Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y_11j8zr1p3NoreO8LEQPhb3u54.roa
File:                     y_11j8zr1p3NoreO8LEQPhb3u54.roa (raw, json)
Hash identifier:          Ct35XKOeEpuUWMlZ3cK81RaeezalYcZh4MXq4Dwmgdo=
Subject key identifier:   CB:FD:75:8F:CC:EB:D6:9D:CD:A2:B7:8E:F0:B1:10:3E:16:F7:BB:9E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E61378B322BFAFD83BB5A139DF0A06D9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y_11j8zr1p3NoreO8LEQPhb3u54.roa
Signing time:             Tue 24 Jan 2023 23:18:33 +0000
ROA not before:           Tue 24 Jan 2023 23:18:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200160
IP address blocks:        2a0e:b107:900::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e6:13:78:b3:22:bf:af:d8:3b:b5:a1:39:df:0a:06:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 23:18:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cbfd758fccebd69dcda2b78ef0b1103e16f7bb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:be:3d:25:34:5a:f8:0c:4f:41:d6:50:18:9d:
                    ab:6c:9d:6c:62:e2:ed:b7:1d:fd:be:bc:4a:46:6b:
                    cb:6c:f4:e9:88:1b:79:c2:1a:9e:3a:f6:f9:6e:49:
                    3d:41:91:cc:0d:2a:e6:39:88:ee:e0:4c:16:c0:c8:
                    06:99:6c:ce:a0:31:c4:2b:24:6e:cd:78:4b:43:68:
                    e4:aa:9c:66:e7:76:1e:65:55:e9:36:43:06:0a:ab:
                    c6:5e:59:12:a5:fb:0d:dc:f2:58:f9:cf:33:ea:13:
                    0a:cb:4f:dc:c4:1f:72:68:49:e1:81:ae:43:99:15:
                    6a:81:c3:f8:4f:08:29:f5:ee:0d:bc:05:b9:a7:ce:
                    32:97:a1:26:1d:0d:9a:3a:0e:eb:02:48:62:b1:f9:
                    52:66:0d:dd:cf:cc:35:21:82:e4:a1:54:0e:eb:99:
                    b3:b3:1a:d4:6a:dc:7c:ae:f4:53:da:df:63:d2:8a:
                    bd:51:e1:68:d8:8b:ac:d7:b0:38:e2:2c:74:82:59:
                    cf:69:cb:78:31:72:c6:fe:83:ee:03:09:67:7c:79:
                    49:ac:4a:3d:16:ce:05:69:7a:b3:56:3d:5c:cb:65:
                    c3:5f:cd:90:d4:93:81:37:ae:2c:bf:a7:f8:6f:c6:
                    cb:17:1b:3c:cc:97:d3:9f:0a:a1:f2:86:d9:0d:a3:
                    c0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FD:75:8F:CC:EB:D6:9D:CD:A2:B7:8E:F0:B1:10:3E:16:F7:BB:9E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y_11j8zr1p3NoreO8LEQPhb3u54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:900::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:38:05:b0:2e:13:fa:29:db:d3:b0:e5:b8:c7:23:ce:3b:21:
         fe:11:c4:78:bf:d0:47:7f:b6:4c:0b:0f:58:5a:27:fa:02:97:
         4f:80:27:2e:3f:e6:e9:79:3b:3f:2b:48:3d:f3:24:cf:bd:f1:
         b9:3d:3a:7b:6b:fc:70:73:fc:8c:55:9b:30:cd:83:a5:b6:da:
         9b:dd:ca:af:07:05:35:37:ec:0b:17:99:8e:92:fd:57:00:84:
         87:c3:49:f7:26:c9:69:0b:78:95:6c:22:76:24:2c:ab:65:db:
         da:7f:30:96:17:78:18:fa:90:6e:dc:82:a0:67:5f:4c:61:08:
         9d:de:3a:6e:22:8c:3d:f7:8f:2f:9a:eb:82:c3:b3:02:db:9e:
         53:47:f3:b1:06:8e:72:1f:ca:6c:36:3f:3e:55:38:7b:90:5c:
         16:86:bb:d4:95:fe:30:33:54:a5:97:de:5d:15:65:da:0c:13:
         07:fb:53:cc:5e:16:e3:76:ca:ae:b5:18:7b:dd:bb:1e:12:b3:
         60:12:1a:16:94:03:d4:cc:9c:78:39:ec:14:66:03:b8:7b:01:
         71:ac:4e:a9:01:2b:88:7b:0c:2f:41:cc:a4:9b:d8:a8:2d:b6:
         8b:91:90:b7:c9:86:2c:47:ad:4c:97:3b:88:45:cb:4e:25:83:
         76:25:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:05 2023 by rpki-client on console-ams.rpki-client.org