Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yRs-Zg8jqVNrUc21Uuj64LoZXFs.roa
File:                     yRs-Zg8jqVNrUc21Uuj64LoZXFs.roa (raw, json)
Hash identifier:          J0ffOK8EQS/fpIC+ByHnjZR0EvH8XIRcYxvXFey7u44=
Subject key identifier:   C9:1B:3E:66:0F:23:A9:53:6B:51:CD:B5:52:E8:FA:E0:BA:19:5C:5B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E82A22527E3DC5D5B35BA79A2733D6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yRs-Zg8jqVNrUc21Uuj64LoZXFs.roa
Signing time:             Mon 02 Jan 2023 05:15:41 +0000
ROA not before:           Mon 02 Jan 2023 05:15:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213312
IP address blocks:        2a0e:b107:1a40::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:2a:22:52:7e:3d:c5:d5:b3:5b:a7:9a:27:33:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c91b3e660f23a9536b51cdb552e8fae0ba195c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:58:63:11:da:37:34:76:58:37:5d:49:34:
                    e4:cc:c1:79:fc:f4:7a:36:9b:5e:0c:e6:74:c3:88:
                    7f:e1:88:be:c2:74:67:0b:69:c4:b7:63:71:91:5a:
                    2b:1b:e9:ad:de:52:a1:3b:a6:ce:ca:5c:d1:2a:63:
                    5d:37:59:a3:7d:8e:2e:ff:50:7d:79:51:5f:56:4a:
                    d3:2a:a8:4f:04:ff:cf:d3:2e:4c:44:85:c9:45:a8:
                    08:9d:76:c6:5a:41:3f:7f:49:5b:f6:e4:49:93:46:
                    85:ea:b6:9d:e3:31:a7:a6:87:43:3c:5b:eb:3a:0e:
                    b3:1e:de:5c:9b:8c:1f:83:6e:49:34:31:74:81:4e:
                    52:4f:9a:fe:d2:f2:9a:83:29:54:96:25:f6:c0:98:
                    f1:b9:c7:ca:2e:1c:9e:bf:02:61:55:66:9b:3e:99:
                    f7:4a:68:fc:74:d6:07:9e:0e:e2:bb:ed:92:3b:ba:
                    6b:9a:31:79:27:59:72:0f:6e:00:01:7e:d5:ec:3a:
                    4b:5e:27:bf:51:99:d8:36:ea:15:91:30:15:6e:67:
                    75:75:1c:18:85:b2:75:f2:b0:68:7e:46:ba:1f:e1:
                    16:f6:4a:fe:a9:5d:db:9d:e1:73:83:ef:b5:dc:c1:
                    c1:ed:8c:d7:6f:80:42:96:86:18:59:f9:5d:d4:13:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1B:3E:66:0F:23:A9:53:6B:51:CD:B5:52:E8:FA:E0:BA:19:5C:5B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yRs-Zg8jqVNrUc21Uuj64LoZXFs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1a40::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:be:93:d5:d3:14:0c:51:d9:23:d7:2d:4b:3f:b2:a5:6c:65:
         f3:b0:38:f1:7d:5f:e5:ed:56:d2:37:3c:a8:7c:bc:77:44:dd:
         76:9a:d1:5f:a5:62:cd:9e:7c:da:6e:7a:ef:04:6c:22:ec:f9:
         0a:d8:43:0b:bb:39:26:31:32:c0:84:4e:4f:02:bd:6a:a1:f8:
         a6:a8:ae:89:67:16:6d:35:b3:ea:70:f4:58:e4:84:07:ff:23:
         3a:0c:38:e9:3e:35:bb:8c:7c:74:68:7e:d1:3f:de:46:af:11:
         c4:34:39:a3:21:c8:b8:6a:64:00:e8:3a:1b:a8:b8:6c:7e:16:
         0b:ad:e1:96:fc:76:72:cd:86:83:73:56:6e:7b:76:99:80:01:
         05:7a:44:bb:cb:6e:d2:04:d0:39:7a:7a:57:ec:83:0c:b1:36:
         d2:6b:ab:a7:19:82:54:4a:23:b7:85:92:f4:11:64:bf:4b:02:
         65:7f:95:d1:d6:5b:13:3f:34:8d:9f:32:16:7c:4d:bb:af:85:
         b1:43:0d:d9:6c:d6:7b:9b:cc:0a:56:42:4a:15:f3:23:4f:79:
         f0:2e:7a:46:61:8e:bf:eb:b3:27:b6:5b:e1:03:fe:69:f4:ae:
         f5:30:ed:70:7c:05:25:ed:17:01:3e:e9:a5:83:09:f6:22:4a:
         81:4d:c6:06
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw6CoiUn49xdWzW6eaJzPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTFiM2U2NjBmMjNhOTUzNmI1MWNkYjU1MmU4ZmFlMGJhMTk1YzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNBYYxHaNzR2WDddSTTkzMF5/PR6
NpteDOZ0w4h/4Yi+wnRnC2nEt2NxkVorG+mt3lKhO6bOylzRKmNdN1mjfY4u/1B9
eVFfVkrTKqhPBP/P0y5MRIXJRagInXbGWkE/f0lb9uRJk0aF6rad4zGnpodDPFvr
Og6zHt5cm4wfg25JNDF0gU5ST5r+0vKagylUliX2wJjxucfKLhyevwJhVWabPpn3
Smj8dNYHng7iu+2SO7prmjF5J1lyD24AAX7V7DpLXie/UZnYNuoVkTAVbmd1dRwY
hbJ18rBofka6H+EW9kr+qV3bneFzg++13MHB7YzXb4BCloYYWfld1BN40wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMkbPmYPI6lTa1HNtVLo+uC6GVxbMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEveVJzLVpnOGpxVk5yVWMyMVV1ajY0TG9aWEZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxpA
MA0GCSqGSIb3DQEBCwUAA4IBAQAIvpPV0xQMUdkj1y1LP7KlbGXzsDjxfV/l7VbS
NzyofLx3RN12mtFfpWLNnnzabnrvBGwi7PkK2EMLuzkmMTLAhE5PAr1qofimqK6J
ZxZtNbPqcPRY5IQH/yM6DDjpPjW7jHx0aH7RP95GrxHENDmjIci4amQA6DobqLhs
fhYLreGW/HZyzYaDc1Zue3aZgAEFekS7y27SBNA5enpX7IMMsTbSa6unGYJUSiO3
hZL0EWS/SwJlf5XR1lsTPzSNnzIWfE27r4WxQw3ZbNZ7m8wKVkJKFfMjT3nwLnpG
YY6/67MntlvhA/5p9K71MO1wfAUl7RcBPumlgwn2IkqBTcYG
-----END CERTIFICATE-----