Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ec7Lit0Oa9oM9612HGStkBB3Esk.roa
File:                     Ec7Lit0Oa9oM9612HGStkBB3Esk.roa (raw, json)
Hash identifier:          ImzBppi796og0mlwzWdB+7XDIc1DJXX5BSNsKRdwqrM=
Subject key identifier:   11:CE:CB:8A:DD:0E:6B:DA:0C:F7:AD:76:1C:64:AD:90:10:77:12:C9
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01885BEFD9384C78B5BF233538A2D9F1A906
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ec7Lit0Oa9oM9612HGStkBB3Esk.roa
Signing time:             Sat 27 May 2023 06:40:25 +0000
ROA not before:           Sat 27 May 2023 06:40:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212194
IP address blocks:        2a10:2f00:15f::/48 maxlen: 48
                          2a10:ccc7:7770::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:5b:ef:d9:38:4c:78:b5:bf:23:35:38:a2:d9:f1:a9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 27 06:40:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11cecb8add0e6bda0cf7ad761c64ad90107712c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:80:0e:d3:c4:0a:ad:24:9e:99:dc:8d:c0:7c:
                    86:b2:b2:b6:af:2d:51:cf:e4:f1:50:5b:4a:18:81:
                    8a:91:e3:f1:9f:66:f9:94:0e:e7:64:18:23:67:43:
                    42:0c:bf:09:8d:d0:cf:1b:a4:ad:8d:5c:38:b8:ad:
                    54:0b:14:05:ac:b4:f8:28:41:61:b3:f3:6d:0f:99:
                    58:1c:fd:ed:e0:e6:2e:a0:c7:75:2b:cb:3e:5f:74:
                    5a:f7:a8:c9:06:60:58:e5:e8:b0:02:ee:9d:bf:92:
                    5d:53:4a:0f:3f:57:b9:83:ca:fb:3d:87:12:5d:69:
                    d2:42:76:39:4a:a7:67:f9:74:d6:9a:42:7e:77:6b:
                    db:d2:48:7f:6d:e2:ea:2a:bf:a3:0c:5f:bd:dd:e8:
                    da:57:28:08:b0:dd:fc:c5:f2:42:44:37:25:19:af:
                    df:f6:b0:0f:d8:a7:ab:60:e1:4b:3a:05:25:f0:0d:
                    d0:e8:8b:2b:23:1e:9b:1e:af:8f:b6:76:3a:7f:9a:
                    8b:37:74:5e:71:2a:cb:10:41:1d:8e:ca:1c:2c:70:
                    93:54:83:26:94:d6:20:8c:02:77:73:46:44:d0:9f:
                    ee:12:b2:3e:45:13:de:d4:0d:e1:5f:59:ba:5e:f9:
                    be:e7:86:5e:15:ae:59:4a:c5:23:22:19:b2:b8:45:
                    2f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CE:CB:8A:DD:0E:6B:DA:0C:F7:AD:76:1C:64:AD:90:10:77:12:C9
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ec7Lit0Oa9oM9612HGStkBB3Esk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:15f::/48
                  2a10:ccc7:7770::/44

    Signature Algorithm: sha256WithRSAEncryption
         a9:b1:45:b8:f5:57:ef:51:f9:20:b6:e6:fc:a8:91:b2:3f:e2:
         f6:3a:7f:a9:48:13:6a:94:ff:f2:ae:f1:87:68:9a:d1:ad:58:
         f2:0c:07:ad:bd:2e:5f:1d:ab:3c:9d:3e:ef:40:8d:aa:f3:0c:
         03:03:ce:0b:0c:5f:ea:8a:d1:19:82:98:a5:88:22:14:c6:f2:
         1e:8c:e6:92:34:d8:e9:12:ed:92:8e:04:ea:d7:00:6a:21:09:
         8f:d2:72:ac:17:33:06:e2:bf:40:e5:dd:f2:23:ed:35:a5:ca:
         71:17:49:ac:6b:35:e4:88:fd:b8:4e:9c:46:fc:ac:81:b2:b1:
         ec:c3:08:08:ea:f1:a7:82:a6:de:1c:93:7f:a4:6c:64:de:5d:
         1d:3b:22:0d:8e:97:9c:a0:c1:d6:4c:94:a2:87:d6:b6:cb:47:
         08:dc:6f:7c:66:77:01:aa:28:df:f8:94:3b:ce:83:e5:88:8d:
         a5:fc:2b:a6:44:8d:a4:48:8b:a1:6c:bf:c7:ef:7d:55:df:91:
         9c:22:ed:07:b5:5c:cb:52:08:9b:74:0a:82:e9:bd:ef:05:6d:
         64:06:2b:f7:21:96:a7:4a:fb:55:fb:21:b5:6a:aa:72:bf:e0:
         35:09:16:e9:da:e5:60:8c:7c:a0:e9:5e:35:69:d5:be:eb:c6:
         33:f8:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----