Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t9sZ9mP1DxpACSZyffY0ZJuqAFw.roa
File:                     t9sZ9mP1DxpACSZyffY0ZJuqAFw.roa (raw, json)
Hash identifier:          80zm4D98rH3OjI9DEGcA6t+/z3puvjndyu7/2NE2d/k=
Subject key identifier:   B7:DB:19:F6:63:F5:0F:1A:40:09:26:72:7D:F6:34:64:9B:AA:00:5C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0186177861C683B005C889AF2F536F8D9ECD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t9sZ9mP1DxpACSZyffY0ZJuqAFw.roa
Signing time:             Fri 03 Feb 2023 13:30:10 +0000
ROA not before:           Fri 03 Feb 2023 13:30:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0e:b107:1870::/48 maxlen: 48
                          2a0e:b107:9f4::/48 maxlen: 48
                          2a0e:b107:1b9e::/48 maxlen: 48
                          2a0e:b107:5d0::/44 maxlen: 48
                          2a0e:b107:5e0::/44 maxlen: 48
                          2a0e:97c0:750::/48 maxlen: 48
                          2a0e:b107:900::/44 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a0e:97c0:736::/48 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a0e:b102:12f::/48 maxlen: 48
                          2a0e:97c0:76f::/48 maxlen: 48
                          2a0e:97c0:73f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:17:78:61:c6:83:b0:05:c8:89:af:2f:53:6f:8d:9e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb  3 13:30:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b7db19f663f50f1a400926727df634649baa005c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:9d:79:c3:47:db:95:ad:49:2a:20:47:c1:
                    0a:ce:3e:2f:ef:42:98:ea:90:3b:3b:3d:70:e2:e1:
                    05:4e:22:f7:4c:70:3c:13:f5:73:06:1b:0b:dd:8d:
                    05:2f:00:8b:96:d4:d6:f4:84:7e:67:be:14:55:c7:
                    76:1b:cb:28:47:cd:c0:a7:f3:7e:49:b9:38:23:1c:
                    40:d2:2c:0f:8b:61:22:01:a0:12:0e:aa:52:2b:27:
                    a1:e0:bf:74:38:8c:76:a1:a2:50:58:5e:24:65:05:
                    70:8e:0d:09:ba:2f:8a:92:0a:11:c1:e4:bc:8f:0e:
                    8d:9b:36:6d:69:88:33:10:0b:a0:cf:24:d3:f7:b8:
                    12:78:10:9b:90:09:aa:7d:3a:42:b7:1c:3b:75:81:
                    6f:17:be:5b:d3:0b:0b:21:3e:53:bc:37:93:f3:7a:
                    f9:38:fc:00:2d:56:4f:fd:61:38:e8:56:c7:68:8f:
                    69:8d:39:99:1f:57:e9:f7:fb:51:f7:1f:90:e2:75:
                    3f:ba:6b:16:15:a8:0b:51:2e:61:0e:ff:b9:c6:ba:
                    79:f5:7e:03:0c:59:27:52:8e:27:6d:c0:07:d5:cc:
                    d3:5f:b5:89:3d:7a:29:1e:58:7e:4d:10:aa:b0:8f:
                    66:cb:2b:74:22:76:8e:cf:99:50:bb:30:5d:e4:f1:
                    42:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DB:19:F6:63:F5:0F:1A:40:09:26:72:7D:F6:34:64:9B:AA:00:5C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t9sZ9mP1DxpACSZyffY0ZJuqAFw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:736::/48
                  2a0e:97c0:73f::/48
                  2a0e:97c0:750::/48
                  2a0e:97c0:76f::/48
                  2a0e:b102:12f::/48
                  2a0e:b107:5d0::-2a0e:b107:5ef:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:900::/44
                  2a0e:b107:9f4::/48
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48
                  2a0e:b107:1b9e::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:52:f9:0c:ec:ce:97:8b:b6:f6:4c:0e:dc:48:27:6c:4d:b5:
         90:ef:78:7b:6e:c7:1b:f3:a0:d0:1a:85:2f:cb:74:7c:4d:ce:
         14:7c:21:a6:f5:ae:b0:99:40:17:da:0e:06:32:bb:fd:77:60:
         fc:79:41:47:af:72:33:e2:70:4c:66:56:dc:c6:37:4c:bc:c7:
         f9:be:90:23:82:d0:d6:d8:f8:50:d5:53:79:28:84:bc:68:1f:
         82:14:77:ee:69:e2:a0:a7:53:30:f5:10:fd:f5:93:77:59:22:
         3c:b5:98:e2:0b:1a:71:b0:a6:e6:b5:3d:c7:22:6f:f2:88:8d:
         7b:96:cf:91:4b:dc:55:86:6f:fd:01:b5:45:68:cf:e3:45:d6:
         46:38:9a:5e:df:90:87:53:64:48:79:b7:6b:3f:ba:cb:c5:cb:
         43:fa:45:af:f4:1a:6e:7a:ce:7e:e7:c4:5f:97:51:70:3e:cf:
         5c:cf:62:8f:40:53:7e:69:14:d6:a1:07:a9:c2:00:7c:ca:ed:
         25:e5:6d:44:0b:e9:2e:cd:3e:e0:57:56:26:ba:db:5f:3e:a3:
         9d:4c:6a:4d:c2:64:00:cb:33:e4:c9:c7:3d:63:2e:63:f1:62:
         71:66:62:3e:3e:c7:1e:7c:3c:72:f0:4f:28:4a:ef:9b:d2:a3:
         d1:db:f8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----