Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LN9JcveotKfYmGxU3jSK4MjJTxw.roa
File:                     LN9JcveotKfYmGxU3jSK4MjJTxw.roa (raw, json)
Hash identifier:          l7JwoYa80SVyTPZXPNxpAXFpaTBJwnwveMFAGg6lQJM=
Subject key identifier:   2C:DF:49:72:F7:A8:B4:A7:D8:98:6C:54:DE:34:8A:E0:C8:C9:4F:1C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018651A464C42B7F1700BD1C7211F57B80E1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LN9JcveotKfYmGxU3jSK4MjJTxw.roa
Signing time:             Tue 14 Feb 2023 20:36:13 +0000
ROA not before:           Tue 14 Feb 2023 20:36:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208454
IP address blocks:        2a10:cc44:1d0::/44 maxlen: 48
                          2a10:2f00:140::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:51:a4:64:c4:2b:7f:17:00:bd:1c:72:11:f5:7b:80:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 14 20:36:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2cdf4972f7a8b4a7d8986c54de348ae0c8c94f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:d1:1e:4e:2a:34:da:34:ac:fa:3f:fb:b5:
                    66:25:98:39:42:70:50:8a:43:b5:81:83:95:aa:6a:
                    bb:7f:50:5e:ee:2c:e7:01:8c:b2:d2:d8:9c:96:3c:
                    20:db:c0:ae:5f:c1:ed:c5:a7:30:26:92:e0:20:1d:
                    64:81:0c:1c:c3:d6:f4:f3:82:37:e9:89:ec:cb:34:
                    9c:6e:cb:f9:ec:e2:5e:4f:44:c6:a4:11:89:d9:d0:
                    fb:1e:8f:2d:6e:fa:b4:65:ba:cb:2c:49:8a:06:9a:
                    b7:73:da:a4:f4:e1:da:42:6f:e4:01:58:52:35:18:
                    1b:e2:fb:93:92:69:a6:e3:7e:5c:77:68:fa:8b:1d:
                    3e:58:c5:ed:5c:a7:2d:82:0c:b9:99:a7:1f:1b:b7:
                    35:6d:f6:09:4b:aa:e1:e6:0c:ba:a4:e5:6e:f4:3e:
                    16:c9:a0:c7:cd:db:fe:ff:db:ba:4e:75:b9:86:e0:
                    ce:b2:64:06:d5:1b:74:2d:13:f4:e1:e4:28:4f:85:
                    a8:e5:5e:92:f0:6f:b1:26:3b:c1:13:b9:6f:f3:10:
                    d2:db:c7:0d:9f:fe:64:37:bf:2e:17:3a:39:fd:ba:
                    f2:c4:6b:b9:cf:2b:7c:33:96:a2:8d:51:5f:97:bf:
                    69:42:b4:3b:b6:44:a8:05:fe:ce:c7:b1:ed:1a:91:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DF:49:72:F7:A8:B4:A7:D8:98:6C:54:DE:34:8A:E0:C8:C9:4F:1C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LN9JcveotKfYmGxU3jSK4MjJTxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:140::/48
                  2a10:cc44:1d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:59:53:92:01:6a:34:3b:46:e6:64:1a:c1:fd:87:b5:1b:89:
         5b:78:a3:38:1e:01:c1:76:7c:04:65:19:13:1c:87:70:3e:fe:
         56:73:6c:c6:2f:ff:22:6d:7c:3d:28:c6:2e:53:2b:f1:bf:4d:
         cd:1a:44:de:d1:44:d3:42:e3:1c:cc:de:4e:5b:e3:be:0c:b3:
         97:81:3e:5e:a9:71:dd:06:e2:a6:f8:4d:d3:f6:5e:e2:29:ae:
         b7:d0:42:0b:f3:fd:23:07:fc:ed:49:7e:f7:db:a0:c3:06:ca:
         9d:c6:8e:bf:5c:ae:d3:af:30:04:56:01:ec:d4:f0:f3:5a:7b:
         77:28:2a:3c:0d:fb:df:b3:dc:25:a3:44:7b:0d:fa:e3:d3:a5:
         95:6a:09:6e:69:29:82:8b:6f:8e:24:2a:26:bb:ee:56:37:fa:
         b9:98:a2:52:92:37:3c:33:76:6f:ee:37:bb:1e:9e:6e:94:bc:
         a7:e0:d1:4e:ec:4e:70:52:46:ce:77:a4:96:00:31:34:7f:25:
         97:10:7d:50:d6:0a:3b:6d:ce:df:98:fd:ad:db:98:1f:fd:c6:
         6e:cc:ff:03:d0:5d:33:81:3a:83:1d:ca:5b:a2:3c:a2:ca:eb:
         ce:89:85:d6:45:88:34:24:89:64:9d:cc:11:05:bb:87:8f:de:
         82:b5:b1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----