Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wok3VfnWzRMXRKoVMKkaJXQF51M.roa
File:                     wok3VfnWzRMXRKoVMKkaJXQF51M.roa (raw, json)
Hash identifier:          klZJNUQEXpHqtEyCATbq1xDD3Zcz5pMZI+BsFj7NmGg=
Subject key identifier:   C2:89:37:55:F9:D6:CD:13:17:44:AA:15:30:A9:1A:25:74:05:E7:53
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7BFBEB6087944EDC98C98B07F1619
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wok3VfnWzRMXRKoVMKkaJXQF51M.roa
Signing time:             Mon 02 Jan 2023 05:15:14 +0000
ROA not before:           Mon 02 Jan 2023 05:15:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204840
IP address blocks:        2a0e:97c0:3c0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:bf:be:b6:08:79:44:ed:c9:8c:98:b0:7f:16:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2893755f9d6cd131744aa1530a91a257405e753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d2:e5:84:19:9a:d1:2a:93:80:67:0f:ea:b8:
                    61:2a:a4:c1:d0:a0:2e:51:04:de:bb:91:1e:b1:c5:
                    d2:cb:4f:76:40:44:bf:4b:3b:a1:76:34:5a:c7:ce:
                    9f:33:20:c8:e3:4e:e1:73:ea:a7:37:b8:24:11:59:
                    0b:09:c4:67:e3:e3:c7:d9:89:07:2e:c8:ae:f8:fa:
                    43:7d:43:f0:3f:80:96:fe:08:f4:f4:8f:98:75:01:
                    a1:22:12:e9:75:60:fe:7c:bc:27:e3:b6:49:0b:fd:
                    b0:b0:2e:77:6a:ba:4e:b8:62:74:4f:82:fe:c6:e2:
                    3b:47:54:56:8b:f7:6d:1f:59:6a:c4:8b:ee:53:1a:
                    9a:7c:70:58:85:1f:87:b3:39:95:58:32:dc:61:3c:
                    bb:54:bb:a0:13:1a:1d:57:48:16:1a:93:4b:2f:d7:
                    23:4c:bb:2d:37:4c:8b:81:d0:f9:5e:96:49:6b:3c:
                    e7:f2:ab:bd:ac:ef:58:9e:0d:56:9e:d5:b7:56:3f:
                    20:3a:9d:b8:26:a9:a2:18:18:8d:79:d6:09:35:5a:
                    7f:f1:1a:34:a6:c9:b6:ac:8e:42:0f:21:7f:25:96:
                    1e:18:62:4a:4a:08:42:6b:f8:2d:90:eb:a2:e3:d4:
                    6a:45:b3:14:95:92:6b:9e:0d:5e:ed:70:b5:bd:2a:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:89:37:55:F9:D6:CD:13:17:44:AA:15:30:A9:1A:25:74:05:E7:53
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wok3VfnWzRMXRKoVMKkaJXQF51M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:3c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:73:09:82:bf:2b:cc:8c:6d:97:cf:42:63:8a:aa:2d:c4:17:
         89:8e:d4:2c:12:f7:21:e4:95:03:6b:fe:86:42:39:7e:b9:6e:
         67:7a:2c:cc:46:9a:22:b4:4f:df:d4:1b:46:b5:25:2e:6c:ba:
         51:91:d2:58:f4:9d:5c:79:e7:b5:b7:29:e1:b5:9a:d0:4a:26:
         46:83:69:96:38:8c:55:6e:34:0c:fd:52:a0:b2:80:93:2b:14:
         3c:97:41:75:61:05:c1:9e:e0:7d:59:54:3a:e6:d8:ae:69:13:
         29:9d:a8:91:ff:b1:62:e0:73:c7:66:ca:b6:bd:ca:22:82:46:
         2d:c1:97:92:a8:57:6d:5e:20:3e:6a:4d:b9:1e:7f:53:20:e0:
         85:11:b2:6b:4b:d3:54:e2:c7:f3:0b:63:1b:1b:44:b6:36:65:
         33:2a:b5:ec:e4:a7:3d:bc:25:0d:d8:ea:e7:26:c4:e9:54:63:
         f5:50:07:19:8c:5c:5d:c8:63:ff:71:1d:ea:ca:80:47:cc:8f:
         51:2b:81:ed:f5:c3:ac:fe:8d:07:73:f9:ac:d1:bb:71:f4:d5:
         20:13:11:da:cd:48:15:89:e7:e5:26:98:a5:c4:f1:40:9d:a3:
         9f:18:52:e2:a1:a2:ed:c9:69:91:3e:a9:1a:9f:07:b5:ff:f3:
         7e:4c:c7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----