Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vuCtWM_lOAnACoXiBN9okrJzkFo.roa
File:                     vuCtWM_lOAnACoXiBN9okrJzkFo.roa (raw, json)
Hash identifier:          hpiFrVzAy89j/xTP1VxgtpMaLr+g/NTd7EMExC2+qOA=
Subject key identifier:   BE:E0:AD:58:CF:E5:38:09:C0:0A:85:E2:04:DF:68:92:B2:73:90:5A
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AFFE687351FBB9BA1DD7FFC0A7623
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vuCtWM_lOAnACoXiBN9okrJzkFo.roa
Signing time:             Tue 24 Jan 2023 16:09:52 +0000
ROA not before:           Tue 24 Jan 2023 16:09:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212154
IP address blocks:        2a0e:b107:1c00::/48 maxlen: 48
                          2a0e:b107:1c0f::/48 maxlen: 48
                          2a0e:b107:1c0e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:ff:e6:87:35:1f:bb:9b:a1:dd:7f:fc:0a:76:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bee0ad58cfe53809c00a85e204df6892b273905a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:92:35:50:27:32:57:59:b2:f9:8a:ab:e6:c9:
                    28:35:f8:91:2e:7b:e3:eb:e5:56:ed:64:3b:68:65:
                    5b:db:1d:b5:23:18:8b:9c:88:cc:90:33:6e:0c:07:
                    8a:c8:63:8c:80:42:db:ea:40:8d:ae:1f:39:b1:37:
                    55:ce:9f:3f:c4:87:ff:69:55:6b:4a:48:60:80:d3:
                    44:58:4e:5a:66:5b:2d:4a:ec:48:de:15:e8:e7:87:
                    d2:ef:9f:ae:13:85:b2:59:f0:c6:c2:93:be:69:57:
                    2d:3b:1c:1a:ed:7b:1a:de:af:7a:f7:59:e0:3a:1e:
                    28:0e:a3:3c:22:d4:11:8d:e5:78:f8:a9:a4:14:45:
                    72:1e:08:aa:2a:b0:36:ef:f9:ab:72:70:d6:bc:af:
                    90:69:67:c3:c6:30:f9:2d:b8:d0:9d:d3:c7:84:9d:
                    7b:a9:b9:bb:d7:5f:14:e5:57:4c:28:de:4e:97:ae:
                    ea:05:2f:73:45:e9:bf:49:49:8a:13:2b:22:4d:f9:
                    f7:bc:7d:4c:03:e0:d6:42:ab:c8:ed:98:33:4c:70:
                    67:44:08:f3:0d:26:7f:aa:23:6f:ac:4f:7a:99:5a:
                    47:be:50:44:2e:50:c8:67:5c:2c:5f:f3:56:89:fc:
                    dc:75:ac:9a:24:1c:d2:09:7a:dc:d5:78:8a:52:4d:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E0:AD:58:CF:E5:38:09:C0:0A:85:E2:04:DF:68:92:B2:73:90:5A
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vuCtWM_lOAnACoXiBN9okrJzkFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1c00::/48
                  2a0e:b107:1c0e::/47

    Signature Algorithm: sha256WithRSAEncryption
         b3:4c:80:b7:c1:19:74:6a:fd:f1:f4:89:9d:fc:a5:e6:a2:87:
         02:be:07:1d:10:d2:58:6e:5a:0e:9c:c2:3f:f0:9f:34:e6:2c:
         83:d4:7c:76:bc:52:7f:a5:e4:cc:b8:12:c4:14:b5:53:c1:fe:
         4f:6b:1b:dc:4c:e3:4c:7a:47:2f:69:e7:e3:f0:12:d9:d0:8e:
         68:06:41:de:cb:81:08:56:e9:8f:f0:14:25:23:5b:ff:bf:50:
         5b:62:39:30:29:3c:fa:1b:7f:aa:c2:7b:b8:42:b0:d0:20:22:
         11:32:11:06:52:97:05:32:54:ae:30:df:ac:45:f0:38:6b:59:
         0e:b4:a8:5d:7f:98:69:9a:c4:f6:a0:1e:79:1f:32:f4:d2:6c:
         f6:1f:b6:77:8e:80:2e:72:c0:a8:16:67:32:dd:8f:7d:a8:27:
         a7:3c:6a:1b:9e:8c:f6:8d:83:47:3f:06:2a:77:d3:b8:30:d5:
         59:43:8d:69:93:87:72:e2:35:9a:d3:e0:80:b7:04:13:29:d8:
         0c:cf:d3:57:e8:72:f2:9b:29:47:08:fd:0b:b9:8c:2d:e6:9d:
         de:23:14:7e:9f:9d:f8:28:d3:df:fd:4c:19:df:a9:89:f5:aa:
         3b:f1:76:2a:b9:b2:fe:a5:fb:38:70:64:47:e4:68:d5:15:dc:
         e1:4e:a0:b9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYXkiv/mhzUfu5uh3X/8CnYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWUwYWQ1OGNmZTUzODA5YzAwYTg1ZTIwNGRmNjg5MmIyNzM5MDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZI1UCcyV1my+Yqr5skoNfiRLnvj
6+VW7WQ7aGVb2x21IxiLnIjMkDNuDAeKyGOMgELb6kCNrh85sTdVzp8/xIf/aVVr
SkhggNNEWE5aZlstSuxI3hXo54fS75+uE4WyWfDGwpO+aVctOxwa7Xsa3q9691ng
Oh4oDqM8ItQRjeV4+KmkFEVyHgiqKrA27/mrcnDWvK+QaWfDxjD5LbjQndPHhJ17
qbm7118U5VdMKN5Ol67qBS9zRem/SUmKEysiTfn3vH1MA+DWQqvI7ZgzTHBnRAjz
DSZ/qiNvrE96mVpHvlBELlDIZ1wsX/NWifzcdayaJBzSCXrc1XiKUk2W1QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL7grVjP5TgJwAqF4gTfaJKyc5BaMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdnVDdFdNX2xPQW5BQ29YaUJOOW9rckp6a0ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6xBxwA
AwcBKg6xBxwOMA0GCSqGSIb3DQEBCwUAA4IBAQCzTIC3wRl0av3x9Imd/KXmoocC
vgcdENJYbloOnMI/8J805iyD1Hx2vFJ/peTMuBLEFLVTwf5PaxvcTONMekcvaefj
8BLZ0I5oBkHey4EIVumP8BQlI1v/v1BbYjkwKTz6G3+qwnu4QrDQICIRMhEGUpcF
MlSuMN+sRfA4a1kOtKhdf5hpmsT2oB55HzL00mz2H7Z3joAucsCoFmcy3Y99qCen
PGobnoz2jYNHPwYqd9O4MNVZQ41pk4dy4jWa0+CAtwQTKdgMz9NX6HLymylHCP0L
uYwt5p3eIxR+n534KNPf/UwZ36mJ9ao78XYqubL+pfs4cGRH5GjVFdzhTqC5
-----END CERTIFICATE-----