Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SMiSC13sQn9_pHdgqQ152GzCJKc.roa
File:                     SMiSC13sQn9_pHdgqQ152GzCJKc.roa (raw, json)
Hash identifier:          I3K17FK3wvbS4mcLMQU07RBYFEOktf0QaBTy/bOdIWg=
Subject key identifier:   48:C8:92:0B:5D:EC:42:7F:7F:A4:77:60:A9:0D:79:D8:6C:C2:24:A7
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7D21A939B9CCD7CDB0DB380F25454
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SMiSC13sQn9_pHdgqQ152GzCJKc.roa
Signing time:             Mon 02 Jan 2023 05:15:18 +0000
ROA not before:           Mon 02 Jan 2023 05:15:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207941
IP address blocks:        2a10:cc44:160::/44 maxlen: 48
                          2a10:cc40:170::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:d2:1a:93:9b:9c:cd:7c:db:0d:b3:80:f2:54:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=48c8920b5dec427f7fa47760a90d79d86cc224a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:81:93:d9:69:05:9c:f3:a6:22:e4:31:5c:
                    3c:85:f0:a0:b2:2a:eb:b3:3d:ea:0a:f0:2c:59:f7:
                    c3:d3:3f:30:7c:35:3d:59:54:1b:10:b2:28:e1:91:
                    83:24:ea:ca:51:58:78:3a:0f:a0:2e:01:15:28:6f:
                    02:a7:32:db:f4:41:32:56:98:33:5e:3d:2d:09:b5:
                    5d:e0:4a:df:98:a9:ad:1c:59:7a:24:3c:59:42:f3:
                    47:7a:86:57:de:e4:a0:e7:c4:6f:98:84:c9:58:bc:
                    1b:f3:e3:24:45:ce:19:a4:68:80:58:c9:32:b2:e2:
                    95:43:06:6e:0f:2d:3e:0c:1a:96:fd:ac:7e:c9:24:
                    5e:ff:6e:8e:7f:80:3b:ca:3e:49:32:69:a8:09:46:
                    6c:76:ac:c7:de:db:9d:e8:e9:ec:c1:a7:de:01:0f:
                    86:53:01:cd:22:62:a2:bc:cb:2b:17:f8:41:5f:0c:
                    99:f3:db:18:23:21:d7:ef:da:a7:f6:d5:fa:b7:27:
                    4d:cb:24:3d:03:04:16:ff:72:25:f4:24:59:2c:2f:
                    75:9c:d4:16:13:e5:d6:b4:38:c9:9f:e9:74:c0:6e:
                    c7:c0:c6:57:c8:34:c2:bf:1d:9b:d7:c1:02:a8:41:
                    43:83:05:60:78:f1:d6:4c:a9:b2:96:6a:c1:f5:c1:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C8:92:0B:5D:EC:42:7F:7F:A4:77:60:A9:0D:79:D8:6C:C2:24:A7
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SMiSC13sQn9_pHdgqQ152GzCJKc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:170::/44
                  2a10:cc44:160::/44

    Signature Algorithm: sha256WithRSAEncryption
         a0:ea:76:cb:62:49:ac:86:75:2e:10:06:40:9d:d4:f8:bc:3d:
         bc:1b:fe:f9:78:3d:e4:2a:79:f1:07:15:98:89:b5:75:41:e1:
         4e:19:43:a9:43:13:07:ec:8b:18:18:49:2b:6f:a6:db:a5:57:
         1d:44:29:8d:72:49:8c:46:9c:e4:f8:28:dd:f0:7b:9e:ab:d1:
         95:5d:53:44:8f:4a:fd:85:f3:13:e8:03:ad:4b:90:e5:b9:ae:
         5f:78:07:1b:7d:32:5d:1a:1a:51:29:02:16:1e:c3:8b:0f:83:
         ea:85:d0:a6:af:2a:2a:0e:28:17:e8:b7:7d:73:4f:4a:11:e6:
         a8:65:82:f8:cc:23:0d:6d:18:5a:06:2d:b5:93:27:20:42:d2:
         88:22:cd:e2:4e:62:c2:bf:da:d5:49:d4:bf:13:d7:14:51:96:
         1a:35:7a:8c:13:c1:38:4c:16:c4:61:74:16:8e:5d:49:9a:e4:
         7d:7d:0c:eb:76:c5:af:12:ed:d5:24:6e:bc:14:4f:c8:11:95:
         45:1f:eb:9c:8d:d4:b7:33:97:70:d4:81:b3:79:b0:91:1f:eb:
         c8:0b:4b:58:47:ef:22:86:da:20:65:e2:94:20:f9:34:4f:8b:
         18:df:93:f1:eb:75:01:65:6d:0f:78:80:02:bd:9b:4c:05:d5:
         88:4b:8e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----