Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B34XPcdTelx0yxJfE47W5TSdKiA.roa
File:                     B34XPcdTelx0yxJfE47W5TSdKiA.roa (raw, json)
Hash identifier:          lCtMc6PWrIrBUsVWyX0YWEu4l03U7/VdOn1+QgIRnPk=
Subject key identifier:   07:7E:17:3D:C7:53:7A:5C:74:CB:12:5F:13:8E:D6:E5:34:9D:2A:20
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7D8E72A90896A7FE130A83BD680B2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B34XPcdTelx0yxJfE47W5TSdKiA.roa
Signing time:             Mon 02 Jan 2023 05:15:20 +0000
ROA not before:           Mon 02 Jan 2023 05:15:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208893
IP address blocks:        2a10:2f00:17d::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:d8:e7:2a:90:89:6a:7f:e1:30:a8:3b:d6:80:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=077e173dc7537a5c74cb125f138ed6e5349d2a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4d:a4:a5:43:60:a1:4f:4b:c0:14:74:d4:99:
                    5a:ba:30:87:bf:29:d6:04:a2:ac:32:9e:53:f9:7a:
                    f0:d5:65:8c:2b:06:ef:3c:cd:0c:16:bc:28:b2:08:
                    3b:64:14:73:bf:ee:1b:f6:65:ee:d0:dc:40:12:52:
                    ea:fe:a7:0e:b3:52:ec:58:9b:31:7e:1c:74:c1:0e:
                    d0:01:86:01:df:89:1b:b7:8f:57:55:93:88:8b:db:
                    ab:72:65:56:b9:6e:91:7c:df:21:96:21:bd:71:a8:
                    c8:87:fe:c4:a3:c4:d8:1f:05:1f:0f:53:e1:01:f2:
                    80:82:c8:a9:c4:5b:49:98:90:5b:6a:d2:5d:4e:ee:
                    8b:6f:c5:5e:dc:e3:97:62:73:64:b7:b0:a1:f4:1e:
                    f3:c8:09:64:d5:5a:cf:c2:aa:f6:57:f2:c5:06:2e:
                    9e:b3:0b:b0:cf:6f:ce:0a:0b:c8:44:5f:21:ab:8f:
                    2b:0a:33:a9:67:f3:4f:00:57:7e:59:c1:e3:ff:e9:
                    70:5d:d0:0c:b1:4d:56:b8:dd:98:8e:08:17:56:22:
                    cc:bb:e3:c2:54:92:1a:78:cc:96:d0:6d:29:59:4f:
                    ea:59:fe:83:f5:77:a6:04:8e:94:b1:69:5f:4c:b9:
                    f6:6c:ec:8a:6d:20:b0:81:16:4b:2a:f4:25:81:bb:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7E:17:3D:C7:53:7A:5C:74:CB:12:5F:13:8E:D6:E5:34:9D:2A:20
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B34XPcdTelx0yxJfE47W5TSdKiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:17d::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:8c:32:84:f5:d5:5c:d4:b8:0b:69:cb:41:aa:b5:a6:b2:26:
         99:bf:2f:26:00:23:df:98:19:20:c9:a4:c4:60:a7:37:f7:72:
         a0:55:3c:6b:52:1a:93:f6:d8:39:02:a5:6a:9b:89:3f:c9:9f:
         6d:54:2e:7e:a5:e1:b3:99:f1:0a:94:dd:32:41:a9:f3:42:f0:
         1a:c7:f7:1e:25:16:f4:55:46:7f:c1:bd:e4:85:0c:34:d5:41:
         0c:25:4b:fd:87:4f:14:bc:8c:9d:de:95:20:d4:94:87:2f:0c:
         33:ac:83:63:30:68:f4:c3:e0:fb:18:f3:55:91:bf:d8:9f:87:
         6a:75:b2:89:e0:2e:ee:a9:a6:d5:2e:08:77:e6:b8:0b:05:aa:
         36:f1:3f:49:24:b3:8e:26:ed:6d:3f:af:a6:1c:12:43:94:e3:
         05:32:72:2f:46:d1:e2:14:02:de:78:ce:cf:a4:6f:9c:31:7f:
         f9:4a:fa:a9:26:aa:90:33:d9:39:7a:94:74:dc:3b:8f:af:7b:
         78:af:d7:13:ee:bb:3d:71:20:c0:90:0e:37:6b:81:9f:1a:87:
         86:cc:6d:04:ea:31:5d:68:b3:14:2a:7e:14:53:bb:a8:44:cb:
         b2:0f:d0:71:f4:ee:be:0b:19:d2:97:db:d6:b8:b5:06:9c:9b:
         17:0b:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----