Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4zE9kawZeqe-UxXxYD2pCfrhjWI.roa
File:                     4zE9kawZeqe-UxXxYD2pCfrhjWI.roa (raw, json)
Hash identifier:          31PS2qIsSiXLghC2i7eN/QXBI0HfRQK3CCQ2dN6AxIQ=
Subject key identifier:   E3:31:3D:91:AC:19:7A:A7:BE:53:15:F1:60:3D:A9:09:FA:E1:8D:62
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01885BBBAA3BD1A9D623961DA4F1C8A41021
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4zE9kawZeqe-UxXxYD2pCfrhjWI.roa
Signing time:             Sat 27 May 2023 05:43:25 +0000
ROA not before:           Sat 27 May 2023 05:43:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212194
IP address blocks:        2a10:ccc7:7770::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:5b:bb:aa:3b:d1:a9:d6:23:96:1d:a4:f1:c8:a4:10:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 27 05:43:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3313d91ac197aa7be5315f1603da909fae18d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:db:88:69:c7:a3:98:08:e5:a0:7d:bb:00:
                    fa:e4:bf:08:a7:03:39:3c:d1:72:1e:86:1c:03:67:
                    98:17:66:e1:dc:e1:dc:ee:af:01:1b:ab:29:11:fe:
                    d6:47:2b:4d:5a:b3:89:a9:fc:81:3a:15:21:85:9b:
                    8d:76:81:fd:da:61:c9:61:ea:92:e7:52:85:61:47:
                    db:08:1a:28:d6:8b:9d:09:ef:d3:68:86:70:ce:fb:
                    f7:e4:53:09:a2:39:11:64:a5:62:ec:c7:b8:ae:c1:
                    fa:06:9c:39:c8:07:6f:75:27:84:5b:7e:68:35:d2:
                    3f:69:5d:dd:92:c1:c1:2d:b6:f5:89:21:e7:5b:e5:
                    cd:32:5a:97:67:c7:1f:5c:c2:2f:cd:92:82:33:6a:
                    65:0f:4f:6f:58:51:cd:6a:10:30:2a:21:78:aa:b3:
                    be:0a:c0:32:a4:f5:01:6d:66:55:28:0e:fe:70:99:
                    a0:02:21:70:ac:05:20:1f:6d:a9:7f:51:d1:df:60:
                    50:7a:03:2b:9d:1a:75:c1:c7:67:dc:fb:d7:d6:e2:
                    31:61:00:e6:d6:bb:90:e6:84:fe:00:c8:f2:71:9c:
                    50:bf:86:97:5a:8e:ee:1c:83:ef:96:c7:b8:5b:58:
                    6d:8c:c6:c5:2f:3f:90:60:12:95:1f:c0:8a:46:43:
                    fa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:31:3D:91:AC:19:7A:A7:BE:53:15:F1:60:3D:A9:09:FA:E1:8D:62
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4zE9kawZeqe-UxXxYD2pCfrhjWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:ccc7:7770::/44

    Signature Algorithm: sha256WithRSAEncryption
         63:e6:71:c3:48:f2:e4:cb:0c:fb:19:18:63:f8:82:d8:ed:03:
         8d:76:4a:04:92:c4:88:df:57:0c:f8:7d:11:91:63:54:97:00:
         da:a9:3b:72:0d:b5:e0:09:be:02:95:bd:7b:e4:74:81:71:3b:
         98:d1:24:27:c3:d5:71:cd:02:53:61:fe:6f:33:0c:ad:f4:fc:
         5b:ef:45:ad:7e:dd:ca:3e:71:e4:62:32:cb:6c:e6:83:94:00:
         2f:74:20:a9:96:09:50:97:33:d5:8b:87:ff:72:15:42:95:55:
         17:6d:12:c0:8b:03:7f:06:ce:57:c6:7f:e3:ce:9d:a5:f7:b7:
         c7:a3:8e:e5:fb:f2:3f:4d:77:8e:05:b0:ac:d0:71:73:9e:f1:
         b3:03:79:10:21:7d:a4:3a:5c:30:9e:7f:62:0b:a1:4d:de:e6:
         d8:7f:0c:c3:35:ab:90:8b:ee:70:ed:7f:c6:e8:cc:ce:dc:2f:
         d9:1e:46:c5:25:45:ec:e3:35:9f:ad:78:6f:58:81:84:f8:3d:
         46:6f:bf:ff:9d:95:db:73:4b:71:5d:ff:9d:92:c1:cf:34:7b:
         90:f2:78:ce:f5:49:c3:7a:ab:ed:0b:2c:7c:03:28:e4:b2:30:
         d1:ed:5e:74:61:0d:d4:f3:a7:7a:cd:d3:c3:ad:66:16:e9:4d:
         d7:f7:45:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----