Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3gvRLd9RMBBElV0zCr3zpUe0N-Q.roa
File:                     3gvRLd9RMBBElV0zCr3zpUe0N-Q.roa (raw, json)
Hash identifier:          rPX8KrSqxS6SuDHuVdI4/c22ElgoZjCd6mXnKjei8OE=
Subject key identifier:   DE:0B:D1:2D:DF:51:30:10:44:95:5D:33:0A:BD:F3:A5:47:B4:37:E4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7844A0DADDD6DFCCF212093EFCD57
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3gvRLd9RMBBElV0zCr3zpUe0N-Q.roa
Signing time:             Mon 02 Jan 2023 05:14:58 +0000
ROA not before:           Mon 02 Jan 2023 05:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50842
IP address blocks:        2a10:2f00:181::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:84:4a:0d:ad:dd:6d:fc:cf:21:20:93:ef:cd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=de0bd12ddf51301044955d330abdf3a547b437e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:1e:8f:bc:39:0b:6e:70:7f:1d:ae:9d:e5:
                    9c:7c:4a:ab:85:4d:53:81:c5:4a:b9:49:33:04:a9:
                    e4:e6:5a:03:9e:36:47:ad:9a:40:28:ac:43:8a:47:
                    03:7d:22:53:ac:88:b0:e3:a2:84:f2:a3:a5:77:04:
                    f6:dc:ab:86:06:33:c9:67:b8:5a:38:6d:bf:75:cf:
                    b4:38:59:c7:05:38:4e:d9:40:65:f5:fb:48:8a:c9:
                    51:7a:62:2b:c8:29:62:05:74:8e:81:e7:70:ae:35:
                    f8:4d:59:84:23:7c:d2:9e:8d:7b:8c:32:1f:42:df:
                    2e:34:b8:f9:75:a1:e4:02:99:cc:f3:ab:af:8d:d7:
                    55:9e:c2:26:c0:ca:fe:14:ad:19:19:b4:5b:55:00:
                    00:13:de:2b:e1:6c:3d:71:94:82:1a:05:55:d4:a1:
                    f7:7e:2b:a9:22:c5:65:73:3f:ea:d4:12:25:44:59:
                    f6:f0:b8:0a:08:84:01:c9:e9:57:8e:e5:ba:86:00:
                    96:f2:84:84:f6:0a:0c:50:0e:a9:02:f4:41:83:ad:
                    21:49:be:84:c0:24:6a:64:6a:b4:ee:e4:94:b2:61:
                    00:10:21:c3:af:f3:e8:e8:aa:26:ec:0b:06:55:40:
                    ec:40:48:e8:f3:c4:72:a9:7a:09:aa:2b:aa:73:f2:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0B:D1:2D:DF:51:30:10:44:95:5D:33:0A:BD:F3:A5:47:B4:37:E4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3gvRLd9RMBBElV0zCr3zpUe0N-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:181::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:aa:a1:80:62:21:47:e0:34:ec:ce:26:fa:c5:97:62:1f:cb:
         39:64:12:00:22:4d:01:44:8c:bd:67:48:6e:dc:fa:7e:d5:51:
         fd:42:e3:e3:75:2a:91:aa:ea:9f:b2:11:ee:90:8a:6f:5e:0e:
         13:56:45:90:6d:72:a2:58:40:7a:94:ba:93:98:b6:d0:67:cf:
         c2:e5:86:71:7b:c3:55:2e:57:fb:88:08:5d:2c:8f:f6:2c:2e:
         5b:e3:4e:9d:d7:62:09:b2:1b:c1:1d:6f:da:b1:e8:a6:cb:c6:
         23:8c:7a:2e:5e:f6:8f:74:c8:28:17:19:5f:0d:b5:ec:78:39:
         d7:66:2f:5b:13:c7:31:57:18:f2:b5:9d:23:4e:7b:d6:56:48:
         b4:18:6e:90:7f:ae:18:79:66:c3:97:90:98:7b:29:c4:11:a1:
         57:62:fb:0b:20:80:c8:4e:a4:45:2d:99:37:15:20:31:94:46:
         7e:69:08:e5:31:5e:07:24:16:3e:9c:e6:72:63:16:a2:ed:d5:
         40:49:9a:7c:ce:9d:2a:e4:14:a6:05:35:1b:48:e7:20:92:34:
         7b:9f:02:b9:db:8d:6e:41:ac:5a:b8:76:f9:7e:cb:4e:7e:6f:
         65:07:05:6c:70:75:83:d6:dd:e6:45:77:95:07:b6:27:8a:85:
         91:1c:31:ee
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw54RKDa3dbfzPISCT781XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTBiZDEyZGRmNTEzMDEwNDQ5NTVkMzMwYWJkZjNhNTQ3YjQzN2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAIej7w5C25wfx2uneWcfEqrhU1T
gcVKuUkzBKnk5loDnjZHrZpAKKxDikcDfSJTrIiw46KE8qOldwT23KuGBjPJZ7ha
OG2/dc+0OFnHBThO2UBl9ftIislRemIryCliBXSOgedwrjX4TVmEI3zSno17jDIf
Qt8uNLj5daHkApnM86uvjddVnsImwMr+FK0ZGbRbVQAAE94r4Ww9cZSCGgVV1KH3
fiupIsVlcz/q1BIlRFn28LgKCIQByelXjuW6hgCW8oSE9goMUA6pAvRBg60hSb6E
wCRqZGq07uSUsmEAECHDr/Po6Kom7AsGVUDsQEjo88RyqXoJqiuqc/IO/QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFN4L0S3fUTAQRJVdMwq986VHtDfkMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvM2d2UkxkOVJNQkJFbFYwekNyM3pwVWUwTi1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGB
MA0GCSqGSIb3DQEBCwUAA4IBAQBOqqGAYiFH4DTszib6xZdiH8s5ZBIAIk0BRIy9
Z0hu3Pp+1VH9QuPjdSqRquqfshHukIpvXg4TVkWQbXKiWEB6lLqTmLbQZ8/C5YZx
e8NVLlf7iAhdLI/2LC5b406d12IJshvBHW/aseimy8YjjHouXvaPdMgoFxlfDbXs
eDnXZi9bE8cxVxjytZ0jTnvWVki0GG6Qf64YeWbDl5CYeynEEaFXYvsLIIDITqRF
LZk3FSAxlEZ+aQjlMV4HJBY+nOZyYxai7dVASZp8zp0q5BSmBTUbSOcgkjR7nwK5
241uQaxauHb5fstOfm9lBwVscHWD1t3mRXeVB7YnioWRHDHu
-----END CERTIFICATE-----