Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a-9gGmmsmTerm3a7Z1momyQaJp8.roa
File:                     a-9gGmmsmTerm3a7Z1momyQaJp8.roa (raw, json)
Hash identifier:          LfgITh8b7E+fC24EGAANapWukl2FIV4JTAKlF2udMq0=
Subject key identifier:   6B:EF:60:1A:69:AC:99:37:AB:9B:76:BB:67:59:A8:9B:24:1A:26:9F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7EE9CD0F23D5961D7F26A42EEBB26
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a-9gGmmsmTerm3a7Z1momyQaJp8.roa
Signing time:             Mon 02 Jan 2023 05:15:26 +0000
ROA not before:           Mon 02 Jan 2023 05:15:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210631
IP address blocks:        2a10:cc40:1e0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:ee:9c:d0:f2:3d:59:61:d7:f2:6a:42:ee:bb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6bef601a69ac9937ab9b76bb6759a89b241a269f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:8e:84:86:66:0c:2e:a1:1f:7e:88:ee:e0:
                    cc:6c:cc:3b:58:95:7b:9d:f7:ff:e4:64:14:59:27:
                    3a:c4:0e:50:e4:85:a4:f8:e4:73:31:59:5e:14:86:
                    98:a2:ae:3c:24:b3:a2:df:ed:88:21:ff:47:1c:6c:
                    46:86:ef:3c:fa:12:b1:c4:af:57:8f:5a:1f:a3:fb:
                    a7:f6:69:7b:c5:30:67:39:d6:e2:de:12:30:70:08:
                    3b:03:ed:6c:6a:41:e5:fa:69:1d:15:72:bb:d7:2b:
                    dc:c0:2f:f6:fb:fc:d1:f9:0a:ed:a0:f3:14:e0:35:
                    b7:68:3e:e7:ed:3a:fd:9a:ec:95:e9:aa:66:f5:6a:
                    50:76:ad:42:d1:4e:ba:ba:f3:55:7d:b6:c9:7f:ab:
                    09:f9:83:8a:23:5d:f2:96:e7:62:fd:4b:0e:fe:ad:
                    24:8e:f9:03:7d:22:8a:2a:c2:9e:db:19:c1:d7:4f:
                    82:6d:02:d6:a6:c5:d9:87:0d:0e:a4:98:81:2a:a8:
                    d4:36:18:43:82:39:53:a6:65:e9:6e:02:7e:f2:d5:
                    ce:83:b4:71:78:8c:90:f7:63:e5:d4:b1:fa:28:6f:
                    68:0c:a1:10:71:01:b3:3f:a1:e4:89:e0:20:fa:e4:
                    c7:7e:ff:f7:17:90:a6:86:b0:90:f0:1b:29:8a:bd:
                    f1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EF:60:1A:69:AC:99:37:AB:9B:76:BB:67:59:A8:9B:24:1A:26:9F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a-9gGmmsmTerm3a7Z1momyQaJp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:1e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c5:bb:19:ff:3b:31:15:de:20:8b:f7:97:d2:28:0b:ab:fa:f0:
         10:36:98:9f:37:ba:1a:36:22:95:8e:20:51:11:b4:52:74:9d:
         f5:8e:de:7e:78:c7:ec:20:29:ac:8b:66:d2:79:4f:42:7d:f7:
         44:90:14:c2:f3:a9:01:57:cc:a5:e6:a2:f5:2b:14:33:76:c6:
         81:77:1d:e3:b2:83:e6:c9:01:88:bf:b9:36:a9:9b:37:2e:16:
         74:9e:83:e1:cb:75:d3:78:b9:86:4e:9a:3f:20:83:ae:f4:6c:
         e1:13:16:cf:91:7a:97:c3:7b:e0:53:7b:fc:d0:a7:c4:f8:10:
         4c:17:a9:21:5e:8b:2d:3b:a1:c4:4b:d9:85:b7:78:e1:0a:46:
         40:2c:49:38:39:9b:1c:a4:f8:e3:d9:98:79:9c:a7:8f:4f:8e:
         03:c8:56:88:87:7f:97:51:54:63:34:8e:aa:16:b0:f9:a4:e3:
         a5:c8:f8:a6:97:a0:4a:52:55:53:69:77:15:a6:c7:5d:d1:99:
         ce:be:3e:e2:91:ae:96:09:33:0e:c3:3a:72:28:6c:9a:29:28:
         cf:4a:8e:b6:dc:5a:a1:8a:1f:40:52:37:9b:89:d6:fc:d7:c8:
         b9:5b:37:38:73:f8:57:a2:41:f8:11:02:69:3f:15:91:94:26:
         3e:f2:98:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----