Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/326131313a353730313a32303a3a2f34342d3438203d3e203530333931.roa
File:                     326131313a353730313a32303a3a2f34342d3438203d3e203530333931.roa (raw, json)
Hash identifier:          0vRqeCXpLGOHj2vPdA6Y+d9RhMv6oBqi6kpmsWfPasg=
Subject key identifier:   A1:64:3F:05:39:11:7F:97:91:93:DA:19:AA:02:62:C0:90:54:5D:4F
Certificate issuer:       /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Certificate serial:       051C5C0DA4E773CA108141B1B31A8308A1364FDD
Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/326131313a353730313a32303a3a2f34342d3438203d3e203530333931.roa
Signing time:             Tue 25 Jul 2023 15:41:46 +0000
ROA not before:           Tue 25 Jul 2023 15:36:46 +0000
ROA not after:            Tue 23 Jul 2024 15:41:46 +0000
asID:                     50391
IP address blocks:        2a11:5701:20::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1c:5c:0d:a4:e7:73:ca:10:81:41:b1:b3:1a:83:08:a1:36:4f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
        Validity
            Not Before: Jul 25 15:36:46 2023 GMT
            Not After : Jul 23 15:41:46 2024 GMT
        Subject: CN=A1643F0539117F979193DA19AA0262C090545D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:df:fa:4e:2b:0f:45:66:5c:af:1e:23:3c:
                    8d:9f:54:88:c8:58:48:0f:a0:6f:c5:f7:3e:99:ca:
                    5d:26:93:86:fd:b8:b2:86:4f:2b:aa:f7:b9:e3:92:
                    1d:12:bf:2c:5a:c6:54:d5:6f:86:76:02:36:7a:14:
                    4d:78:c3:19:69:3b:6e:4d:79:31:15:88:90:81:b8:
                    3c:33:f0:11:90:9a:89:28:23:9b:65:19:4e:12:1a:
                    5a:74:fa:23:5a:cf:62:1c:b5:a6:f3:fe:3c:8e:ba:
                    e6:4c:f2:fd:6e:e1:8e:cd:bf:55:15:87:68:9b:5d:
                    bf:c8:e7:dd:df:c4:1f:ab:0e:51:6d:db:fe:9e:6b:
                    e4:95:c3:4b:e6:46:a5:69:8e:14:f8:2a:75:ad:73:
                    6a:85:42:a2:9b:c6:44:06:7c:3d:20:e4:84:01:e5:
                    b6:d0:3c:01:f0:a2:61:60:86:91:9d:09:c3:3b:93:
                    f0:cb:34:15:e3:16:11:af:fd:bb:41:66:79:4b:5e:
                    3d:cf:d4:f4:38:bc:d4:a7:aa:b5:31:10:1e:ea:cd:
                    eb:29:65:28:8c:a3:d6:3e:1d:6f:9a:8b:6b:f3:d3:
                    26:a8:26:40:ee:2f:b2:f2:06:84:52:ac:1f:b2:00:
                    8f:17:1a:a9:ee:b0:c0:bf:df:dc:13:61:8c:c8:60:
                    0e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:64:3F:05:39:11:7F:97:91:93:DA:19:AA:02:62:C0:90:54:5D:4F
            X509v3 Authority Key Identifier:
                keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/326131313a353730313a32303a3a2f34342d3438203d3e203530333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:5701:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:63:fe:88:48:87:f9:4f:87:01:ec:48:e1:ff:b4:59:b1:80:
         b1:8c:1f:bd:17:a1:5c:6e:b5:26:b8:4e:2d:1f:42:8e:42:f3:
         a7:85:1b:18:08:f8:70:a5:2a:b7:b1:02:62:ab:c3:32:c4:36:
         d5:5f:1c:d3:28:9f:b3:ad:37:c4:e7:01:3d:97:25:22:b6:7a:
         59:ba:82:e1:43:28:e3:47:45:c1:61:7b:40:dc:19:a6:fc:ea:
         59:b7:0b:b5:07:5c:20:5e:7b:5f:c6:49:02:7a:21:71:e2:86:
         55:5a:41:c2:3f:29:73:c3:03:28:6d:57:8c:ab:88:4c:26:3a:
         f7:c5:6c:74:14:b7:bc:78:5c:0e:5c:2f:ce:7c:ba:90:52:68:
         99:e8:06:99:66:18:ad:58:88:53:b5:42:7b:89:bd:f2:52:5e:
         d2:54:62:80:1a:9f:91:1c:12:94:74:a1:4e:0e:11:69:19:ff:
         73:62:9c:98:ee:c2:54:5e:ed:da:d7:b0:a4:70:91:c7:bd:c5:
         16:f5:51:e4:1d:c5:70:c8:7f:6c:f5:bd:5d:dd:db:dc:71:8f:
         76:0f:80:75:1c:d2:4c:b0:43:a9:3b:d1:54:1a:20:18:4f:11:
         69:e9:87:60:89:bc:14:89:c1:31:67:e7:ac:3f:eb:b3:32:fc:
         49:d7:a4:d9
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIUBRxcDaTnc8oQgUGxsxqDCKE2T90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx
RDA0MEEzMDAeFw0yMzA3MjUxNTM2NDZaFw0yNDA3MjMxNTQxNDZaMDMxMTAvBgNV
BAMTKEExNjQzRjA1MzkxMTdGOTc5MTkzREExOUFBMDI2MkMwOTA1NDVENEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2g9/6TisPRWZcrx4jPI2fVIjI
WEgPoG/F9z6Zyl0mk4b9uLKGTyuq97njkh0SvyxaxlTVb4Z2AjZ6FE14wxlpO25N
eTEViJCBuDwz8BGQmokoI5tlGU4SGlp0+iNaz2Ictabz/jyOuuZM8v1u4Y7Nv1UV
h2ibXb/I593fxB+rDlFt2/6ea+SVw0vmRqVpjhT4KnWtc2qFQqKbxkQGfD0g5IQB
5bbQPAHwomFghpGdCcM7k/DLNBXjFhGv/btBZnlLXj3P1PQ4vNSnqrUxEB7qzesp
ZSiMo9Y+HW+ai2vz0yaoJkDuL7LyBoRSrB+yAI8XGqnusMC/39wTYYzIYA4JAgMB
AAGjggJ/MIICezAdBgNVHQ4EFgQUoWQ/BTkRf5eRk9oZqgJiwJBUXU8wHwYDVR0j
BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2
ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4
MEUyQjJGRTFEMDQwQTMwLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF
BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS84MTExNWJjNi0xMGY2LTRhZjMtYmEwOS04YjY4N2E1NmZiZjUvMS8zMjYxMzEz
MTNhMzUzNzMwMzEzYTMyMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNTMwMzMz
OTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKhFXAQAgMA0GCSqGSIb3DQEBCwUAA4IBAQCPY/6ISIf5
T4cB7Ejh/7RZsYCxjB+9F6FcbrUmuE4tH0KOQvOnhRsYCPhwpSq3sQJiq8MyxDbV
XxzTKJ+zrTfE5wE9lyUitnpZuoLhQyjjR0XBYXtA3Bmm/OpZtwu1B1wgXntfxkkC
eiFx4oZVWkHCPylzwwMobVeMq4hMJjr3xWx0FLe8eFwOXC/OfLqQUmiZ6AaZZhit
WIhTtUJ7ib3yUl7SVGKAGp+RHBKUdKFODhFpGf9zYpyY7sJUXu3a17CkcJHHvcUW
9VHkHcVwyH9s9b1d3dvccY92D4B1HNJMsEOpO9FUGiAYTxFp6YdgibwUicExZ+es
P+uzMvxJ16TZ