Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tOGGmsU3XXR9fMzkq2ziQw58FOA.roa
File:                     tOGGmsU3XXR9fMzkq2ziQw58FOA.roa (raw, json)
Hash identifier:          23qL0tJn1kqadtOpzrNvzLcaaXZvct3CG0MmL/sHGkM=
Subject key identifier:   B4:E1:86:9A:C5:37:5D:74:7D:7C:CC:E4:AB:6C:E2:43:0E:7C:14:E0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01891260759CD63510804E884A5C53B9A5C5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tOGGmsU3XXR9fMzkq2ziQw58FOA.roa
Signing time:             Sat 01 Jul 2023 16:54:18 +0000
ROA not before:           Sat 01 Jul 2023 16:54:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0e:b107:1870::/48 maxlen: 48
                          2a0c:3b87:ff00::/40 maxlen: 48
                          2a10:ccc0:cc0a::/48 maxlen: 48
                          2a0e:b107:9f4::/48 maxlen: 48
                          2a0c:3b87:ffff::/48 maxlen: 48
                          2a0e:97c0:791::/48 maxlen: 48
                          2a0e:b107:1b9e::/48 maxlen: 48
                          2a0e:97c0:792::/48 maxlen: 48
                          2a0e:b107:5d0::/44 maxlen: 48
                          2a0e:97c0:750::/48 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a10:ccc7:9000::/38 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a0e:97c0:76f::/48 maxlen: 48
                          2a0e:97c0:73f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:12:60:75:9c:d6:35:10:80:4e:88:4a:5c:53:b9:a5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul  1 16:54:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b4e1869ac5375d747d7ccce4ab6ce2430e7c14e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f0:62:d9:88:d7:8c:90:e8:5d:b2:24:4f:bf:
                    06:2e:7b:77:93:bb:71:9d:5e:e1:dd:62:b6:07:a5:
                    76:71:e4:ca:ae:1b:2b:f4:7d:5c:76:7a:71:f0:ec:
                    16:f7:6e:b4:6f:1b:7f:79:4c:be:0e:0b:01:5a:65:
                    ef:ad:07:e5:52:92:40:db:b6:25:b4:1f:46:08:71:
                    19:68:b8:48:ce:83:a1:ec:dd:ac:3d:7e:77:cd:b3:
                    84:bd:8a:50:a3:50:8e:c3:05:cc:4a:37:9e:0e:26:
                    10:fc:4b:ef:20:08:33:16:5b:46:d7:75:c6:19:5e:
                    eb:bc:26:50:19:db:fc:46:31:17:e6:6b:4a:9f:1d:
                    bb:66:ca:9a:51:8e:57:70:52:df:7a:f4:e8:ce:46:
                    05:d9:f5:2e:e6:b3:81:03:61:e0:fc:83:ab:54:d3:
                    40:4e:f9:a6:23:49:ab:de:32:69:4d:37:db:2c:d2:
                    77:28:87:bf:39:2e:67:45:a6:28:e1:99:95:84:53:
                    de:fa:a9:f9:19:ca:3f:b7:42:41:69:1f:a4:86:33:
                    37:6f:96:5b:16:7d:03:37:2a:e0:63:0b:f8:c0:0e:
                    b8:2d:22:ce:9b:76:0c:4b:0c:58:3d:65:00:b0:2b:
                    dd:23:b4:a1:6d:ef:6a:4b:3e:00:a5:7c:85:fa:29:
                    d2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E1:86:9A:C5:37:5D:74:7D:7C:CC:E4:AB:6C:E2:43:0E:7C:14:E0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tOGGmsU3XXR9fMzkq2ziQw58FOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:3b87:ff00::/40
                  2a0e:97c0:73f::/48
                  2a0e:97c0:750::/48
                  2a0e:97c0:76f::/48
                  2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:5d0::/44
                  2a0e:b107:9f4::/48
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48
                  2a0e:b107:1b9e::/48
                  2a10:ccc0:cc0a::/48
                  2a10:ccc7:9000::/38

    Signature Algorithm: sha256WithRSAEncryption
         16:ec:93:ae:1e:a3:eb:20:f8:f6:df:37:44:c9:02:47:77:fe:
         3c:22:f8:c7:57:95:cf:8f:30:5a:31:c6:58:90:df:bf:6d:05:
         b5:4e:bf:29:10:ee:15:32:a4:e4:d9:a6:58:fd:ac:59:1d:ce:
         be:1d:d6:85:80:34:6d:77:65:a7:f7:4b:74:90:73:9b:32:34:
         f1:aa:75:09:1d:03:8e:19:72:8d:56:9b:a8:a0:f2:a5:45:2e:
         ec:3e:1e:f2:11:b5:12:8f:c3:5f:11:3c:19:d3:71:47:29:c7:
         d1:1b:62:f2:82:69:50:98:e9:63:87:4d:77:7e:f3:e5:92:11:
         e5:e5:c0:9e:61:f3:5e:8a:41:e0:05:6b:7f:42:fb:b8:8a:50:
         73:05:98:b5:84:6e:fc:5b:ae:e0:42:d2:1d:c6:2a:6b:15:fa:
         20:20:b6:aa:8d:bf:fa:b6:1e:f6:4b:4b:bd:97:23:07:ac:79:
         3a:eb:2a:47:6f:2d:90:cb:c4:94:50:55:f4:ab:f3:c6:07:c8:
         5f:8d:fc:ab:79:f6:4d:a4:f8:1d:cf:a6:ff:69:a5:40:58:99:
         1f:0a:76:5d:cb:9c:36:3f:13:43:81:72:a8:4f:ac:2c:ad:17:
         21:ee:0b:6d:ea:c1:9d:13:1a:11:3e:83:30:a4:74:27:42:9b:
         22:71:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----