Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2CYCAPWAfUSF9ku3eiqfZI-CNRQ.roa
File:                     2CYCAPWAfUSF9ku3eiqfZI-CNRQ.roa (raw, json)
Hash identifier:          KAMjX9n7pX7oAguR8iq0fzr5DZn0xeDwJVhqxvecd9E=
Subject key identifier:   D8:26:02:00:F5:80:7D:44:85:F6:4B:B7:7A:2A:9F:64:8F:82:35:14
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BEB7F7B7F9FC05EDCFDE4D15E97B451DA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2CYCAPWAfUSF9ku3eiqfZI-CNRQ.roa
Signing time:             Mon 20 Nov 2023 06:51:22 +0000
ROA not before:           Mon 20 Nov 2023 06:51:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200890
IP address blocks:        2a10:cc40:180::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:7f:7b:7f:9f:c0:5e:dc:fd:e4:d1:5e:97:b4:51:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 20 06:51:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d8260200f5807d4485f64bb77a2a9f648f823514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:99:7a:77:e2:83:64:32:42:b2:c8:b5:70:28:
                    45:7f:6a:9a:7f:09:64:5e:d9:07:ab:03:03:bc:9f:
                    09:b9:d1:ef:ce:a5:bd:8a:3c:d8:76:48:18:1d:76:
                    ca:67:0b:85:ce:64:3f:ac:a8:71:c5:0f:64:4e:2e:
                    b2:21:90:48:ef:e5:2a:55:76:4b:03:b9:ca:d6:eb:
                    75:4d:4f:7f:dd:c6:c3:8e:be:e1:01:7c:03:d4:0a:
                    0f:72:03:36:86:a4:a0:40:1a:f5:13:b5:b1:23:51:
                    29:1c:53:0e:b4:84:32:d7:ad:f8:83:58:2b:f0:14:
                    cc:31:68:af:7e:83:93:b7:74:e7:54:03:ee:02:0e:
                    00:88:b2:f5:1f:55:be:17:a1:e0:dc:95:75:8b:71:
                    e1:28:65:25:b2:fe:8d:e4:64:0b:1b:b9:ae:73:32:
                    c3:2e:0a:25:a7:b5:d5:06:8a:9b:78:20:79:ba:9c:
                    7a:ac:34:32:b9:20:89:51:d1:38:df:b2:10:f9:ec:
                    a2:65:e3:44:94:93:d3:78:9f:f1:76:92:62:08:1e:
                    56:40:ff:1d:86:5c:86:68:13:59:f1:d7:b1:91:3d:
                    30:61:c1:d9:eb:8e:a4:8c:33:11:3c:a0:f7:49:cc:
                    e9:01:13:2c:44:ea:c6:24:84:b9:2a:ff:0a:3a:73:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:26:02:00:F5:80:7D:44:85:F6:4B:B7:7A:2A:9F:64:8F:82:35:14
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2CYCAPWAfUSF9ku3eiqfZI-CNRQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:180::/44

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:6b:ce:26:38:c8:12:e8:dc:3c:d1:a9:f2:71:58:84:7e:
         ba:81:dc:6d:a0:8f:de:60:a2:02:ef:88:74:9b:ba:4e:56:96:
         78:20:4c:a3:c4:30:5e:bc:1e:85:80:e0:14:67:ba:c8:3c:35:
         28:25:54:69:18:89:85:bd:c4:f3:67:ae:a9:4c:c9:c3:f4:12:
         30:24:6a:ba:34:ba:9c:f5:5a:f6:d3:7e:ee:94:43:c8:bf:0d:
         a2:bb:8a:2c:0b:6d:0c:79:e4:d1:da:4c:ac:57:08:49:96:18:
         7c:8c:e6:cf:82:31:00:b8:f6:8f:a7:35:8d:df:64:1e:49:3e:
         f1:65:12:60:c9:97:a2:f1:8f:cb:b8:da:73:93:61:ee:67:51:
         7e:6b:8d:27:4b:3d:e5:64:64:3f:06:8b:60:0e:a3:ba:06:92:
         f0:35:8b:fc:f1:24:4b:ef:26:73:b3:56:a5:f5:67:d6:fa:a4:
         8e:17:68:90:1e:38:05:66:85:6e:73:1e:f1:7d:ad:32:de:5a:
         f2:cd:e5:69:c5:87:e0:47:61:bc:04:1a:64:fa:51:60:fb:a9:
         8c:41:2e:f3:39:02:77:7e:9b:5c:83:d7:05:b1:10:c7:33:61:
         16:93:81:41:c3:3e:67:6d:39:fb:eb:b8:8e:ec:80:70:c8:5e:
         79:6b:d6:9f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYvrf3t/n8Be3P3k0V6XtFHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMxMTIwMDY1MTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODI2MDIwMGY1ODA3ZDQ0ODVmNjRiYjc3YTJhOWY2NDhmODIzNTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpl6d+KDZDJCssi1cChFf2qafwlk
XtkHqwMDvJ8JudHvzqW9ijzYdkgYHXbKZwuFzmQ/rKhxxQ9kTi6yIZBI7+UqVXZL
A7nK1ut1TU9/3cbDjr7hAXwD1AoPcgM2hqSgQBr1E7WxI1EpHFMOtIQy1634g1gr
8BTMMWivfoOTt3TnVAPuAg4AiLL1H1W+F6Hg3JV1i3HhKGUlsv6N5GQLG7muczLD
Lgolp7XVBoqbeCB5upx6rDQyuSCJUdE437IQ+eyiZeNElJPTeJ/xdpJiCB5WQP8d
hlyGaBNZ8dexkT0wYcHZ646kjDMRPKD3SczpARMsROrGJIS5Kv8KOnMmhQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNgmAgD1gH1EhfZLt3oqn2SPgjUUMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMkNZQ0FQV0FmVVNGOWt1M2VpcWZaSS1DTlJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMQAGA
MA0GCSqGSIb3DQEBCwUAA4IBAQA8i2vOJjjIEujcPNGp8nFYhH66gdxtoI/eYKIC
74h0m7pOVpZ4IEyjxDBevB6FgOAUZ7rIPDUoJVRpGImFvcTzZ66pTMnD9BIwJGq6
NLqc9Vr2037ulEPIvw2iu4osC20MeeTR2kysVwhJlhh8jObPgjEAuPaPpzWN32Qe
ST7xZRJgyZei8Y/LuNpzk2HuZ1F+a40nSz3lZGQ/BotgDqO6BpLwNYv88SRL7yZz
s1al9WfW+qSOF2iQHjgFZoVucx7xfa0y3lryzeVpxYfgR2G8BBpk+lFg+6mMQS7z
OQJ3fptcg9cFsRDHM2EWk4FBwz5nbTn767iO7IBwyF55a9af
-----END CERTIFICATE-----