Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R6sLHhDwFzqwVQPEqd06Rx7mpK8.roa
File:                     R6sLHhDwFzqwVQPEqd06Rx7mpK8.roa (raw, json)
Hash identifier:          9LwMIf/OzrslzllfWnARGEmAoQIcyRHazNhWJQaAP74=
Subject key identifier:   47:AB:0B:1E:10:F0:17:3A:B0:55:03:C4:A9:DD:3A:47:1E:E6:A4:AF
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0186FBD77854A40049BE3E11924B526552D3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R6sLHhDwFzqwVQPEqd06Rx7mpK8.roa
Signing time:             Sun 19 Mar 2023 21:47:27 +0000
ROA not before:           Sun 19 Mar 2023 21:47:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200950
IP address blocks:        2a10:cc45:121::/48 maxlen: 48
                          2a10:cc45:126::/48 maxlen: 48
                          2a10:cc45:12f::/48 maxlen: 48
                          2a10:cc45:124::/48 maxlen: 48
                          2a10:cc45:125::/48 maxlen: 48
                          2a10:cc45:122::/48 maxlen: 48
                          2a10:cc45:123::/48 maxlen: 48
                          2a10:cc45:120::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:fb:d7:78:54:a4:00:49:be:3e:11:92:4b:52:65:52:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar 19 21:47:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=47ab0b1e10f0173ab05503c4a9dd3a471ee6a4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:98:fa:e6:db:21:6a:cb:5d:b0:f5:d4:40:
                    1a:de:11:33:43:2f:ba:61:06:e7:e2:db:ed:e1:73:
                    f3:43:4a:97:fe:81:68:ac:34:71:9a:bd:b4:2b:94:
                    58:f1:d1:ad:a5:fc:f7:61:9f:03:15:31:fb:a3:63:
                    f6:9c:94:fd:53:97:b0:c7:9a:70:a9:e1:31:ab:d4:
                    9e:ef:8f:e3:1e:21:12:1c:ff:cc:3f:f0:c3:e6:b5:
                    5b:ce:dd:4b:73:0d:18:ad:f9:e0:be:e8:ed:52:9b:
                    34:e6:d9:56:28:58:31:d2:fb:20:ac:68:db:40:23:
                    e6:b1:2f:94:33:7c:1c:ba:5d:43:63:4c:36:23:ce:
                    55:37:1d:fb:0c:ed:af:9a:8a:db:ec:d5:2f:e5:5f:
                    05:df:3a:a3:9a:af:2d:02:f5:7d:37:0f:c2:26:05:
                    79:13:e5:4d:dc:f6:26:e7:1a:e7:2d:8e:27:be:d7:
                    23:fc:b7:37:a2:4c:11:62:e7:8e:b9:bc:e1:45:0a:
                    1c:0e:a5:7e:3b:8b:65:4d:b4:fd:bd:00:d5:08:00:
                    62:75:49:eb:61:20:47:2c:e7:b4:b0:e0:7d:3f:2f:
                    6b:7d:d7:01:b8:45:fc:94:2d:2a:ab:62:a7:4b:69:
                    9d:24:4e:e9:6c:f0:d1:05:8b:75:0a:a6:c2:3c:f3:
                    53:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AB:0B:1E:10:F0:17:3A:B0:55:03:C4:A9:DD:3A:47:1E:E6:A4:AF
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R6sLHhDwFzqwVQPEqd06Rx7mpK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc45:120::-2a10:cc45:126:ffff:ffff:ffff:ffff:ffff
                  2a10:cc45:12f::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:a0:ae:cd:a0:03:72:fa:2e:46:86:86:e2:f0:3f:7c:0b:8c:
         6a:d0:f9:87:70:34:d7:cc:7e:a6:91:87:6f:52:2e:76:5c:9e:
         81:dd:5e:42:92:b1:8e:68:e7:6a:43:fa:87:40:ec:7d:bf:52:
         9c:e3:e5:a4:2a:20:66:c8:32:16:22:f4:0b:78:74:ae:fb:c7:
         b6:4c:26:e4:57:38:3a:fc:76:06:06:b8:d0:46:b1:18:3c:ad:
         f1:0a:f4:8c:1c:ba:31:3d:d2:e8:3a:0a:06:e7:32:00:00:dc:
         22:17:fe:05:20:23:a8:49:ab:7c:96:30:83:db:18:15:25:cc:
         45:a9:43:0b:ba:db:3a:d8:0c:43:66:47:21:63:ff:d4:d7:04:
         1e:d4:c2:76:cd:da:b5:3c:50:9f:8d:ee:6b:66:0b:45:71:e6:
         9d:26:42:51:82:34:07:05:8b:04:4f:a0:e8:4f:bf:9a:bd:23:
         f0:89:18:6e:77:1f:20:d4:21:1c:b2:74:e0:ab:ce:85:85:88:
         0e:f9:28:dd:a8:9e:49:b3:db:b8:e4:38:9b:01:a5:5b:8c:63:
         db:11:03:2c:a2:70:bd:01:54:f1:fa:a0:90:de:71:2c:6a:c0:
         6a:26:50:d9:73:ec:7e:11:43:6e:9b:f1:43:19:af:d4:d7:4f:
         25:71:6b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----