Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DZP_BK1w7SCAyosP7XrT83E4F1Q.roa
File:                     DZP_BK1w7SCAyosP7XrT83E4F1Q.roa (raw, json)
Hash identifier:          zAZI+/liCjRAPMDlWxfOEFZ582XCsdfoI/jck/nxliQ=
Subject key identifier:   0D:93:FF:04:AD:70:ED:20:80:CA:8B:0F:ED:7A:D3:F3:71:38:17:54
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0186C52444FA1A0F98F0E9444A1216ED10C2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DZP_BK1w7SCAyosP7XrT83E4F1Q.roa
Signing time:             Thu 09 Mar 2023 06:52:13 +0000
ROA not before:           Thu 09 Mar 2023 06:52:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1
IP address blocks:        2a10:cc40:140::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c5:24:44:fa:1a:0f:98:f0:e9:44:4a:12:16:ed:10:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar  9 06:52:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d93ff04ad70ed2080ca8b0fed7ad3f371381754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:8f:0a:e9:23:29:62:64:39:71:bd:aa:bc:
                    a9:1e:45:4d:6d:4b:71:76:24:37:a6:89:30:b3:cd:
                    f0:ff:d2:9e:5e:ad:8b:25:c5:d4:ce:ad:34:f1:a7:
                    44:f7:72:11:5b:66:72:d8:b7:33:fa:21:38:b6:86:
                    dd:7c:31:01:4a:e1:f3:97:a9:9f:9a:c6:be:67:e4:
                    d8:19:1a:bd:5e:dc:3f:b3:c2:0c:d7:6b:44:00:dd:
                    71:6d:cb:1e:74:2c:4e:52:ad:b4:34:2f:7f:8b:31:
                    67:1d:dd:be:bb:52:68:91:2d:01:7d:f7:69:08:b4:
                    27:70:41:12:f8:d0:d3:ce:0c:a3:1a:22:02:c5:e2:
                    1c:a3:25:a5:64:95:4b:22:da:53:25:c5:78:06:9d:
                    3c:25:68:ea:9a:57:9e:4d:c8:56:48:fe:83:d8:4d:
                    91:bb:37:36:dc:a7:7d:54:00:19:bf:a5:fc:ad:58:
                    19:a3:44:78:16:1e:77:d4:b2:14:b4:a4:93:55:dd:
                    c6:04:bf:10:6f:f3:14:45:4f:b4:32:e2:11:de:91:
                    31:aa:95:35:86:03:58:e3:17:67:5d:1c:e4:b4:d0:
                    4c:23:0c:9c:cb:ee:9f:9b:09:7a:74:bb:0e:e1:f6:
                    c9:ab:ac:4d:88:39:cc:fa:1b:70:05:67:66:c4:a3:
                    37:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:93:FF:04:AD:70:ED:20:80:CA:8B:0F:ED:7A:D3:F3:71:38:17:54
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DZP_BK1w7SCAyosP7XrT83E4F1Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:140::/44

    Signature Algorithm: sha256WithRSAEncryption
         65:1c:8c:86:2b:5a:e2:73:8b:b2:de:7f:ac:92:25:b8:bb:55:
         8e:41:07:ae:c4:f8:a1:f8:17:8e:c9:64:99:dc:76:6e:88:cc:
         08:52:40:4d:ad:3c:eb:e7:8c:02:71:86:01:fe:75:a4:8b:61:
         0e:94:f8:e4:89:f7:3e:ba:f9:c7:38:06:e9:b9:00:bf:bf:18:
         6b:0f:5d:34:5b:85:9d:cf:96:c7:ce:a3:b4:92:88:bf:cf:d0:
         2e:53:4a:66:0f:dc:d4:4c:c0:b2:e5:72:6d:b1:cd:e0:90:a7:
         90:d4:34:f9:e8:dd:17:09:4d:6d:40:0c:a5:50:7c:c5:df:ee:
         8b:14:d9:b1:44:bb:a7:05:fe:1e:6e:64:d1:66:aa:ee:50:cc:
         61:a1:a3:85:e3:f7:9a:ce:5e:22:d1:66:9b:4d:b9:fb:70:32:
         e7:ca:8b:5a:92:6c:06:b2:da:ed:b5:24:ce:1c:06:c1:fb:9e:
         03:d6:f0:e6:2d:aa:ea:5a:70:6d:ef:e8:ef:18:be:c7:10:5c:
         14:c5:a6:32:10:b9:80:4f:46:86:35:21:76:1a:b0:ea:d8:c9:
         08:62:5d:3b:1b:ec:a7:a7:c6:50:8a:98:85:02:9c:9c:2a:45:
         cf:d6:a1:38:fe:6a:6e:15:0e:83:d9:c2:5f:03:8c:82:f9:3d:
         b5:a2:92:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----