Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2gzia20ws29B8IRtmpumICRPu44.roa
File:                     2gzia20ws29B8IRtmpumICRPu44.roa (raw, json)
Hash identifier:          6wIF1+6T9/srWAzqOkCu8Hwl2VoCGb3D54aq6z1f9qU=
Subject key identifier:   DA:0C:E2:6B:6D:30:B3:6F:41:F0:84:6D:9A:9B:A6:20:24:4F:BB:8E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0188760DC0AB4C8F088C1255E9E4FD7614E5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2gzia20ws29B8IRtmpumICRPu44.roa
Signing time:             Thu 01 Jun 2023 08:23:12 +0000
ROA not before:           Thu 01 Jun 2023 08:23:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199340
IP address blocks:        2a10:ccc2:9c00::/38 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:76:0d:c0:ab:4c:8f:08:8c:12:55:e9:e4:fd:76:14:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun  1 08:23:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=da0ce26b6d30b36f41f0846d9a9ba620244fbb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:00:b4:44:ae:ad:84:c4:48:7c:c2:db:a2:
                    60:33:75:84:d5:c6:39:64:7a:06:0e:33:0a:22:b4:
                    00:7b:b0:b9:29:94:26:6c:17:44:36:d1:83:3f:b3:
                    2f:24:8c:d3:5c:61:bf:7c:82:f3:19:4a:10:d5:24:
                    04:e3:a1:33:ae:63:25:20:72:90:be:43:11:30:02:
                    a9:db:b7:d4:36:65:4e:f7:d5:85:85:4f:4a:d7:b2:
                    e4:6f:66:48:9f:b5:40:e3:6a:b4:bf:c4:0b:86:9a:
                    4c:0f:bf:13:de:37:18:9c:e6:70:d2:6d:ee:5f:87:
                    07:b6:ac:84:35:af:8b:cf:35:d3:4c:13:4e:92:98:
                    65:3c:3e:22:86:c5:31:28:db:18:ff:87:82:1f:d7:
                    d2:5a:dc:8f:ab:83:31:82:49:68:c5:b1:da:13:2d:
                    9d:39:fc:6e:fb:5f:2d:b5:47:00:98:95:97:8f:44:
                    37:06:58:73:cf:94:ba:86:de:7d:ff:b9:a0:de:42:
                    41:83:02:c0:a9:bd:08:5d:08:df:d9:ce:23:31:94:
                    94:6f:72:f4:4d:e1:ad:85:59:20:64:f7:d8:23:73:
                    29:f9:9d:13:d3:cf:e6:1b:69:ce:10:f5:59:99:9b:
                    c8:06:eb:95:a3:2f:04:3d:f5:d1:61:ab:2e:29:13:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0C:E2:6B:6D:30:B3:6F:41:F0:84:6D:9A:9B:A6:20:24:4F:BB:8E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2gzia20ws29B8IRtmpumICRPu44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:ccc2:9c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         3e:1b:0c:4d:5c:01:46:cc:17:fe:89:d3:98:98:a2:cf:8d:3a:
         2a:b2:34:77:20:ea:8b:0a:97:03:5a:2f:97:06:13:9f:58:40:
         09:31:25:ff:41:8e:cd:ff:db:85:71:6d:be:1d:7b:51:06:98:
         dd:5f:98:a4:a8:6a:65:02:ad:23:7e:d6:0e:85:cd:e3:9f:3b:
         c4:91:fd:89:25:52:32:c5:fe:a5:9e:35:16:80:ca:7d:08:e1:
         29:7e:0e:54:96:7b:ee:71:b2:34:d4:1b:c4:d1:23:37:bb:fc:
         d4:39:9a:f4:9a:05:02:69:aa:86:b2:21:26:fe:60:73:cc:9a:
         51:da:d6:2b:73:ce:51:0f:1b:88:55:ab:d1:05:fb:ba:d3:29:
         92:49:88:d7:a6:65:f3:5d:38:82:e0:5f:61:76:65:d6:56:83:
         51:57:03:ca:45:e0:cc:43:6d:b4:73:5c:c3:a5:38:eb:50:b9:
         e7:05:93:b7:70:08:bc:dd:98:e9:84:a1:f8:d2:7b:36:95:c4:
         ef:00:95:55:91:e0:89:9a:1c:c6:2a:66:e8:36:92:82:8f:65:
         bf:54:b1:c7:aa:f1:54:7c:34:83:66:38:f3:01:3e:81:be:b2:
         e4:d5:b9:31:6c:67:a9:33:cb:16:02:18:89:91:d9:0b:cb:fb:
         d4:b6:d7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----