Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_D-FLsCfJVCCrjhjyQ0yU2FnNL8.roa
File:                     _D-FLsCfJVCCrjhjyQ0yU2FnNL8.roa (raw, json)
Hash identifier:          Zq6w/NO2LtoyvBsGMkOT0vIsTOCHVtxbxjghdJPj67o=
Subject key identifier:   FC:3F:85:2E:C0:9F:25:50:82:AE:38:63:C9:0D:32:53:61:67:34:BF
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189B87452DD3E9CE4D69A4C0502A1B93C60
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_D-FLsCfJVCCrjhjyQ0yU2FnNL8.roa
Signing time:             Wed 02 Aug 2023 22:52:58 +0000
ROA not before:           Wed 02 Aug 2023 22:52:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     53667
IP address blocks:        2a10:ccc2:9c00::/38 maxlen: 48
                          2a10:ccc3:ccc3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b8:74:52:dd:3e:9c:e4:d6:9a:4c:05:02:a1:b9:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  2 22:52:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc3f852ec09f255082ae3863c90d3253616734bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:63:9d:95:34:8c:0c:ec:41:64:55:ca:7f:
                    c0:84:d1:f7:31:56:44:29:b0:dd:32:1b:7f:ab:5b:
                    79:03:ed:1e:b0:a2:b2:bf:70:20:fa:f0:70:bb:29:
                    53:df:43:6a:d2:e2:ad:0b:26:c3:37:38:90:93:2d:
                    cc:db:ae:d0:5c:02:82:32:ba:59:2e:ab:b0:d1:6a:
                    0d:ee:25:83:a6:11:f5:0b:0d:8b:77:7c:6b:57:c4:
                    d4:10:dc:f8:57:1b:d3:98:c0:6b:cd:db:44:34:1a:
                    0d:7f:d6:6f:8f:76:4f:25:17:89:1f:7a:7b:0f:db:
                    d2:90:66:e8:d5:78:34:21:8f:e9:16:07:16:54:87:
                    c0:8b:d1:42:f6:00:82:a5:e3:ec:8d:bc:a1:82:57:
                    8f:7e:28:fe:25:c8:b7:d5:e3:a0:28:bc:d3:e7:44:
                    c5:e9:11:13:4f:24:a6:5e:34:19:82:a0:61:83:83:
                    a5:ba:70:de:e3:25:b0:a6:cf:cd:95:3d:0e:50:fe:
                    48:e3:21:9e:92:8d:8d:c8:9d:8c:38:fa:29:d7:ab:
                    72:76:b9:d9:38:05:4d:c7:3b:4c:e2:8f:10:5c:69:
                    77:7a:7b:51:1b:65:3d:38:ea:71:8a:d7:69:11:62:
                    db:5f:04:bb:26:ae:cc:0a:b9:6d:67:72:34:76:ae:
                    5d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3F:85:2E:C0:9F:25:50:82:AE:38:63:C9:0D:32:53:61:67:34:BF
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_D-FLsCfJVCCrjhjyQ0yU2FnNL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:ccc2:9c00::/38
                  2a10:ccc3:ccc3::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:83:eb:58:40:02:20:9c:a8:2b:f2:b2:33:6f:5d:98:74:24:
         13:2f:e6:73:3d:67:21:ca:2f:51:c5:30:ce:66:eb:59:bb:27:
         0e:2c:10:d7:37:bc:14:e8:86:f3:3b:2f:8b:61:2e:60:87:0c:
         36:94:8d:af:00:3e:6a:10:c1:36:60:92:1a:49:05:42:e6:fe:
         08:8e:b6:dc:20:69:f1:72:43:88:af:c7:49:a8:61:6d:46:ed:
         e0:95:4c:59:3f:b2:86:58:be:5a:56:9b:3c:7d:c4:b0:25:14:
         d3:b8:11:5f:20:a6:55:c0:88:ca:42:31:cf:1c:32:68:b9:99:
         ea:9a:93:b5:64:09:dd:01:45:9c:de:de:e1:cc:fd:bd:94:76:
         cc:2b:9d:e8:cb:5f:a4:f4:ac:b7:d3:8a:43:2e:b4:c9:b2:3f:
         22:c9:46:99:d4:19:3f:9d:57:14:22:71:8a:84:d3:6d:fa:ff:
         2c:ab:2c:9e:52:93:04:0a:92:6b:72:d0:df:fe:ae:cd:de:7c:
         b1:12:92:83:74:3a:18:fd:11:28:ad:72:45:ee:b7:a9:79:a6:
         09:14:46:01:7b:a6:d9:2d:6b:85:8f:6b:ec:78:75:b3:a8:53:
         75:aa:c1:14:96:07:3e:b4:3f:c9:91:37:89:a8:15:55:6e:0c:
         0a:74:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----