Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vk4HEwsIpxXrNKDM_0c2vkaLFrM.roa
File:                     Vk4HEwsIpxXrNKDM_0c2vkaLFrM.roa (raw, json)
Hash identifier:          N1fXjkf8J2MCHkIpEEmoEcJAYsloB9sMYjJj+K7f4zY=
Subject key identifier:   56:4E:07:13:0B:08:A7:15:EB:34:A0:CC:FF:47:36:BE:46:8B:16:B3
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185DE40B46F957AF2F7627882CC9E2E3ACD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vk4HEwsIpxXrNKDM_0c2vkaLFrM.roa
Signing time:             Mon 23 Jan 2023 10:51:00 +0000
ROA not before:           Mon 23 Jan 2023 10:51:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212227
IP address blocks:        2a10:2f00:15e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:40:b4:6f:95:7a:f2:f7:62:78:82:cc:9e:2e:3a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 23 10:51:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=564e07130b08a715eb34a0ccff4736be468b16b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:c4:9f:cc:6c:c6:c8:bb:95:80:13:48:c0:
                    b3:2c:8e:25:bf:5e:de:2c:fd:82:2a:a3:22:fb:0d:
                    28:ca:34:f3:ca:2b:66:61:c3:90:24:19:06:f1:67:
                    76:73:54:e6:ca:df:ed:29:0c:2a:61:a6:3a:c0:f7:
                    a4:fe:95:f8:29:d6:32:b6:b6:28:02:f4:d4:22:46:
                    46:f9:4c:d3:73:a1:d5:ca:2e:91:3e:c8:4f:2b:d7:
                    86:8b:9c:ff:57:83:63:43:44:1c:dd:f1:75:00:8c:
                    7a:68:6f:29:c4:ee:f1:40:7b:b1:45:a5:14:da:2a:
                    4c:8a:c3:54:0c:0c:8b:82:20:dc:cc:59:73:54:d9:
                    5b:d5:59:79:b6:a5:b6:fb:9a:16:32:05:fb:76:fa:
                    bc:1f:16:46:f9:ad:b2:69:f7:45:37:72:4c:84:bd:
                    61:bf:3a:8b:87:fa:a6:c3:91:40:4a:51:b4:07:15:
                    80:36:37:55:ce:1d:c7:f3:0d:27:39:12:ba:00:a9:
                    b4:15:e3:1a:7f:08:2a:f3:4c:f5:0f:e3:8b:8e:f2:
                    2e:46:da:69:f4:22:3b:33:dc:81:33:4a:17:16:f5:
                    7a:bd:dd:d5:d4:6c:4c:63:2b:ed:f2:a4:ab:5c:d7:
                    42:ad:48:c3:4f:43:28:77:9f:59:d7:9f:29:76:fb:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4E:07:13:0B:08:A7:15:EB:34:A0:CC:FF:47:36:BE:46:8B:16:B3
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vk4HEwsIpxXrNKDM_0c2vkaLFrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:15e::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:d1:88:4c:9f:a3:99:bd:81:94:1e:f0:d9:34:2b:71:c1:70:
         c2:91:0a:ed:f2:ab:d7:f6:3a:d9:c0:2a:dc:3a:ab:e8:23:f0:
         04:92:da:f2:d0:4f:37:b9:4a:bc:a1:c2:ea:c0:86:22:79:79:
         aa:14:a9:9f:77:84:ea:bc:36:88:5a:34:7b:f1:31:be:9a:9a:
         7d:fe:d2:07:39:e7:59:67:08:84:2c:db:1d:b8:08:4e:af:95:
         79:65:61:7b:ca:41:a4:97:b4:3c:5f:66:cb:3c:90:b3:71:d0:
         6a:11:66:36:16:a6:78:47:e5:d6:7d:6f:9f:4a:b6:b0:b0:6c:
         14:42:4e:02:f9:a7:03:ba:d1:a0:e5:2f:49:d6:a7:89:b8:5d:
         ef:36:d9:ed:6d:ca:61:4c:02:42:92:2e:a6:16:31:6c:fe:d9:
         3a:e5:87:50:82:9e:59:c2:1c:3b:43:de:57:74:22:41:d5:fa:
         45:ea:da:13:63:98:ee:8d:fc:27:64:15:7f:76:b6:b8:a2:d4:
         f8:e7:09:09:7e:ee:02:13:8e:1d:1b:5c:fa:ef:d9:4f:34:7a:
         17:8d:7f:8d:fe:f4:96:e4:d0:bf:51:54:ad:11:eb:22:2a:0e:
         db:ce:8b:a3:bb:ce:0a:8c:a4:2b:88:a2:22:b7:9f:72:c3:c3:
         ef:31:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----