Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5hg0EHsMyYPjEgjxxM5g52uP728.roa
File:                     5hg0EHsMyYPjEgjxxM5g52uP728.roa (raw, json)
Hash identifier:          lZJ0iJ9VRK6h4JGH1sP5cWZDnnpUwoSvO0sMAnRY+bM=
Subject key identifier:   E6:18:34:10:7B:0C:C9:83:E3:12:08:F1:C4:CE:60:E7:6B:8F:EF:6F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01868A27988E259B4290820661B98D56DE61
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5hg0EHsMyYPjEgjxxM5g52uP728.roa
Signing time:             Sat 25 Feb 2023 19:58:16 +0000
ROA not before:           Sat 25 Feb 2023 19:58:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199763
IP address blocks:        2a10:cc44:1c0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:8a:27:98:8e:25:9b:42:90:82:06:61:b9:8d:56:de:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 25 19:58:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e61834107b0cc983e31208f1c4ce60e76b8fef6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:27:36:ca:ef:89:2c:4f:00:55:09:10:a4:
                    a2:75:0f:67:41:d9:92:5f:55:39:06:e9:73:d8:aa:
                    0d:9e:50:46:b6:7e:dc:07:fc:56:04:41:43:99:8a:
                    d0:f1:b6:3c:69:ef:bb:12:38:5b:0a:41:9a:a2:f5:
                    dd:a0:8a:c6:ff:99:cf:a0:70:1c:28:a8:6b:6d:18:
                    57:a5:59:89:a8:25:0f:3e:4e:6b:e8:57:42:f4:3f:
                    ce:ea:a2:70:e1:c2:0d:a0:fd:2f:a1:93:22:78:c1:
                    e0:70:9a:c2:15:b4:92:3e:06:1e:e4:04:7f:f3:66:
                    bd:42:fb:6c:6c:79:27:eb:70:17:26:5c:38:9a:f7:
                    fc:0f:d5:18:a3:b0:d9:d8:8e:ca:1e:79:34:58:14:
                    b4:3c:b7:a5:11:ab:a8:14:a7:86:f6:7e:38:e3:5b:
                    c4:43:a4:20:65:1e:ee:83:19:c6:d7:c5:f3:98:06:
                    ae:f9:b6:fe:b8:16:bb:cc:b9:94:1f:32:8f:16:e8:
                    ce:8a:00:e0:ad:65:ad:d1:fd:d0:69:2a:93:25:78:
                    76:2b:1b:56:d5:a0:c8:90:b9:67:43:96:77:94:87:
                    bb:1e:d9:19:fb:af:4f:fd:74:c2:93:44:aa:7b:d1:
                    c6:f0:8c:8d:c6:58:c6:88:0e:2f:ef:f2:94:c3:f8:
                    2b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:18:34:10:7B:0C:C9:83:E3:12:08:F1:C4:CE:60:E7:6B:8F:EF:6F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5hg0EHsMyYPjEgjxxM5g52uP728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc44:1c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4d:24:b9:8b:ec:51:7e:21:d5:a5:63:b2:70:1d:a0:34:f4:c7:
         3d:1d:24:c1:e0:1b:66:7b:33:bb:f2:f2:0e:ae:e4:fa:50:a7:
         b2:23:5b:8e:29:87:99:21:57:4a:2b:3f:d9:1a:a6:fb:51:e8:
         fc:a6:ff:92:bb:ac:0a:72:f2:25:55:d9:d0:2e:6a:1e:32:60:
         f5:55:d8:8d:fa:19:9b:35:77:7b:21:5c:fc:e2:7e:c4:90:9c:
         75:b0:0b:ff:aa:c0:38:33:8e:4b:ff:ff:3d:8d:1c:ee:bd:00:
         9e:5f:33:20:ca:9a:ff:82:fb:1e:9c:62:d3:6e:fc:03:f1:02:
         76:1a:f7:fe:69:32:25:8b:4b:70:d7:a8:af:42:39:08:3b:e3:
         93:e6:af:b6:a6:24:c7:48:59:ca:6e:39:25:fb:04:91:59:0d:
         ca:54:ed:e6:04:ab:15:91:6e:78:0b:b6:6e:ac:5e:ee:91:bc:
         2e:6c:59:47:5e:38:cb:a4:96:78:0e:de:8f:14:91:1f:0c:90:
         b0:10:4c:90:82:08:9e:89:0c:84:d7:6d:e5:1c:e0:fb:64:d6:
         93:f7:37:ae:4e:9f:40:29:36:a0:b8:bf:22:6f:b6:76:f1:42:
         1f:f8:96:2d:93:c2:5a:96:ec:ba:ac:10:5d:a1:ed:16:0d:03:
         d8:6f:5d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----