5a:0d:fa:8e:
                    e4:eb:05:a7:a1:b4:0a:83:b0:b0:2e:0e:b7:91:09:
                    a7:d0:10:c6:da:e4:a3:33:ed:88:82:b0:1c:99:e5:
                    c1:29:c0:23:a7:aa:0a:92:45:24:1b:a8:a8:dd:06:
                    e0:a3:ed:33:16:8e:23:ff:dd:20:e2:e6:2d:37:68:
                    78:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5E:BB:8C:E7:14:ED:5D:55:A6:BA:2C:44:75:02:3E:74:6E:B2:DE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v167jOcU7V1VprosRHUCPnRust4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:55:87:45:f6:9f:29:61:89:53:e8:4e:f0:68:8b:62:71:56:
         69:6c:ea:25:66:75:89:23:b1:48:dc:55:4e:ec:c4:25:9d:13:
         f7:1f:a5:26:f1:50:22:b1:4e:e8:1c:88:ea:74:5d:a5:f7:db:
         ad:3b:51:f0:7a:e2:77:d5:67:7a:1f:a2:ef:39:a7:07:bb:fc:
         14:d6:4c:7d:74:ce:76:ec:83:65:02:a9:08:af:eb:3e:03:5c:
         62:4e:47:94:9d:64:c2:e1:6d:50:55:6b:21:f3:b4:b0:2a:bc:
         30:31:b2:1b:3b:e3:b0:f5:45:a3:92:b7:e4:27:99:d3:e2:a9:
         80:ed:75:54:1b:44:03:d6:c3:43:01:37:28:85:4c:0c:07:10:
         6c:22:b8:41:16:27:84:24:43:98:62:5c:98:af:5b:c5:f1:d4:
         78:2c:af:3e:47:ae:c1:43:8f:2d:54:21:ab:43:62:0f:ac:c8:
         88:20:5e:e0:42:11:ab:b2:7c:f2:75:fb:5e:62:66:bb:ad:71:
         63:84:fb:78:41:5a:cd:67:da:a8:4b:ca:33:2c:21:47:0f:7a:
         15:f8:2b:b2:e7:c1:81:a3:36:25:35:9e:a5:73:bb:fb:33:85:
         5c:fa:10:ae:c3:95:51:23:2c:dc:3e:03:c3:a1:09:bb:4d:67:
         dd:8e:e2:1a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzJvVXkkQQg5NW1/pt3zJ4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjVlYmI4Y2U3MTRlZDVkNTVhNmJhMmM0NDc1MDIzZTc0NmViMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeP9QURugEY4tLlEZfK/QvJojeU0
SsENMCvpDwNJDrYWInOCN0gVhLEXcDWG12qzy8uicpJHcI0pxTdp6W2HystJG3dz
MHjQWAamiLXfdN2RjR+MHxr/4LD3QTaSF96Xhwbo7IQDFEnZJiN9Btk4mGFfBMmi
76EQgzwHbyogTVJmRDF0/s8RoaAp5I0lq64jCGzTYyvqM9T6tOpgastOvt/5DVUw
GbwyqzopiNjAIjz6HCtOIm/ohTzwKwoTp1oN+o7k6wWnobQKg7CwLg63kQmn0BDG
2uSjM+2IgrAcmeXBKcAjp6oKkkUkG6io3Qbgo+0zFo4j/90g4uYtN2h4lQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFL9eu4znFO1dVaa6LER1Aj50brLeMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdjE2N2pPY1U3VjFWcHJvc1JIVUNQblJ1c3Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg6XwAAw
DQYJKoZIhvcNAQELBQADggEBAIVVh0X2nylhiVPoTvBoi2JxVmls6iVmdYkjsUjc
VU7sxCWdE/cfpSbxUCKxTugciOp0XaX32607UfB64nfVZ3ofou85pwe7/BTWTH10
znbsg2UCqQiv6z4DXGJOR5SdZMLhbVBVayHztLAqvDAxshs747D1RaOSt+QnmdPi
qYDtdVQbRAPWw0MBNyiFTAwHEGwiuEEWJ4QkQ5hiXJivW8Xx1Hgsrz5HrsFDjy1U
IatDYg+syIggXuBCEauyfPJ1+15iZrutcWOE+3hBWs1n2qhLyjMsIUcPehX4K7Ln
wYGjNiU1nqVzu/szhVz6EK7DlVEjLNw+A8OhCbtNZ92O4ho=
-----END CERTIFICATE-----