Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DSr2muIEJFGX9XV3kayp94Rkq08.roa
File:                     DSr2muIEJFGX9XV3kayp94Rkq08.roa (raw, json)
Hash identifier:          pXprGpHn6Dz7lyxm/Xbt5yDGDZtYNbt5LahtaCRElMo=
Subject key identifier:   0D:2A:F6:9A:E2:04:24:51:97:F5:75:77:91:AC:A9:F7:84:64:AB:4F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018D0A184D38EAB0C8628CC900B41E7D22A6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DSr2muIEJFGX9XV3kayp94Rkq08.roa
Signing time:             Sun 14 Jan 2024 22:29:41 +0000
ROA not before:           Sun 14 Jan 2024 22:29:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61102
IP address blocks:        2a10:cc40:cc4f::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 00:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:0a:18:4d:38:ea:b0:c8:62:8c:c9:00:b4:1e:7d:22:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 14 22:29:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0d2af69ae204245197f5757791aca9f78464ab4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:56:76:66:67:fd:a8:c6:01:d9:24:58:f1:4d:
                    7a:4d:71:cd:e7:bb:24:d7:35:10:6f:a9:ef:17:03:
                    f4:07:f7:ce:7f:4e:89:08:22:b2:8b:6b:86:ae:12:
                    cb:8e:6e:cd:af:f2:fc:bb:8d:a5:d8:55:64:cc:b6:
                    51:7b:95:36:01:62:e5:58:51:da:5f:d8:92:45:d2:
                    2c:91:de:af:60:6c:9a:14:5a:94:74:39:cd:f3:54:
                    e3:a7:71:65:38:b2:6b:1b:d5:f2:fa:6e:de:8c:f9:
                    16:6e:d1:60:8c:59:ae:2d:81:0d:8d:ed:fd:c2:dc:
                    7b:58:0e:de:10:61:d9:a3:18:1e:39:3f:b5:02:af:
                    db:8a:70:a6:2a:b6:e5:3b:e3:ce:0d:df:a6:6e:c4:
                    7e:f7:54:cb:18:61:77:0b:b1:e9:38:1e:10:c8:9f:
                    88:8b:6a:5c:0d:54:04:db:46:38:29:c2:00:7e:c4:
                    bd:24:c9:49:70:34:d3:eb:eb:6d:02:73:73:05:77:
                    ec:d4:3f:70:8e:57:4b:bc:eb:04:7c:e4:7b:c1:00:
                    6e:14:de:a2:f6:ff:b6:30:9c:9d:62:45:a8:dc:76:
                    79:7d:a5:d8:8e:7a:c9:a2:65:f9:cd:bc:50:8f:4a:
                    c1:11:3d:f2:b1:68:37:44:07:8b:0d:5f:70:cc:c9:
                    6e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2A:F6:9A:E2:04:24:51:97:F5:75:77:91:AC:A9:F7:84:64:AB:4F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DSr2muIEJFGX9XV3kayp94Rkq08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:cc4f::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:d5:0f:28:5f:10:38:cd:3a:66:2c:26:d0:13:76:a6:2e:71:
         3f:2e:cd:85:e8:36:ee:0b:db:5c:e4:fe:8f:60:51:d4:29:30:
         64:dc:2b:68:5c:6d:7b:7e:40:25:82:2e:ff:3e:ef:7b:60:ea:
         87:91:ee:fa:3d:88:6d:bf:82:6d:a4:17:97:96:a8:2e:23:8c:
         bd:3a:60:33:fc:71:17:64:11:6c:d5:e3:13:c3:cb:27:5e:cd:
         cf:fa:36:29:b1:0e:1e:d4:bb:bf:2a:4a:56:b5:8a:4e:fa:aa:
         9e:5e:62:54:1f:45:0a:cd:a0:77:ce:fd:b7:62:c8:ed:f3:68:
         29:f8:5e:60:c9:cf:fe:9a:90:71:2e:c6:46:6c:cf:34:17:9d:
         6d:ba:43:4d:87:5d:17:0d:f6:be:a8:2a:3b:1b:20:dd:76:3c:
         b4:bf:3d:5e:1f:6e:e5:43:59:11:04:86:5d:e6:f6:73:3f:fa:
         3b:ef:d0:14:4c:60:84:5d:cc:3d:79:10:5e:11:de:66:b4:d8:
         2d:45:2c:30:ab:3e:27:59:02:89:3c:d4:5a:90:d9:54:d3:e8:
         6c:76:35:6d:87:0f:eb:6f:65:c5:1d:4b:f6:9c:0c:49:bb:b3:
         b9:0a:ef:7e:7d:7e:e9:98:8d:1c:af:86:f7:58:03:cb:a6:6b:
         16:65:36:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----