Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NrKA1Gf63i-cP3ugsZvNxT1pVUk.roa
File:                     NrKA1Gf63i-cP3ugsZvNxT1pVUk.roa (raw, json)
Hash identifier:          cqe0rrGztWOT4mDo8PfEFJQgkLpLS1iMj3r+VIeeHCk=
Subject key identifier:   36:B2:80:D4:67:FA:DE:2F:9C:3F:7B:A0:B1:9B:CD:C5:3D:69:55:49
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018641FA521E391C0E9419C2756F6FA1F87C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NrKA1Gf63i-cP3ugsZvNxT1pVUk.roa
Signing time:             Sat 11 Feb 2023 19:36:09 +0000
ROA not before:           Sat 11 Feb 2023 19:36:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208454
IP address blocks:        2a10:2f00:140::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:41:fa:52:1e:39:1c:0e:94:19:c2:75:6f:6f:a1:f8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 11 19:36:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=36b280d467fade2f9c3f7ba0b19bcdc53d695549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:c0:4c:3b:e4:2a:db:9f:97:b2:ae:8b:7c:
                    53:1e:a9:20:08:db:b5:e3:3d:99:62:fc:90:7c:29:
                    36:35:43:d0:d5:76:42:bd:39:d6:3b:b4:8a:62:3a:
                    47:a3:17:e5:10:09:ff:d1:c4:83:33:70:1f:1e:2c:
                    ef:60:4d:ae:5e:0f:59:f2:a7:76:7b:35:df:5a:66:
                    fe:47:62:e6:9b:1f:0e:7a:4f:b5:05:9b:41:fe:0d:
                    1c:de:fa:95:ae:b6:4d:0c:40:5e:58:b8:15:5a:45:
                    c8:5b:04:9c:e3:a7:4b:1d:2b:53:07:39:85:82:7b:
                    99:2c:68:4d:db:92:f4:36:0b:29:31:b9:cc:d5:d3:
                    b7:87:c6:02:e1:ea:c4:85:0e:57:fb:15:5a:74:30:
                    41:60:95:5f:0f:a6:ba:9a:d9:a3:cd:3c:da:08:db:
                    67:c8:28:c6:4b:ce:95:b7:b7:6f:49:73:1c:fb:c7:
                    11:d7:b8:60:c9:eb:b2:27:c9:0b:55:be:57:d4:06:
                    4c:f6:56:16:63:aa:89:0b:9e:7b:eb:dd:1e:74:53:
                    60:d7:a7:15:02:29:4c:48:87:6b:f6:4a:d1:31:18:
                    28:47:32:c6:eb:63:10:16:c3:d3:ad:34:1c:66:16:
                    12:6b:d3:f8:3d:67:11:01:92:4c:86:7c:76:64:fd:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B2:80:D4:67:FA:DE:2F:9C:3F:7B:A0:B1:9B:CD:C5:3D:69:55:49
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NrKA1Gf63i-cP3ugsZvNxT1pVUk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:140::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:a0:5a:f2:1f:b2:eb:23:de:9a:10:1c:03:8f:42:7c:74:62:
         ce:62:4e:a1:b2:0d:68:33:1c:28:ce:bb:7f:7a:94:18:96:c0:
         5f:59:84:1f:74:fa:6e:34:bd:a0:01:c5:a5:ad:a7:01:a1:12:
         c3:27:3e:cc:94:a0:8f:61:1e:25:de:a8:64:61:b8:e8:c1:04:
         4f:0c:83:ee:38:c8:86:21:53:59:5b:fb:f3:63:7c:34:8c:cd:
         17:97:e3:5a:a9:6e:7f:f2:d0:02:59:13:3b:39:1a:bc:cc:ea:
         4e:f1:a4:1a:50:30:5d:dd:66:d4:b8:d4:4e:91:c7:36:f2:c5:
         44:fe:4b:50:9a:00:31:f8:b5:15:1b:b2:05:f3:e1:1f:7b:12:
         0d:16:04:1d:71:c1:7c:93:2b:b5:79:41:33:5c:94:98:83:53:
         7c:42:09:d6:36:8a:ec:b0:5e:ae:50:47:2a:23:d8:e6:2d:e2:
         9c:b2:16:16:dc:11:03:0a:83:32:85:d8:57:4c:c7:62:57:6c:
         d0:37:23:39:8d:21:4c:ca:48:90:72:f5:04:21:27:7c:03:13:
         19:97:8a:2e:7e:19:d0:92:9b:4e:86:b6:c2:1a:3e:2c:d1:b5:
         6a:47:e7:00:45:db:08:31:76:85:c7:4d:d4:3a:99:90:8b:d0:
         f8:43:0f:4e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYZB+lIeORwOlBnCdW9vofh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMjExMTkzNjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmIyODBkNDY3ZmFkZTJmOWMzZjdiYTBiMTliY2RjNTNkNjk1NTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+nATDvkKtufl7Kui3xTHqkgCNu1
4z2ZYvyQfCk2NUPQ1XZCvTnWO7SKYjpHoxflEAn/0cSDM3AfHizvYE2uXg9Z8qd2
ezXfWmb+R2Lmmx8Oek+1BZtB/g0c3vqVrrZNDEBeWLgVWkXIWwSc46dLHStTBzmF
gnuZLGhN25L0NgspMbnM1dO3h8YC4erEhQ5X+xVadDBBYJVfD6a6mtmjzTzaCNtn
yCjGS86Vt7dvSXMc+8cR17hgyeuyJ8kLVb5X1AZM9lYWY6qJC557690edFNg16cV
AilMSIdr9krRMRgoRzLG62MQFsPTrTQcZhYSa9P4PWcRAZJMhnx2ZP0gYwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDaygNRn+t4vnD97oLGbzcU9aVVJMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTnJLQTFHZjYzaS1jUDN1Z3Nadk54VDFwVlVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAFA
MA0GCSqGSIb3DQEBCwUAA4IBAQDEoFryH7LrI96aEBwDj0J8dGLOYk6hsg1oMxwo
zrt/epQYlsBfWYQfdPpuNL2gAcWlracBoRLDJz7MlKCPYR4l3qhkYbjowQRPDIPu
OMiGIVNZW/vzY3w0jM0Xl+NaqW5/8tACWRM7ORq8zOpO8aQaUDBd3WbUuNROkcc2
8sVE/ktQmgAx+LUVG7IF8+EfexINFgQdccF8kyu1eUEzXJSYg1N8QgnWNorssF6u
UEcqI9jmLeKcshYW3BEDCoMyhdhXTMdiV2zQNyM5jSFMykiQcvUEISd8AxMZl4ou
fhnQkptOhrbCGj4s0bVqR+cARdsIMXaFx03UOpmQi9D4Qw9O
-----END CERTIFICATE-----