Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MhfqeNnZqbMCQ_Slu7UBN9Yedh4.roa
File:                     MhfqeNnZqbMCQ_Slu7UBN9Yedh4.roa (raw, json)
Hash identifier:          7s4Mkb8Kwq2uc6yJUlVtMcGM6rGZVU1RgTjCZ/1MiuU=
Subject key identifier:   32:17:EA:78:D9:D9:A9:B3:02:43:F4:A5:BB:B5:01:37:D6:1E:76:1E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E82A71155DEBFD45B595AE9B78D11E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MhfqeNnZqbMCQ_Slu7UBN9Yedh4.roa
Signing time:             Mon 02 Jan 2023 05:15:41 +0000
ROA not before:           Mon 02 Jan 2023 05:15:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213316
IP address blocks:        2a10:2f01:240::/45 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:2a:71:15:5d:eb:fd:45:b5:95:ae:9b:78:d1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3217ea78d9d9a9b30243f4a5bbb50137d61e761e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ad:28:f8:8f:91:0f:e7:69:d1:1e:66:61:85:
                    5d:6b:76:68:b9:38:23:62:15:d5:44:19:6c:6a:b1:
                    8e:ea:c1:72:a4:ae:e2:7e:b8:a3:54:0a:7e:15:87:
                    67:9e:a6:c2:4a:c6:f1:63:43:81:bf:b7:15:32:cf:
                    a4:22:b8:22:e2:a8:f3:21:a9:c6:50:b7:3e:d9:02:
                    f9:15:b1:b4:cc:35:f0:74:a8:9d:32:09:ac:e2:b5:
                    05:8a:43:4d:dd:c2:9c:8e:d0:2a:4c:d9:59:8e:ad:
                    01:49:6b:cf:67:31:bc:c8:c1:66:80:9c:a6:22:74:
                    b8:bc:54:ca:89:6f:30:ae:c1:57:47:89:c5:f6:d0:
                    e4:36:13:ec:8f:67:25:00:8d:e8:56:f1:60:92:1d:
                    e9:3e:ee:a9:75:07:94:c1:3b:bc:66:31:77:13:5c:
                    73:ec:52:15:48:df:86:1f:20:58:30:3c:84:9b:fa:
                    97:6d:e5:f1:65:13:ce:87:66:21:89:0f:ea:2c:11:
                    0e:de:68:a2:8c:e7:39:55:ab:f7:ac:72:fa:73:cc:
                    4a:09:6a:15:40:6b:1a:21:fe:d4:d2:80:de:da:46:
                    d7:0a:8f:43:56:9a:b8:32:81:b3:77:87:8c:bd:cc:
                    02:99:96:9c:1d:7f:39:d1:f9:c7:be:d0:7b:98:e4:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:17:EA:78:D9:D9:A9:B3:02:43:F4:A5:BB:B5:01:37:D6:1E:76:1E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MhfqeNnZqbMCQ_Slu7UBN9Yedh4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f01:240::/45

    Signature Algorithm: sha256WithRSAEncryption
         43:ec:74:e7:22:98:d4:88:2c:bb:46:62:4b:da:27:34:43:47:
         da:04:46:d2:06:d8:de:25:2a:6d:cb:7e:fa:ef:4d:81:9f:6b:
         2d:98:46:ef:a1:44:ae:51:50:5e:54:f6:29:da:20:0a:3d:89:
         9c:c6:95:0d:40:87:86:7b:d0:71:e2:39:54:70:5f:04:d4:c4:
         2f:98:02:95:c6:19:4f:ac:5e:bb:fd:d7:7f:ad:ed:bc:f5:c5:
         33:0d:f3:8b:03:d8:bd:29:82:78:e8:1a:fd:ce:3a:db:07:d0:
         7b:68:39:25:98:d6:f0:47:7c:57:e9:ab:cf:4d:24:ba:df:f0:
         e7:b0:f9:e3:16:5d:92:d2:e7:a6:67:a5:4a:31:61:bb:93:5d:
         ea:b1:b8:aa:75:0b:26:ca:27:82:6b:05:21:0e:76:cd:6a:99:
         53:05:23:89:cf:37:c5:2e:08:2a:a5:51:f9:29:de:75:ed:33:
         03:b5:e6:a9:bc:23:84:71:ad:d8:a8:db:cd:32:96:f5:4a:35:
         f0:f0:f5:50:84:f0:1c:6c:98:c3:3a:2b:d2:48:61:3b:21:f2:
         91:fb:48:ed:42:af:05:ec:4f:62:c0:c2:9c:c6:21:16:53:56:
         b5:fb:84:9d:ca:11:34:4e:ad:c6:59:44:60:14:f7:d9:d0:26:
         d8:25:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----