Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-CHupEYUcN12x-gCBhZDi7GN18s.roa
File:                     1-CHupEYUcN12x-gCBhZDi7GN18s.roa (raw, json)
Hash identifier:          yUZxE0pGxfiQ1HPiTrNJcNG3p3yr0/9P7zd/9ROjVHg=
Subject key identifier:   F8:21:EE:A4:46:14:70:DD:76:C7:E8:02:06:16:43:8B:B1:8D:D7:CB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E79E3AD48E0963F9004A28A255C04C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-CHupEYUcN12x-gCBhZDi7GN18s.roa
Signing time:             Mon 02 Jan 2023 05:15:05 +0000
ROA not before:           Mon 02 Jan 2023 05:15:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200270
IP address blocks:        2a10:2f00:190::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:9e:3a:d4:8e:09:63:f9:00:4a:28:a2:55:c0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f821eea4461470dd76c7e8020616438bb18dd7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:27:09:af:8b:10:2d:a9:11:2c:fe:39:a6:a9:
                    99:74:0f:d4:77:0a:81:db:52:76:41:86:1f:f8:15:
                    85:45:da:99:d0:a3:f3:e5:f0:f3:2a:58:3a:9c:5c:
                    6e:be:51:72:cd:be:41:38:44:a4:1c:08:8f:cb:72:
                    e7:fa:ab:5d:f7:b2:ea:df:3b:a8:5c:f2:0b:c4:5f:
                    9b:7b:33:88:11:41:aa:38:e0:dc:06:2e:c0:42:d2:
                    d9:b3:21:08:53:35:26:a3:77:cc:dd:c4:b2:48:0b:
                    de:fa:43:6c:43:66:50:66:d4:2c:e3:fc:5a:83:97:
                    8f:16:79:62:01:d4:f4:29:41:06:fe:1f:59:9d:ac:
                    10:83:31:13:fc:86:35:9f:ba:d7:e7:ec:71:a1:dc:
                    29:a5:8a:cd:e7:25:2f:93:fd:89:63:a5:5c:75:13:
                    bc:d4:88:87:63:1f:58:94:83:b1:19:8e:e5:52:11:
                    ed:78:e0:27:84:4d:3e:f3:fe:39:7c:ad:a8:aa:a2:
                    62:3e:5b:18:0f:0e:e6:0b:98:78:a8:a8:13:ba:23:
                    69:18:79:28:c9:93:f7:f0:68:90:b8:3f:46:0c:6b:
                    82:62:c6:03:80:69:19:2c:97:78:b5:4a:b8:b5:54:
                    19:fd:f6:fe:47:86:ce:f5:8d:14:43:f4:84:4f:fc:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:21:EE:A4:46:14:70:DD:76:C7:E8:02:06:16:43:8B:B1:8D:D7:CB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-CHupEYUcN12x-gCBhZDi7GN18s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:190::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:bf:4b:31:be:79:be:10:59:05:02:5c:36:8a:cb:a6:0a:0a:
         36:d6:9f:a9:cc:aa:c8:02:09:49:a9:9f:e7:d5:bf:2e:e5:9d:
         58:48:3b:8f:f4:7b:20:dd:63:0f:ab:41:42:82:5a:d7:5a:1a:
         ae:8c:4f:25:30:93:51:99:86:21:ad:dc:a2:2b:0d:b1:1f:98:
         a5:a1:bc:bf:39:2c:ef:02:c6:5b:4f:27:9e:06:ac:cc:46:c0:
         78:fd:99:f1:d5:66:2f:99:11:b7:bf:ba:5a:01:2d:f8:2a:bf:
         26:e8:52:51:3d:b8:fb:25:96:31:21:59:ef:d6:aa:94:49:4a:
         e8:b4:e9:dd:a3:1c:4d:9e:38:8a:71:bd:f0:84:8a:39:0b:a7:
         70:15:d0:f0:bd:d8:e5:0e:d2:5f:2e:a0:d5:45:c6:25:8a:10:
         ef:69:2f:65:83:9d:1f:d7:2c:09:06:44:40:6a:63:bf:3a:da:
         f6:f5:a1:25:d8:3b:d3:2b:0c:7e:49:26:59:fa:5b:67:2d:2a:
         7f:f5:e9:32:bb:aa:51:99:26:7e:69:74:7b:bb:eb:42:fe:07:
         e9:d3:2b:93:0b:d0:7d:6a:5d:bc:59:e1:ef:a4:93:8a:f3:f7:
         e4:24:d3:99:6f:b5:c4:81:4e:c6:fd:97:6c:d5:87:30:55:8e:
         49:1f:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----