Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EnCeOygzzEghXbGPSIR4PaxP_sM.roa
File:                     EnCeOygzzEghXbGPSIR4PaxP_sM.roa (raw, json)
Hash identifier:          pIBYQEzNhYc38a7GFr/ExJl/gBujbFMnxb2Vxff1/cw=
Subject key identifier:   12:70:9E:3B:28:33:CC:48:21:5D:B1:8F:48:84:78:3D:AC:4F:FE:C3
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7796D7CE4EBACDB62131585051E9D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EnCeOygzzEghXbGPSIR4PaxP_sM.roa
Signing time:             Mon 02 Jan 2023 05:14:56 +0000
ROA not before:           Mon 02 Jan 2023 05:14:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35619
IP address blocks:        2a10:ccc2::/36 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:79:6d:7c:e4:eb:ac:db:62:13:15:85:05:1e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:14:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12709e3b2833cc48215db18f4884783dac4ffec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a6:ea:5f:54:de:7b:f4:77:59:c4:40:82:5e:
                    a3:67:f1:0b:91:35:32:7a:de:a0:9b:48:53:23:97:
                    72:23:cc:16:a9:67:f2:a4:71:9b:d8:90:80:71:b7:
                    bd:91:ac:b1:4f:23:05:57:05:28:46:26:55:b3:50:
                    57:d0:2e:fc:15:7c:d7:6d:1b:74:32:99:c2:8b:38:
                    d8:2b:23:1b:f0:47:91:2c:09:15:e2:77:1a:17:5f:
                    79:c5:74:49:e7:d7:c2:7f:a8:53:e2:53:b9:5d:38:
                    18:d7:ea:a9:af:44:53:38:b3:7c:8e:fa:80:87:2e:
                    3a:bd:a5:d5:02:7a:e5:48:75:5b:0a:c7:0c:dc:63:
                    84:47:1e:8d:88:3c:3c:d5:b7:95:98:ff:7e:5f:c0:
                    8a:05:7f:ff:88:12:0b:df:a2:df:14:7f:14:2d:2d:
                    c8:5b:82:4c:64:8a:c0:53:04:fb:b1:52:fe:b0:69:
                    34:93:5f:81:e5:38:2a:7f:2b:3d:2d:d8:c2:6b:f6:
                    fb:03:68:25:ed:76:9c:13:73:c6:83:7a:a4:aa:47:
                    12:a5:9a:a3:a4:a6:a4:33:49:0b:3f:82:66:ef:72:
                    e7:6c:3a:a3:73:b1:7e:79:7c:8e:e6:52:36:19:d0:
                    d7:b5:a7:13:84:c9:8e:d6:25:77:59:0e:9d:49:5a:
                    e0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:70:9E:3B:28:33:CC:48:21:5D:B1:8F:48:84:78:3D:AC:4F:FE:C3
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EnCeOygzzEghXbGPSIR4PaxP_sM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:ccc2::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:1f:e5:aa:dc:4d:54:0c:b0:03:5a:f8:39:70:14:89:d9:
         b2:43:7b:89:9a:09:2b:51:2f:65:72:31:44:19:13:d7:1a:a3:
         50:f5:56:4d:ba:97:73:41:6a:d3:c3:92:47:a8:97:eb:be:b5:
         31:aa:0c:f0:68:64:77:14:e8:0d:b5:96:43:fe:42:00:80:bb:
         ce:fd:27:51:d8:75:c7:04:31:f9:2a:b5:51:e7:05:54:96:2f:
         93:14:75:fb:f6:3f:ab:61:40:8f:dc:60:75:df:ec:76:8c:45:
         93:fe:7f:88:bf:c5:4b:92:96:21:13:da:d7:e5:04:71:9a:31:
         ce:96:8d:6e:2c:20:f8:0a:e9:4d:fa:ee:9e:db:a4:f5:4e:4d:
         ea:07:1f:09:c3:d6:29:31:07:fa:d3:35:f7:44:72:9e:eb:aa:
         77:57:91:1b:a6:0a:84:c2:e1:e7:46:36:9f:09:d5:de:e5:46:
         0d:db:49:9e:94:b9:57:b1:c8:d0:ee:30:be:61:81:76:d2:a6:
         71:34:a7:da:97:29:ac:8f:fd:d8:84:c8:1f:71:7c:1e:68:63:
         86:a2:1f:eb:e7:d6:7e:e0:60:1c:2a:f0:b8:77:77:17:1a:67:
         68:4d:fc:78:40:b7:cc:b3:1c:d7:bf:67:ba:24:a3:df:2e:10:
         9d:7c:4a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----