Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SQnSL5d3xzGUdUjD2Fxt3FKjL2o.roa
File:                     SQnSL5d3xzGUdUjD2Fxt3FKjL2o.roa (raw, json)
Hash identifier:          vGNY7uvwVmD72f/GhNho4XWdOWRv0Yb95cZykTOYDkY=
Subject key identifier:   49:09:D2:2F:97:77:C7:31:94:75:48:C3:D8:5C:6D:DC:52:A3:2F:6A
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189C18534101F04077DF8E710BD2542B52E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SQnSL5d3xzGUdUjD2Fxt3FKjL2o.roa
Signing time:             Fri 04 Aug 2023 17:07:59 +0000
ROA not before:           Fri 04 Aug 2023 17:07:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211138
IP address blocks:        2a10:cc44:202::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:c1:85:34:10:1f:04:07:7d:f8:e7:10:bd:25:42:b5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  4 17:07:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4909d22f9777c731947548c3d85c6ddc52a32f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:83:5a:23:ec:75:56:ce:ee:2e:73:fd:e9:05:
                    19:dd:ad:54:21:81:4c:20:67:65:67:4a:61:fc:93:
                    6d:a3:f6:69:77:34:1b:80:4b:6e:29:8b:eb:e1:72:
                    09:ad:2e:51:7f:1b:ef:65:0c:0b:6f:bb:4a:57:69:
                    97:bb:05:0e:31:75:36:8f:73:ba:a1:f0:75:d8:68:
                    53:75:24:92:b5:cf:d4:b7:32:09:b6:35:a0:c6:35:
                    e2:07:07:42:19:49:04:19:28:fc:0a:bb:bd:4e:47:
                    0b:84:00:2c:6d:99:ee:a9:58:66:ec:35:91:b7:b8:
                    3a:97:09:c2:ba:40:5f:67:5a:9a:67:48:0a:8d:ab:
                    13:63:d3:3d:0c:46:33:ee:7e:7e:3f:c9:c2:b0:de:
                    5e:93:d9:56:58:be:67:96:13:d2:53:e2:5c:11:aa:
                    25:e5:39:ef:60:92:7d:87:98:73:bc:7b:27:7b:de:
                    19:ab:23:48:74:e4:f8:5d:64:53:5c:ec:53:88:c2:
                    fc:dd:d5:4e:dc:b1:79:f8:71:5c:e2:b0:cc:af:f1:
                    31:4a:59:ae:05:dc:1a:05:3c:20:93:5e:be:b5:8b:
                    c7:6c:46:92:b5:36:6b:6c:2f:f7:51:75:4d:51:5b:
                    e7:0c:a0:78:18:cb:b1:07:e3:6f:ec:ba:75:da:08:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:09:D2:2F:97:77:C7:31:94:75:48:C3:D8:5C:6D:DC:52:A3:2F:6A
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SQnSL5d3xzGUdUjD2Fxt3FKjL2o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc44:202::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:84:ec:d8:64:4b:bd:ae:7b:71:cc:df:e4:5a:7e:dd:54:13:
         b0:6f:f2:3a:ac:0b:38:dd:2d:35:4e:b0:3b:6c:8e:ad:10:4d:
         c4:3e:7f:47:85:8b:6e:d0:10:24:04:23:8d:09:99:99:6d:a7:
         36:a2:6e:e4:a9:0e:74:d0:7f:20:55:b9:90:11:24:d7:1c:f8:
         14:80:8a:fa:f9:6f:64:d0:41:87:16:d1:51:5b:c1:54:3a:e7:
         cf:3c:b0:4b:61:31:43:bf:fd:69:94:81:ba:b1:1b:18:3f:79:
         b4:af:01:48:be:00:58:0a:b7:b7:07:9f:b9:f7:d2:73:55:f0:
         2c:ed:5e:ac:ce:15:c4:05:3e:4b:d5:1f:92:5f:0f:b8:eb:9e:
         d9:ea:7e:6f:57:b3:9c:a4:cb:94:b6:be:e9:96:bb:a2:5e:7c:
         52:26:66:97:29:cd:25:9a:7e:26:93:fb:f4:3d:8b:d2:c1:e7:
         7d:67:fc:cc:43:83:18:4d:6d:c4:88:c6:16:8c:c8:c4:5d:f4:
         3f:78:27:7f:78:ca:77:aa:13:7d:44:e7:14:f1:05:96:43:72:
         9c:6c:b9:a5:62:22:37:0f:07:c9:4f:9e:af:90:7b:ef:ea:82:
         a1:a6:6f:84:c8:fb:0a:f7:19:59:f9:b9:8b:59:fe:23:ca:aa:
         af:42:42:78
-----BEGIN CERTIFICATE-----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