Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4s-ExOFwOD92h2NRzgnMg3HyQEk.roa
File:                     4s-ExOFwOD92h2NRzgnMg3HyQEk.roa (raw, json)
Hash identifier:          EPCE4deuCxykrL4j+VUMj4ogeNoushIRNULAcVGDDzY=
Subject key identifier:   E2:CF:84:C4:E1:70:38:3F:76:87:63:51:CE:09:CC:83:71:F2:40:49
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185DE40B1827B1A6752E4C07C997C1DB9A1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4s-ExOFwOD92h2NRzgnMg3HyQEk.roa
Signing time:             Mon 23 Jan 2023 10:50:59 +0000
ROA not before:           Mon 23 Jan 2023 10:50:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211495
IP address blocks:        2a10:2f00:16c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:40:b1:82:7b:1a:67:52:e4:c0:7c:99:7c:1d:b9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 23 10:50:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e2cf84c4e170383f76876351ce09cc8371f24049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6d:18:1d:e0:ea:59:64:8d:4e:ca:63:20:41:
                    ea:32:e7:a0:db:e1:86:87:0f:59:46:bc:2a:b5:62:
                    c9:f1:0d:5b:dc:d1:73:1b:da:8a:6e:65:83:a0:f1:
                    11:9d:19:aa:6a:ad:95:ff:80:94:cd:4e:74:8a:65:
                    35:62:b2:56:b2:ad:94:12:98:7b:47:ba:75:a9:92:
                    b2:70:fe:63:9c:b3:89:da:5c:cd:ff:c2:c4:03:24:
                    4f:8e:4f:eb:c4:8f:3e:1d:7e:3d:cf:aa:7a:74:d7:
                    cd:08:93:db:81:50:af:b4:f9:02:27:c5:fc:82:fa:
                    54:f6:c4:53:46:05:17:59:e1:72:9e:b7:56:bf:0e:
                    11:4c:ad:d6:a1:7c:57:49:b4:4d:1f:0b:d3:2f:d4:
                    69:7c:9e:70:d1:ff:69:59:a4:d2:64:98:9e:02:1a:
                    b3:54:70:64:ad:b8:b1:f3:8f:ca:e4:11:36:5e:a9:
                    d5:ed:2c:43:fe:2a:07:65:00:36:8b:0e:a5:17:da:
                    b6:84:21:59:9f:e3:ba:92:44:6c:0e:78:d4:22:2e:
                    41:2c:bf:89:05:7c:74:f8:c9:46:c1:37:fe:c3:a5:
                    84:69:ad:66:27:25:f2:f0:92:c5:2b:97:69:6f:64:
                    57:d0:3f:03:a0:a3:f1:37:56:0b:70:63:b6:88:51:
                    29:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CF:84:C4:E1:70:38:3F:76:87:63:51:CE:09:CC:83:71:F2:40:49
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4s-ExOFwOD92h2NRzgnMg3HyQEk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:16c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:d0:1f:1e:00:e0:30:5d:75:25:85:f3:65:eb:58:b9:e6:
         fe:0f:7b:0b:d7:f7:a7:15:63:c0:f4:d5:fc:2a:23:9b:6c:db:
         31:61:5e:de:ab:ba:1a:2b:29:2e:50:8b:47:2e:c7:2d:4d:c6:
         b8:60:cc:5b:63:5d:36:c1:b7:4b:b7:50:0e:fd:f4:26:34:c1:
         b6:47:35:60:55:c9:b7:47:b7:95:56:1b:6d:0b:fc:68:26:8a:
         ad:62:c3:f9:e8:a6:07:75:06:94:2c:0a:fa:17:a6:d3:76:8b:
         d2:1c:90:92:b0:ec:ec:cb:d5:62:70:f6:c6:b0:fb:e2:8f:b7:
         d7:66:4b:91:83:d3:e7:b3:6d:3b:48:57:d5:ba:10:02:99:aa:
         97:cb:32:68:76:74:6c:88:10:cb:81:e6:89:ed:af:28:b5:c2:
         c5:75:36:5e:b7:09:06:53:cf:40:e3:f6:3d:7d:81:d6:3e:d5:
         67:02:58:35:30:e2:68:6c:5b:92:52:b5:91:88:61:d0:b7:3c:
         ef:69:ed:f3:df:91:b1:54:66:78:51:e5:72:db:fa:58:23:57:
         51:c7:e2:58:6c:47:4c:ea:51:09:40:e8:c8:de:6e:c0:be:93:
         c1:f2:fc:ec:1e:3b:4e:98:f1:c1:32:b4:7d:f6:53:14:8b:97:
         9a:07:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----