Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xkdDHZlFAlDHW0KCXFrhI8nvkPQ.roa
File:                     xkdDHZlFAlDHW0KCXFrhI8nvkPQ.roa (raw, json)
Hash identifier:          cT3T3V4ju1fy7AW3oQhQNfh1n7ogUe4aNBi5RGvqFrA=
Subject key identifier:   C6:47:43:1D:99:45:02:50:C7:5B:42:82:5C:5A:E1:23:C9:EF:90:F4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CC9BD5BBA8AD4359E20D7D7EF27AF30F3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xkdDHZlFAlDHW0KCXFrhI8nvkPQ.roa
Signing time:             Tue 02 Jan 2024 10:34:39 +0000
ROA not before:           Tue 02 Jan 2024 10:34:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     262185
IP address blocks:        2a06:de01:500::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 20 Jan 2024 02:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bd:5b:ba:8a:d4:35:9e:20:d7:d7:ef:27:af:30:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 10:34:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c647431d99450250c75b42825c5ae123c9ef90f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:80:74:61:0d:2f:4b:7d:43:f8:19:17:59:
                    f5:62:87:64:84:22:bd:b2:4c:86:24:30:25:90:c1:
                    d6:f3:c5:da:0a:fa:68:49:18:2d:b3:0d:de:f6:75:
                    77:30:0b:1e:a3:b5:54:26:e2:49:f4:b7:90:23:a2:
                    7b:05:30:72:6c:49:d8:c2:3b:8b:12:91:24:8d:4a:
                    a5:e7:87:bd:d2:10:9a:5e:39:f2:9d:5a:03:88:27:
                    4a:c9:22:56:36:45:8f:63:24:c8:f2:19:af:18:0e:
                    0a:f1:9f:fb:ec:e4:2d:12:bc:bd:df:be:b8:11:d1:
                    44:8c:30:e4:52:9c:09:20:8d:c8:0d:1b:f2:a6:b1:
                    42:80:ae:a8:79:5a:b2:80:e8:6c:35:61:94:53:d7:
                    06:9e:80:8c:2e:2d:a0:6f:ba:bb:c2:ae:4d:0a:78:
                    0f:7f:51:37:d7:27:12:eb:cc:f6:fc:ad:f7:91:12:
                    e9:b2:a1:e5:90:6c:9c:92:9b:f5:66:8e:6c:34:59:
                    dd:e2:9b:dd:5e:ec:8e:a7:9e:7c:ee:fb:e2:ae:3d:
                    24:47:84:3b:29:81:2c:55:e1:86:d4:c2:b7:be:c1:
                    10:2b:04:01:b8:8d:c8:46:b2:a0:b9:3e:e9:86:26:
                    e3:0c:a2:26:f5:62:dd:82:61:e1:13:15:09:7e:88:
                    c3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:47:43:1D:99:45:02:50:C7:5B:42:82:5C:5A:E1:23:C9:EF:90:F4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xkdDHZlFAlDHW0KCXFrhI8nvkPQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de01:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:98:6f:a5:41:25:75:56:31:da:4d:2b:91:fd:f8:29:3a:4f:
         3a:62:c7:5d:7f:9c:ee:36:d7:a5:74:a8:85:63:c2:54:f7:77:
         9e:70:c8:e3:d7:b0:68:7b:d5:0b:6c:70:14:89:69:cd:93:df:
         32:30:3b:e6:2d:82:78:15:78:b6:d3:f7:a2:b5:5d:c8:cb:e3:
         e9:4d:fc:d2:e5:4b:1d:c3:ac:79:da:3c:43:87:33:5a:1d:02:
         08:55:7d:1c:aa:47:ac:d1:ef:a3:4c:60:18:17:78:db:a1:6a:
         51:e7:13:7b:9e:f4:75:04:80:de:02:f5:87:00:be:01:a1:b4:
         7d:87:1a:1f:55:3e:63:ee:6b:35:6b:66:0f:d4:fa:49:ab:4a:
         0d:37:fd:b7:52:27:2e:d8:ca:6d:a3:e8:b1:b1:cd:9f:b7:51:
         f4:98:d9:01:3c:39:ce:da:3c:65:59:ee:18:4f:80:eb:a8:48:
         87:f0:35:44:e9:4e:b9:1c:dc:f6:13:ab:bf:62:71:a5:a3:70:
         e2:bb:40:fc:a1:3d:c3:bd:68:c3:0d:0f:c9:b8:14:4c:e6:14:
         19:79:9d:89:76:c3:85:5e:6c:d7:c4:0d:59:35:c2:e4:f1:94:
         35:b7:d9:bb:83:c2:c9:5a:e7:ea:b7:c8:86:60:aa:a5:54:29:
         6b:fb:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----