Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VyVVrYmP6J8RULyll0jW7HqY_wY.roa
File:                     VyVVrYmP6J8RULyll0jW7HqY_wY.roa (raw, json)
Hash identifier:          Ea0sNEqSQ9cSo0qWJ97eTiQnZMIHRUwjHEB0yltb8vk=
Subject key identifier:   57:25:55:AD:89:8F:E8:9F:11:50:BC:A5:97:48:D6:EC:7A:98:FF:06
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018B4239814EE7670D8A1E10CFEDDFD3258B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VyVVrYmP6J8RULyll0jW7HqY_wY.roa
Signing time:             Wed 18 Oct 2023 09:59:06 +0000
ROA not before:           Wed 18 Oct 2023 09:59:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216233
IP address blocks:        2a10:ccc1:ccc0::/48 maxlen: 48
                          2a10:ccc1:ccc1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:42:39:81:4e:e7:67:0d:8a:1e:10:cf:ed:df:d3:25:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 18 09:59:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=572555ad898fe89f1150bca59748d6ec7a98ff06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:60:bf:94:c8:7f:e3:03:81:dc:fa:36:a6:
                    f6:06:fc:56:e7:8e:94:8d:df:ab:47:2b:47:6c:a0:
                    f1:40:94:9d:33:4b:e6:b6:30:43:9e:a9:d4:3f:c7:
                    1e:df:2c:3c:24:14:52:38:c0:55:f0:06:c8:80:73:
                    e9:db:e8:26:4e:5a:af:f0:0f:7a:64:e5:35:9b:71:
                    67:38:30:e4:79:9a:94:2a:6a:ef:86:a1:69:e8:18:
                    52:22:df:d0:22:0d:a4:a7:8a:e7:42:05:5a:75:b7:
                    5e:33:04:4d:76:4f:29:bb:d3:88:a4:9d:31:b5:84:
                    31:dd:85:4c:5f:21:d0:bf:cf:0e:be:da:b1:39:e7:
                    25:80:70:7c:05:30:47:bd:27:cc:3f:d4:10:68:ed:
                    5e:04:82:3f:7c:e3:67:2f:32:ac:f0:4f:9b:06:77:
                    2c:4f:63:94:3f:16:dc:b9:30:62:23:1d:32:8f:3c:
                    88:00:74:75:81:a9:c1:20:d0:da:d5:74:4d:cc:96:
                    ce:69:57:31:73:e2:ce:a5:3f:19:53:32:d8:8d:ed:
                    d1:4b:7c:b2:af:3f:a9:0c:de:04:3b:88:e6:7d:b9:
                    49:cb:50:56:05:c0:a8:64:ca:5f:c0:5c:0b:25:fe:
                    f5:84:52:a1:5a:70:94:16:46:6b:42:69:77:76:5a:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:25:55:AD:89:8F:E8:9F:11:50:BC:A5:97:48:D6:EC:7A:98:FF:06
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VyVVrYmP6J8RULyll0jW7HqY_wY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:ccc1:ccc0::/47

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:3b:b5:55:89:4e:fa:ac:37:0c:95:e4:c8:81:7e:f3:d3:
         a5:6b:bf:14:2c:91:79:c9:1b:1c:f9:1a:b7:4d:2d:48:a7:cf:
         5c:09:23:5d:b8:fc:c7:9c:fb:18:d0:6b:34:5c:82:d0:c9:32:
         d6:9e:a8:55:93:78:26:7a:85:99:37:47:fc:5a:85:d6:d4:f8:
         18:18:e7:90:7a:bb:33:88:1b:8d:b6:6a:8d:0c:e0:54:36:8a:
         82:05:b7:1c:af:56:da:e5:59:f3:56:04:69:78:fc:1f:8c:19:
         36:41:f9:aa:fb:93:d2:60:d3:cb:75:7f:08:da:68:9d:61:a6:
         11:3b:89:fc:bd:1a:48:93:b8:b1:3c:d5:1e:3b:60:c3:de:05:
         ac:e2:c0:f3:71:da:43:3b:09:64:71:53:6e:40:fd:7a:cd:94:
         a5:29:5a:c6:ad:a4:ff:07:49:83:be:5e:95:21:e9:9a:d3:a0:
         0a:a8:ab:c3:78:c0:a8:1b:1a:16:86:65:88:8e:77:6b:76:00:
         47:97:11:88:83:86:63:1a:85:1e:1e:63:4b:76:d9:fa:f8:03:
         fd:9c:1c:54:d3:6b:ed:e6:52:53:2c:51:d6:0a:88:c3:4d:9e:
         23:74:48:2d:11:cf:f7:04:a4:5c:ec:b8:0e:89:84:0a:86:85:
         92:fb:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----