Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eWIAwVA3TRYwFPwqPe4uSkNxT94.roa
File:                     eWIAwVA3TRYwFPwqPe4uSkNxT94.roa (raw, json)
Hash identifier:          Rfh6PwhiSO5cDR4mNs22/s5uNDVncu32w3X167uNjVk=
Subject key identifier:   79:62:00:C1:50:37:4D:16:30:14:FC:2A:3D:EE:2E:4A:43:71:4F:DE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E734C7A5B6C9D04C070137E443009B2F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eWIAwVA3TRYwFPwqPe4uSkNxT94.roa
Signing time:             Wed 25 Jan 2023 04:34:33 +0000
ROA not before:           Wed 25 Jan 2023 04:34:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49716
IP address blocks:        2a10:cc45:110::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e7:34:c7:a5:b6:c9:d0:4c:07:01:37:e4:43:00:9b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 25 04:34:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=796200c150374d163014fc2a3dee2e4a43714fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:05:a8:3d:f9:e3:18:82:58:20:fb:71:64:
                    e0:70:7e:ed:20:0d:10:41:07:98:e4:b3:93:42:3b:
                    5f:ae:e9:d9:a8:50:43:7c:49:e4:15:44:d1:d6:04:
                    c8:49:57:89:65:25:ea:62:7e:4b:3f:1b:80:f8:52:
                    6d:10:96:87:96:66:75:c6:9b:dc:27:d7:e7:39:8f:
                    0a:d6:bb:cb:f8:c4:3d:bd:10:a3:73:bb:29:b9:af:
                    d2:8f:8f:1b:3e:57:f3:39:af:d2:6c:5c:4c:14:20:
                    ef:59:f4:77:b4:19:b2:0b:67:59:25:86:f0:b0:a9:
                    41:bc:ac:30:dd:3c:ef:8e:ab:bf:0c:7e:04:61:19:
                    af:10:22:8e:4f:4c:7d:d9:6a:05:ef:7e:13:95:3b:
                    8d:1f:7b:45:13:33:85:29:7f:df:37:f8:be:c9:01:
                    08:44:a1:57:ec:02:cb:67:2c:14:44:43:53:fe:b3:
                    66:5a:d8:32:ca:cc:95:1c:47:45:d5:c6:ef:0f:87:
                    cf:32:ed:2f:26:0b:7b:da:71:ff:30:28:0a:b5:64:
                    5e:e8:ad:29:fc:a9:83:6f:4d:6d:51:fb:1b:f6:5b:
                    bd:ae:fd:ce:f0:0b:a9:d0:94:b8:42:39:4f:dc:3a:
                    2b:c2:cb:cd:ae:f3:c0:60:f4:b2:ab:e4:ec:f7:84:
                    d5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:62:00:C1:50:37:4D:16:30:14:FC:2A:3D:EE:2E:4A:43:71:4F:DE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eWIAwVA3TRYwFPwqPe4uSkNxT94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc45:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:68:b6:e2:4d:f9:89:5d:fd:e9:e1:b3:26:ea:f8:30:7b:15:
         60:5b:6d:55:55:e5:01:38:1e:4c:c7:84:45:e8:4a:da:04:f0:
         54:f6:49:19:4e:79:81:3b:d2:9f:14:49:b9:cd:fe:7d:10:23:
         71:c5:da:d4:58:98:90:66:c0:e4:0a:05:fb:d1:36:2a:13:33:
         3d:76:7a:e5:78:3e:7a:b1:68:36:2f:e7:e8:58:cc:eb:a7:fe:
         d0:e8:29:12:db:33:e4:b5:4e:90:41:e9:08:dd:6b:06:19:89:
         2a:0a:7b:70:c6:92:2e:35:ad:1a:0d:2d:4c:2a:f5:aa:13:41:
         94:2c:fc:c6:90:be:05:d8:47:6c:90:4a:2e:70:aa:93:44:ac:
         35:b4:54:df:df:18:b9:33:b5:d0:c7:a2:a4:1e:09:61:66:77:
         80:dd:12:22:3b:6e:a1:05:1b:d8:52:75:d7:ff:13:04:8c:23:
         59:ea:25:24:ae:c8:10:7b:db:31:4b:84:73:4e:26:1e:cc:d7:
         01:31:41:91:24:79:94:1b:09:6f:87:cb:22:91:82:8b:86:a4:
         a7:5d:02:c4:4d:07:16:28:4d:10:fc:ca:4e:6b:ff:f3:7d:e3:
         4b:29:8c:ec:2c:87:73:7c:29:2a:c3:57:83:61:79:d8:af:84:
         82:55:17:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----