Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JcukM0TzPuR7YaU1wNIe9P7cEQA.roa
File:                     JcukM0TzPuR7YaU1wNIe9P7cEQA.roa (raw, json)
Hash identifier:          Gwt7RBLMzJvQ80wxwtQGXLvhw4iKWyrZDibIWxQzWXE=
Subject key identifier:   25:CB:A4:33:44:F3:3E:E4:7B:61:A5:35:C0:D2:1E:F4:FE:DC:11:00
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018D2A8A7174D5E48CDEA415AB9EFBF10F08
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JcukM0TzPuR7YaU1wNIe9P7cEQA.roa
Signing time:             Sun 21 Jan 2024 05:42:12 +0000
ROA not before:           Sun 21 Jan 2024 05:42:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215751
IP address blocks:        2a10:cc40:cc40::/48 maxlen: 48
                          2a10:cc40:cc41::/48 maxlen: 48
                          2a10:cc40:cc42::/48 maxlen: 48
                          2a10:cc40:cc46::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 04:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:2a:8a:71:74:d5:e4:8c:de:a4:15:ab:9e:fb:f1:0f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 21 05:42:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=25cba43344f33ee47b61a535c0d21ef4fedc1100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:4d:63:22:f9:58:25:77:8a:8e:a4:47:90:
                    9f:eb:a1:08:73:fb:84:40:34:03:d5:26:92:57:28:
                    98:77:dd:c9:2d:8c:55:2b:89:0b:84:d2:52:13:55:
                    90:59:5c:be:2b:c8:60:79:dd:ac:a5:21:fd:a1:aa:
                    d8:81:5e:52:a9:7b:f8:f2:d0:83:0b:73:33:1c:65:
                    5a:0c:7a:00:59:a7:ff:ce:37:d2:5e:67:7a:af:e8:
                    ab:1d:61:36:28:60:5a:39:fb:3b:3c:bf:f4:17:fc:
                    94:ec:2b:b4:db:d7:f7:e4:28:6f:a0:73:ab:1e:5d:
                    11:27:30:67:c0:3d:e8:d1:87:87:25:21:57:97:88:
                    84:84:65:23:c5:a8:66:f6:f4:52:cb:eb:0c:8d:2d:
                    e6:6b:ee:ce:30:c1:5b:4d:e9:e7:fd:66:19:4e:32:
                    cb:51:cf:21:8e:91:99:c8:59:0d:aa:87:56:91:0b:
                    d0:da:79:e3:96:ae:67:53:2b:5e:e2:08:27:44:9d:
                    80:45:5b:2a:6f:07:c7:af:87:26:46:aa:5a:9c:cc:
                    85:66:a9:04:82:8b:df:c2:dd:6a:ff:3c:d1:5a:8b:
                    6c:8e:9c:a5:fd:80:42:b3:73:ad:df:36:04:da:0e:
                    34:83:a3:81:43:10:79:f0:11:c4:25:b4:31:ef:6c:
                    3d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CB:A4:33:44:F3:3E:E4:7B:61:A5:35:C0:D2:1E:F4:FE:DC:11:00
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JcukM0TzPuR7YaU1wNIe9P7cEQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:cc40::-2a10:cc40:cc42:ffff:ffff:ffff:ffff:ffff
                  2a10:cc40:cc46::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:20:d9:1e:27:5c:d9:f5:49:b5:6e:38:45:db:14:cc:84:46:
         0c:d0:7e:28:4b:51:ae:b2:9e:1e:08:71:8f:f6:23:5d:7a:b4:
         48:5f:9a:a7:65:50:57:6b:11:1d:69:0e:9d:85:27:8d:73:48:
         8a:6d:f4:ca:67:18:44:28:64:5f:0e:07:65:ed:24:c4:1f:65:
         78:ef:8b:7c:bc:cd:1b:13:16:f2:4e:3d:b2:77:24:5c:36:f3:
         49:1e:3e:da:c8:12:d9:7f:80:4e:6a:4a:00:ed:ad:75:d6:bf:
         08:26:c4:b5:04:8c:93:1a:c2:d8:d5:15:38:12:95:6d:ee:18:
         f8:dd:bd:ab:f6:88:c8:9e:f7:b7:01:39:0c:d6:13:50:72:be:
         0c:c2:4d:3f:a0:c9:48:56:21:d1:3f:7c:58:90:05:88:fc:9a:
         10:27:21:0a:ea:b6:73:e9:3c:5e:ae:27:fa:d7:73:68:97:69:
         68:9f:7a:68:94:b0:e5:a3:87:ae:49:f4:45:12:aa:cf:ae:65:
         c3:72:d4:f5:fe:48:cf:e3:3e:19:96:53:3a:03:dd:da:82:75:
         75:b0:62:0d:19:ce:e9:af:9d:3b:e4:b5:7c:93:4f:45:b9:d9:
         90:66:94:cc:91:55:ae:a4:f9:e4:16:1f:ab:25:89:36:ff:e9:
         5c:fd:83:e6
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAY0qinF01eSM3qQVq5778Q8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTIxMDU0MjEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWNiYTQzMzQ0ZjMzZWU0N2I2MWE1MzVjMGQyMWVmNGZlZGMxMTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTlNYyL5WCV3io6kR5Cf66EIc/uE
QDQD1SaSVyiYd93JLYxVK4kLhNJSE1WQWVy+K8hged2spSH9oarYgV5SqXv48tCD
C3MzHGVaDHoAWaf/zjfSXmd6r+irHWE2KGBaOfs7PL/0F/yU7Cu029f35ChvoHOr
Hl0RJzBnwD3o0YeHJSFXl4iEhGUjxahm9vRSy+sMjS3ma+7OMMFbTenn/WYZTjLL
Uc8hjpGZyFkNqodWkQvQ2nnjlq5nUyte4ggnRJ2ARVsqbwfHr4cmRqpanMyFZqkE
govfwt1q/zzRWotsjpyl/YBCs3Ot3zYE2g40g6OBQxB58BHEJbQx72w9SQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFCXLpDNE8z7ke2GlNcDSHvT+3BEAMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSmN1a00wVHpQdVI3WWFVMXdOSWU5UDdjRVFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwYqEMxA
zEADBwAqEMxAzEIDBwAqEMxAzEYwDQYJKoZIhvcNAQELBQADggEBALUg2R4nXNn1
SbVuOEXbFMyERgzQfihLUa6ynh4IcY/2I116tEhfmqdlUFdrER1pDp2FJ41zSIpt
9MpnGEQoZF8OB2XtJMQfZXjvi3y8zRsTFvJOPbJ3JFw280kePtrIEtl/gE5qSgDt
rXXWvwgmxLUEjJMawtjVFTgSlW3uGPjdvav2iMie97cBOQzWE1ByvgzCTT+gyUhW
IdE/fFiQBYj8mhAnIQrqtnPpPF6uJ/rXc2iXaWifemiUsOWjh65J9EUSqs+uZcNy
1PX+SM/jPhmWUzoD3dqCdXWwYg0ZzumvnTvktXyTT0W52ZBmlMyRVa6k+eQWH6sl
iTb/6Vz9g+Y=
-----END CERTIFICATE-----