Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8KTHVensy_HzMV1fD-xYI1Dc4aE.roa
File:                     8KTHVensy_HzMV1fD-xYI1Dc4aE.roa (raw, json)
Hash identifier:          vXGv6NR6O1McyEIqoyYwchm8VUJ1xollh8P7jJAWJ7o=
Subject key identifier:   F0:A4:C7:55:E9:EC:CB:F1:F3:31:5D:5F:0F:EC:58:23:50:DC:E1:A1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189126333B8B44544C35A0B1E544783ED8C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8KTHVensy_HzMV1fD-xYI1Dc4aE.roa
Signing time:             Sat 01 Jul 2023 16:57:18 +0000
ROA not before:           Sat 01 Jul 2023 16:57:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     53667
IP address blocks:        2a10:ccc0:cc02::/48 maxlen: 48
                          2a10:ccc2:9c00::/38 maxlen: 48
                          2a06:de01:400::/38 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:12:63:33:b8:b4:45:44:c3:5a:0b:1e:54:47:83:ed:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul  1 16:57:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f0a4c755e9eccbf1f3315d5f0fec582350dce1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1c:24:5a:4e:a7:1d:eb:cc:99:c1:53:57:67:
                    d0:74:5f:45:c9:41:28:5a:5c:5c:44:c2:b8:fe:6f:
                    d7:56:87:87:81:cd:39:55:5d:31:19:33:9b:42:c8:
                    22:f3:b5:14:a3:62:69:8b:c3:6a:e1:76:32:59:0d:
                    1a:59:bb:c4:ad:d1:d2:7a:d2:ad:2d:a0:6c:73:d4:
                    70:3d:c8:e2:47:59:fc:9e:e6:f9:e8:74:11:7c:65:
                    29:ff:cd:05:e0:34:1d:f5:35:15:bb:b5:8a:7b:07:
                    ec:d5:3a:d4:74:b0:c7:36:76:fb:c6:e8:7e:69:31:
                    a1:97:c1:66:16:85:3a:5a:48:88:30:a2:fd:6d:6a:
                    81:cd:c1:10:b7:64:2f:24:b9:a7:43:b2:0f:cf:41:
                    ce:fd:93:5c:96:53:c8:63:8e:a1:0b:6b:e5:63:fd:
                    4f:c8:12:a7:68:91:60:18:10:f5:82:4f:cb:5e:34:
                    fd:7a:b0:db:2b:2d:1e:9d:a2:ba:5a:80:b0:b3:7c:
                    20:b1:9c:b8:95:60:c2:2f:de:1a:1a:df:70:9a:ef:
                    80:47:e8:93:2e:5e:0a:c9:3c:24:8d:e1:45:58:ca:
                    d8:51:9d:4b:f6:4b:96:b2:92:3a:ae:37:f7:57:9d:
                    d8:b1:b3:97:58:99:9a:ce:c9:17:c6:82:7e:b3:50:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A4:C7:55:E9:EC:CB:F1:F3:31:5D:5F:0F:EC:58:23:50:DC:E1:A1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8KTHVensy_HzMV1fD-xYI1Dc4aE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de01:400::/38
                  2a10:ccc0:cc02::/48
                  2a10:ccc2:9c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         9e:5b:6a:4d:56:ee:02:02:cc:fb:d9:5f:ca:82:e2:d3:2c:25:
         36:dc:68:24:f4:87:49:52:83:27:fb:4c:66:43:9f:23:6c:98:
         ec:74:76:fd:b5:c5:ba:1c:ac:50:45:f1:2c:dd:a9:f2:80:75:
         8b:6a:60:3b:aa:98:4f:da:13:0c:94:27:d4:d3:a0:8e:5e:c3:
         59:d4:6c:1a:36:fd:92:4b:09:f8:f0:88:fc:8c:2a:28:e2:06:
         51:ef:1d:e7:d6:53:19:98:13:76:50:39:06:53:e1:24:fa:5f:
         bf:50:9f:a1:60:4b:d3:df:dd:30:a8:df:7f:ee:71:9a:3b:b2:
         96:1d:59:2d:03:10:08:3b:d4:82:0c:00:07:b9:73:9e:d6:6b:
         a7:0e:06:1c:1d:c1:30:a1:b0:06:d2:0f:ff:2b:0a:8e:1a:34:
         c5:e1:b0:6f:2c:1a:92:94:be:49:40:a9:0d:1c:61:cc:bb:ba:
         df:f6:36:ef:17:31:7d:fe:89:1b:62:84:ad:cb:4e:bd:11:a4:
         1f:15:2f:5e:4e:d7:07:3c:75:d1:88:4f:e3:60:87:89:6d:f1:
         54:14:97:42:97:76:1b:ae:14:fc:71:2f:2f:37:f0:9c:75:1c:
         a7:a6:4a:97:ed:0a:13:c7:0e:fb:96:3f:bf:87:16:ce:68:56:
         dd:4e:79:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----