Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ei9iHiUSXEu_J5y3bw_dx3H_dT8.roa
File:                     Ei9iHiUSXEu_J5y3bw_dx3H_dT8.roa (raw, json)
Hash identifier:          sbPsEz3Br/1uymBLHA3N4/OsvNXMN85vwBe3LyyZvPU=
Subject key identifier:   12:2F:62:1E:25:12:5C:4B:BF:27:9C:B7:6F:0F:DD:C7:71:FF:75:3F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CF95AB7C2529CF8A0158DA8748014D1ED
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ei9iHiUSXEu_J5y3bw_dx3H_dT8.roa
Signing time:             Thu 11 Jan 2024 16:28:41 +0000
ROA not before:           Thu 11 Jan 2024 16:28:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215751
IP address blocks:        2a10:cc40:cc42::/48 maxlen: 48
                          2a10:cc40:cc40::/48 maxlen: 48
                          2a10:cc40:cc41::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 23:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:f9:5a:b7:c2:52:9c:f8:a0:15:8d:a8:74:80:14:d1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 11 16:28:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=122f621e25125c4bbf279cb76f0fddc771ff753f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:64:55:0f:c5:5e:0a:cc:0e:e9:14:be:c9:8d:
                    b6:1e:2a:a2:08:dc:4e:65:65:0a:7d:f5:6a:46:23:
                    ff:67:73:1a:6c:b2:65:91:de:38:6e:21:f6:c3:8e:
                    8a:2b:27:93:cc:86:2b:e2:3c:33:ee:89:7d:ba:35:
                    fd:c7:d3:73:c5:b5:dc:37:7e:0e:5c:b2:d1:32:eb:
                    ce:c3:30:47:8b:c3:3f:eb:a7:e7:21:18:16:7b:39:
                    b9:f1:9d:8a:f7:3f:4f:01:e9:d8:b5:c0:0e:c7:05:
                    f2:7c:34:e0:8d:0b:f3:95:d5:77:ec:d7:34:84:f6:
                    0f:a1:0b:ec:ad:39:d1:67:d6:24:9a:6e:bf:db:9e:
                    38:75:7d:35:6d:81:71:27:a4:92:0e:31:79:3a:23:
                    c5:5b:33:94:8c:df:2d:cc:0a:ab:0b:81:d2:0b:07:
                    b3:7a:12:2f:f2:10:a9:19:bd:98:f4:e0:44:04:66:
                    d8:b1:ae:db:61:50:cc:39:4d:1b:95:34:42:7b:46:
                    6a:7b:01:a3:7c:1e:9e:f2:80:63:f7:5e:b6:67:2d:
                    b1:38:8b:d1:a5:0d:81:8b:0e:06:22:e7:10:d3:23:
                    de:c4:a7:99:c2:30:36:c0:ca:51:46:51:96:87:b6:
                    4b:4d:a6:a7:d3:d8:fc:9d:bb:a3:b9:c9:ab:ce:4d:
                    39:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2F:62:1E:25:12:5C:4B:BF:27:9C:B7:6F:0F:DD:C7:71:FF:75:3F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ei9iHiUSXEu_J5y3bw_dx3H_dT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:cc40::-2a10:cc40:cc42:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         90:9d:14:be:09:08:7a:8f:92:48:bc:ee:44:b5:bf:c8:15:29:
         6d:ea:86:83:16:c1:01:d0:f8:ab:7e:e3:67:39:f9:30:4c:ec:
         f6:16:d8:11:23:cc:96:6f:8d:40:9b:17:a4:97:a7:a2:4e:e7:
         06:7e:c2:c2:54:cd:d2:cc:27:50:ca:84:de:71:d7:d7:ba:7a:
         32:9e:cd:e7:45:d3:1c:99:b3:e5:a8:da:ec:c1:ee:cf:c1:60:
         53:80:5a:94:38:9c:06:c1:7d:8b:73:af:23:2a:87:92:8e:dc:
         95:6a:8a:3c:a7:ee:93:d1:7a:3e:54:e6:ce:3b:a1:78:cd:fd:
         72:4e:94:65:2b:d0:2c:b5:6f:19:b6:81:64:2a:df:5e:27:f3:
         bd:0d:a9:ae:a7:8e:9d:33:90:80:3d:f7:e9:05:ef:56:8c:aa:
         c6:11:68:11:bc:9e:da:4c:db:1e:d0:c3:04:c5:a6:cb:6b:41:
         96:b7:40:14:6f:e8:73:16:ae:4b:01:84:a3:30:9a:7f:a9:58:
         4d:6e:9f:b4:57:0d:a6:c9:bd:3c:1f:0e:1d:e2:2a:cb:90:56:
         38:82:2a:93:13:15:f0:e3:10:12:24:be:47:85:36:29:f1:ee:
         7b:5b:3e:8d:93:4c:17:d9:34:c5:1b:2e:94:b4:b3:d9:50:29:
         78:73:9b:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----