Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wayXvrefHa4u1R4hpyW5t4T57Tg.roa
File:                     wayXvrefHa4u1R4hpyW5t4T57Tg.roa (raw, json)
Hash identifier:          JhL1GCnnaE4CTldwzEG8elSTRW66Q+9x3pUVZjG7s5c=
Subject key identifier:   C1:AC:97:BE:B7:9F:1D:AE:2E:D5:1E:21:A7:25:B9:B7:84:F9:ED:38
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7F214DFA617FA16F87EEC65BEEA39
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wayXvrefHa4u1R4hpyW5t4T57Tg.roa
Signing time:             Mon 02 Jan 2023 05:15:26 +0000
ROA not before:           Mon 02 Jan 2023 05:15:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210761
IP address blocks:        2a0e:b107:19c7::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:f2:14:df:a6:17:fa:16:f8:7e:ec:65:be:ea:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1ac97beb79f1dae2ed51e21a725b9b784f9ed38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:87:1d:2a:99:69:34:dd:18:fa:5d:dd:b1:
                    2d:19:b3:76:96:9e:f9:82:40:fa:2c:4a:a2:75:53:
                    ce:ac:74:a5:0d:15:cb:61:a4:2d:a6:80:b9:ad:e3:
                    04:46:8c:43:77:3d:77:bf:f4:e2:ef:f2:91:4b:36:
                    a0:bb:20:f3:8a:51:7b:aa:86:78:23:14:98:0f:2a:
                    3f:07:06:78:d5:2f:ae:e3:43:f0:58:88:ad:bf:5e:
                    3e:00:fc:08:99:98:85:c1:c3:ea:57:2f:21:75:62:
                    2f:21:7e:3e:b4:28:39:28:37:e2:1b:2c:9f:0c:6a:
                    d0:99:4a:38:02:a0:00:25:47:b3:e7:cd:b9:14:e8:
                    28:c8:0a:9b:2b:3f:8e:b6:e0:9e:3f:30:0a:b3:31:
                    eb:e3:03:37:2a:98:b3:97:2e:99:e7:be:fc:e2:e2:
                    eb:98:39:87:21:07:fc:cc:5e:23:4e:ba:ec:99:ed:
                    3b:9e:22:6b:39:77:41:4e:29:cc:8c:69:89:a1:ef:
                    08:e9:82:22:68:54:b2:70:bb:50:93:ce:7d:3e:f9:
                    ba:53:41:b0:7a:f5:0c:40:74:61:b7:7c:2e:1e:ce:
                    14:76:dd:d9:52:ee:3e:d7:6a:34:5e:bd:dc:e9:07:
                    ce:d9:93:6c:ae:24:34:ea:3a:f6:19:00:11:84:46:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AC:97:BE:B7:9F:1D:AE:2E:D5:1E:21:A7:25:B9:B7:84:F9:ED:38
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wayXvrefHa4u1R4hpyW5t4T57Tg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:19c7::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:bf:f0:7c:c5:7b:a8:d7:44:de:6f:83:6e:fd:bc:f1:b5:ed:
         84:f1:e9:74:a0:96:4b:e3:9f:11:e3:f0:4d:b1:1c:4f:bd:ed:
         aa:40:2d:a7:ca:51:57:d1:1c:58:0a:d5:16:8a:30:a8:26:64:
         b6:09:96:b7:71:e2:70:d2:73:fe:7b:dc:68:bc:36:91:b7:59:
         91:11:b0:4a:12:01:42:5a:89:43:5d:df:42:8a:1b:41:90:13:
         f3:f4:74:69:5b:3b:ea:a4:e9:28:47:b2:b2:ea:f3:ce:7e:35:
         62:23:57:ae:84:bd:52:0a:1c:5b:22:9e:09:55:2a:06:cd:40:
         d3:1b:5b:92:29:68:0f:d8:5c:71:ee:93:2f:6a:a4:04:1f:b4:
         6f:19:76:3f:28:b7:2f:56:27:35:c2:0d:df:ea:ac:fd:05:5e:
         6f:37:c1:c2:b0:92:86:94:8d:38:b4:67:17:7d:c4:76:14:53:
         db:55:cf:38:8c:3a:a9:cc:1a:cd:bc:7e:4a:8f:bd:d7:54:64:
         d3:6b:8f:9e:d0:23:de:f5:28:bb:f9:cc:d5:75:57:28:a8:23:
         8e:da:6c:d6:25:6e:09:42:6a:1d:47:fa:43:e9:2a:1a:a6:a9:
         9c:39:e6:a5:c9:54:fd:97:08:1b:50:7a:8a:6e:20:00:67:f3:
         4e:f5:19:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----