Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Rjh7zv6fOe5CDz1XmH0ddBs-3RE.roa
File:                     Rjh7zv6fOe5CDz1XmH0ddBs-3RE.roa (raw, json)
Hash identifier:          abfJDDnwBTRVkWBlm9o3kEvgqiKHzpQi+3I0eZUFus8=
Subject key identifier:   46:38:7B:CE:FE:9F:39:EE:42:0F:3D:57:98:7D:1D:74:1B:3E:DD:11
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185DE40AA8FC83A9BF1A6D2DEB175A598BC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Rjh7zv6fOe5CDz1XmH0ddBs-3RE.roa
Signing time:             Mon 23 Jan 2023 10:50:57 +0000
ROA not before:           Mon 23 Jan 2023 10:50:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59922
IP address blocks:        2a10:cc44:112::/48 maxlen: 48
                          2a10:cc44:110::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:40:aa:8f:c8:3a:9b:f1:a6:d2:de:b1:75:a5:98:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 23 10:50:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46387bcefe9f39ee420f3d57987d1d741b3edd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4e:f7:8e:48:51:cb:2e:69:bc:c3:f1:15:c0:
                    ef:b2:38:7d:a9:8e:33:9d:f4:d5:0b:8c:7c:08:75:
                    7b:fd:6e:97:41:5c:de:72:d0:9e:6d:7f:56:6e:1a:
                    e3:e4:d8:e4:d5:bf:a2:0d:0f:a4:b2:28:bc:6e:bd:
                    e3:b6:2b:24:0f:54:44:b7:a2:16:d1:c0:d6:99:06:
                    09:47:60:3e:6c:4a:34:06:59:1e:21:bb:94:a5:b5:
                    37:27:77:d6:b7:43:61:38:58:4f:04:16:c0:05:89:
                    6e:ee:34:04:51:c5:51:b8:f5:d9:08:57:8d:29:0a:
                    d1:a5:40:f2:0d:ee:55:d8:08:0f:f3:d3:64:bd:61:
                    54:20:ab:f0:bb:15:05:97:a5:3e:30:c3:ae:a3:73:
                    26:01:9b:c2:07:fe:cf:8d:f9:3f:1c:8c:29:60:87:
                    cb:a1:e4:5b:b3:38:82:af:44:22:78:f6:ce:e5:57:
                    08:b6:26:05:10:90:4d:2c:da:0d:25:ea:2a:23:3d:
                    38:f5:8c:5f:85:73:d0:5e:5c:dd:9a:bd:c9:9d:05:
                    c4:fc:3c:8f:91:da:9b:a7:2f:26:e3:39:72:47:28:
                    4b:4c:49:fd:69:9d:a8:6b:7d:1d:a6:8a:89:44:16:
                    b2:cf:c7:0e:67:f8:53:4e:44:41:b5:cd:e1:83:bf:
                    92:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:38:7B:CE:FE:9F:39:EE:42:0F:3D:57:98:7D:1D:74:1B:3E:DD:11
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Rjh7zv6fOe5CDz1XmH0ddBs-3RE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc44:110::/48
                  2a10:cc44:112::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:aa:aa:10:38:93:61:76:d0:ad:d3:dc:70:c4:c6:64:82:88:
         a4:c4:e5:77:b0:f9:ec:b0:05:9f:93:73:1d:e4:6d:03:e1:c4:
         13:ca:29:59:47:28:5a:ad:a0:6e:79:aa:18:22:d0:7a:3d:44:
         b8:0d:72:99:8a:68:be:4f:09:fc:ce:54:66:17:fd:45:ae:29:
         e1:21:dd:7b:40:e1:b1:92:3b:44:14:6b:c0:9e:28:51:76:72:
         ca:2e:d8:93:62:a2:62:47:98:c2:65:5a:70:57:1d:69:95:a6:
         fe:df:66:ad:15:49:51:37:89:78:11:75:00:a6:92:53:a7:a5:
         5a:34:d3:2f:7a:66:50:03:15:46:08:1b:00:f9:13:3e:2b:35:
         4c:4e:0f:19:9b:46:0b:b6:b4:e1:9c:69:83:d7:e8:07:99:3a:
         61:cc:e2:4c:a6:f7:f8:df:44:0b:02:e3:5d:03:85:fc:72:79:
         cc:33:0d:0c:76:9d:0e:ac:79:d5:66:be:a5:35:76:83:d6:1f:
         a4:80:f4:e9:3d:21:2c:da:eb:60:73:58:3b:5a:39:0c:c6:e6:
         d8:77:85:7d:a2:d4:9b:b7:30:6a:0c:b3:57:73:9b:a4:8e:c3:
         9a:0c:47:9b:82:40:e8:70:4e:6b:b1:b2:99:20:da:d6:90:c9:
         2b:b8:55:13
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYXeQKqPyDqb8abS3rF1pZi8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTIzMTA1MDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjM4N2JjZWZlOWYzOWVlNDIwZjNkNTc5ODdkMWQ3NDFiM2VkZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k73jkhRyy5pvMPxFcDvsjh9qY4z
nfTVC4x8CHV7/W6XQVzectCebX9Wbhrj5Njk1b+iDQ+ksii8br3jtiskD1REt6IW
0cDWmQYJR2A+bEo0BlkeIbuUpbU3J3fWt0NhOFhPBBbABYlu7jQEUcVRuPXZCFeN
KQrRpUDyDe5V2AgP89NkvWFUIKvwuxUFl6U+MMOuo3MmAZvCB/7Pjfk/HIwpYIfL
oeRbsziCr0QiePbO5VcItiYFEJBNLNoNJeoqIz049YxfhXPQXlzdmr3JnQXE/DyP
kdqbpy8m4zlyRyhLTEn9aZ2oa30dpoqJRBayz8cOZ/hTTkRBtc3hg7+S5wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEY4e87+nznuQg89V5h9HXQbPt0RMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUmpoN3p2NmZPZTVDRHoxWG1IMGRkQnMtM1JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhDMRAEQ
AwcAKhDMRAESMA0GCSqGSIb3DQEBCwUAA4IBAQDCqqoQOJNhdtCt09xwxMZkgoik
xOV3sPnssAWfk3Md5G0D4cQTyilZRyharaBueaoYItB6PUS4DXKZimi+Twn8zlRm
F/1FrinhId17QOGxkjtEFGvAnihRdnLKLtiTYqJiR5jCZVpwVx1plab+32atFUlR
N4l4EXUAppJTp6VaNNMvemZQAxVGCBsA+RM+KzVMTg8Zm0YLtrThnGmD1+gHmTph
zOJMpvf430QLAuNdA4X8cnnMMw0Mdp0OrHnVZr6lNXaD1h+kgPTpPSEs2utgc1g7
WjkMxubYd4V9otSbtzBqDLNXc5ukjsOaDEebgkDocE5rsbKZINrWkMkruFUT
-----END CERTIFICATE-----