Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yuCCgsnaV83mQLVQ_B5lPfICVZs.roa
File:                     yuCCgsnaV83mQLVQ_B5lPfICVZs.roa (raw, json)
Hash identifier:          Bwp6GqcQhQEP6wdMdN7Cj61+d8fwdey0gY9zyInu6bE=
Subject key identifier:   CA:E0:82:82:C9:DA:57:CD:E6:40:B5:50:FC:1E:65:3D:F2:02:55:9B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0186A0F9CB0F0BF6F3735B261174EBD1721D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yuCCgsnaV83mQLVQ_B5lPfICVZs.roa
Signing time:             Thu 02 Mar 2023 06:19:30 +0000
ROA not before:           Thu 02 Mar 2023 06:19:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202827
IP address blocks:        2a0e:b107:1ce1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a0:f9:cb:0f:0b:f6:f3:73:5b:26:11:74:eb:d1:72:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar  2 06:19:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cae08282c9da57cde640b550fc1e653df202559b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:e6:c2:28:25:4a:af:75:b2:d5:a2:87:b7:
                    fc:c4:e8:d5:c5:51:2a:05:0d:8b:2b:72:1f:65:bf:
                    a5:a1:ae:87:9d:cd:de:51:7c:3b:c2:53:f1:f3:94:
                    62:64:10:2f:7e:2e:d9:09:d0:a6:8c:7f:ff:42:ea:
                    b5:b8:11:fb:e0:9e:98:fd:22:d0:2d:e9:fe:5c:b6:
                    b0:3f:3c:d2:4f:59:5c:7d:c0:08:b8:2b:6c:69:6f:
                    9f:a8:78:18:46:9a:74:3a:53:38:79:1e:dc:6e:fc:
                    2b:11:35:0f:62:28:2a:f6:09:f2:e0:70:8d:69:59:
                    34:6d:7c:95:b5:1f:bc:2b:f9:04:ec:14:5e:f6:3a:
                    96:27:bf:66:65:3c:db:ae:cc:85:4a:c7:b3:72:f0:
                    7b:41:bb:37:3f:c4:13:1c:62:bb:3b:93:d9:dc:f1:
                    a9:33:90:d9:1d:1c:2c:2b:86:c4:64:0a:a8:40:af:
                    bc:61:5a:4c:34:8e:84:18:17:ee:ef:a9:23:8d:50:
                    46:31:bf:92:64:7a:54:f2:cf:3f:1b:23:58:f2:09:
                    fb:d9:9c:7c:a3:7c:e6:c2:10:f3:fa:b4:73:fa:38:
                    aa:80:10:b8:4b:20:af:e4:11:d1:04:03:67:f0:f3:
                    8e:d0:a7:ed:2d:c7:61:21:6f:6f:75:8e:7f:9d:bb:
                    db:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E0:82:82:C9:DA:57:CD:E6:40:B5:50:FC:1E:65:3D:F2:02:55:9B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yuCCgsnaV83mQLVQ_B5lPfICVZs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1ce1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:79:d1:b7:b5:39:98:3f:e2:c8:82:29:3e:28:4d:3c:50:1e:
         68:69:a0:85:f5:33:df:5e:46:33:22:ff:0e:c3:5a:24:0a:47:
         e8:27:99:f7:d9:11:97:66:de:a4:28:57:bc:57:92:9a:43:e4:
         bc:a8:2f:7f:98:31:a8:89:f8:ef:c6:99:ee:76:27:2c:8e:1b:
         59:6d:b9:f1:11:5f:89:d5:1d:e6:0e:61:37:dc:90:d1:9e:f6:
         5c:0e:4d:4d:96:e6:c9:ce:7e:9b:aa:fb:d3:69:f0:d9:16:9b:
         a6:5f:c2:e7:d7:ed:54:df:30:42:8b:81:82:0c:f5:28:18:ad:
         23:fe:b5:9a:bb:91:b9:20:06:c8:05:a0:45:df:a7:da:f7:00:
         9e:4c:4a:d6:b0:e5:7c:79:6a:de:35:83:fc:1b:81:54:6e:8f:
         30:83:7e:e3:b9:4c:12:4a:7d:ca:38:16:2c:dd:3d:c2:fd:e5:
         b2:50:b5:e5:ca:26:97:84:bc:e7:17:4a:b0:26:cd:e0:cd:c1:
         ea:d6:da:f2:3f:f8:65:a4:0b:ec:25:b0:77:0e:41:61:c9:f5:
         78:05:25:96:82:56:98:e7:33:9e:65:19:69:8d:5c:0f:f6:44:
         81:1b:8b:01:0a:d9:8b:92:58:9e:f7:a1:bf:ed:b5:a5:21:31:
         24:9a:2b:ce
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYag+csPC/bzc1smEXTr0XIdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMzAyMDYxOTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWUwODI4MmM5ZGE1N2NkZTY0MGI1NTBmYzFlNjUzZGYyMDI1NTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf/mwiglSq91stWih7f8xOjVxVEq
BQ2LK3IfZb+loa6Hnc3eUXw7wlPx85RiZBAvfi7ZCdCmjH//Quq1uBH74J6Y/SLQ
Len+XLawPzzST1lcfcAIuCtsaW+fqHgYRpp0OlM4eR7cbvwrETUPYigq9gny4HCN
aVk0bXyVtR+8K/kE7BRe9jqWJ79mZTzbrsyFSsezcvB7Qbs3P8QTHGK7O5PZ3PGp
M5DZHRwsK4bEZAqoQK+8YVpMNI6EGBfu76kjjVBGMb+SZHpU8s8/GyNY8gn72Zx8
o3zmwhDz+rRz+jiqgBC4SyCv5BHRBANn8POO0KftLcdhIW9vdY5/nbvbKwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMrggoLJ2lfN5kC1UPweZT3yAlWbMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEveXVDQ2dzbmFWODNtUUxWUV9CNWxQZklDVlpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxzh
MA0GCSqGSIb3DQEBCwUAA4IBAQBqedG3tTmYP+LIgik+KE08UB5oaaCF9TPfXkYz
Iv8Ow1okCkfoJ5n32RGXZt6kKFe8V5KaQ+S8qC9/mDGoifjvxpnudicsjhtZbbnx
EV+J1R3mDmE33JDRnvZcDk1NlubJzn6bqvvTafDZFpumX8Ln1+1U3zBCi4GCDPUo
GK0j/rWau5G5IAbIBaBF36fa9wCeTErWsOV8eWreNYP8G4FUbo8wg37juUwSSn3K
OBYs3T3C/eWyULXlyiaXhLznF0qwJs3gzcHq1tryP/hlpAvsJbB3DkFhyfV4BSWW
glaY5zOeZRlpjVwP9kSBG4sBCtmLklie96G/7bWlITEkmivO
-----END CERTIFICATE-----