Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_sNRUxFykHKnt958b4ZbgNqCi5Q.roa
File:                     _sNRUxFykHKnt958b4ZbgNqCi5Q.roa (raw, json)
Hash identifier:          11Mll0ljqdZVePTT+m3kdWK/sqsLL3wWT/LNusvCOsg=
Subject key identifier:   FE:C3:51:53:11:72:90:72:A7:B7:DE:7C:6F:86:5B:80:DA:82:8B:94
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018C7F22F4962914BC4EEB659A44AA768646
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_sNRUxFykHKnt958b4ZbgNqCi5Q.roa
Signing time:             Mon 18 Dec 2023 22:54:06 +0000
ROA not before:           Mon 18 Dec 2023 22:54:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198055
IP address blocks:        2a0e:b107:1d12::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7f:22:f4:96:29:14:bc:4e:eb:65:9a:44:aa:76:86:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec 18 22:54:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fec3515311729072a7b7de7c6f865b80da828b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:7e:e4:7c:20:57:61:e3:ee:1a:7e:f3:f8:
                    d4:53:0c:39:30:7e:a6:9f:10:c6:72:b9:5d:5b:ca:
                    1b:22:ed:a2:e8:ef:71:db:78:eb:99:d7:e1:fc:54:
                    8b:bc:8d:6d:4f:28:1c:8f:c7:3c:a6:72:8f:b6:87:
                    cf:93:88:48:37:50:67:85:35:84:02:06:ac:a6:df:
                    66:66:17:c1:8c:db:2f:1d:cb:34:1e:ac:46:50:89:
                    96:d8:08:0c:a2:05:e3:75:c2:bc:8a:4d:be:aa:b4:
                    0c:4b:8b:2a:b8:4c:61:cd:15:d4:65:fe:eb:c3:98:
                    14:83:8a:96:9a:08:25:9e:91:f9:17:0d:ce:b3:d4:
                    6e:a1:50:b7:ae:0f:17:9c:9c:b7:3d:f1:ed:25:09:
                    27:bc:dd:4e:0b:df:2c:74:12:bf:2a:62:c5:6b:aa:
                    7a:9f:53:68:36:b3:61:b9:b5:02:05:c0:f5:ae:38:
                    7d:71:2e:8c:f0:80:cc:87:f7:80:55:5c:75:56:44:
                    2d:1e:54:6c:17:f2:fc:5a:fd:a0:69:a1:73:87:2e:
                    e1:27:42:5a:96:c0:78:db:8d:f1:6a:6d:38:33:14:
                    80:c5:a1:93:74:07:67:a6:83:f8:9a:68:49:38:43:
                    f1:e4:61:21:27:39:94:99:b6:77:05:1f:f8:bb:3b:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C3:51:53:11:72:90:72:A7:B7:DE:7C:6F:86:5B:80:DA:82:8B:94
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_sNRUxFykHKnt958b4ZbgNqCi5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1d12::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:c1:28:b6:26:ee:ea:04:b4:ee:94:40:ab:af:cb:e8:90:fa:
         90:97:6c:43:04:f5:aa:4b:fc:2c:5c:6e:33:03:32:ab:dd:4d:
         89:3b:ff:31:50:1c:52:ab:90:29:66:4b:f2:f5:c3:f4:88:f5:
         0a:92:86:c0:f3:4b:15:da:d0:18:d0:00:6c:03:a8:4b:3a:8c:
         ed:4a:5f:bd:e8:05:e4:47:6e:fd:6a:b4:fa:5b:fd:e5:87:97:
         9e:98:e2:28:fd:6c:d6:27:81:2b:d1:3a:7a:35:8f:79:ff:57:
         60:26:31:39:56:01:43:93:65:b1:5c:4b:39:35:d9:46:15:a5:
         10:01:8b:b3:9f:56:97:e3:8c:87:00:93:b1:7e:21:76:c5:17:
         5f:17:80:5c:3f:8e:d6:9f:54:e2:c3:bd:fc:49:13:48:b5:cb:
         47:8b:3b:d5:e9:21:3f:c7:29:88:7a:fc:ec:39:1a:5c:33:f1:
         50:f3:a1:d6:29:e9:e4:67:76:91:d9:33:d3:f5:69:c4:54:5a:
         3f:59:06:b6:0c:2e:3e:2a:42:61:5f:b0:c7:1e:e8:2a:e2:06:
         73:28:43:7c:a8:9b:62:08:4d:d9:45:b9:de:04:db:93:b5:09:
         d3:6b:60:03:0e:e1:d5:c9:4c:16:69:ed:fc:35:58:3a:6b:42:
         5e:f5:a6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----