Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jmam4Q730GJzWnG49K3MYxGUviQ.roa
File:                     jmam4Q730GJzWnG49K3MYxGUviQ.roa (raw, json)
Hash identifier:          mrCcbVnIDpAnw6p2xe44+g760R9WqbJzXcSi+FtPALY=
Subject key identifier:   8E:66:A6:E1:0E:F7:D0:62:73:5A:71:B8:F4:AD:CC:63:11:94:BE:24
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7FA45F0CB6A20E69BC2E2DC466E3B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jmam4Q730GJzWnG49K3MYxGUviQ.roa
Signing time:             Mon 02 Jan 2023 05:15:29 +0000
ROA not before:           Mon 02 Jan 2023 05:15:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211138
IP address blocks:        2a10:cc44:202::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:fa:45:f0:cb:6a:20:e6:9b:c2:e2:dc:46:6e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e66a6e10ef7d062735a71b8f4adcc631194be24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:4f:98:17:b5:a4:7c:fb:d5:49:f0:c3:8c:
                    82:33:69:07:65:5c:d6:bc:4e:37:db:bf:9f:fa:09:
                    24:d5:4e:7e:08:50:8c:7d:75:08:0d:b8:93:57:94:
                    89:b2:71:55:49:b3:c7:e6:05:66:df:e8:11:a3:10:
                    ab:cc:89:6d:d9:8b:f7:75:00:c2:3a:10:dd:4b:da:
                    ba:83:43:a8:04:3f:99:58:bd:36:b7:ff:ca:d8:fe:
                    c8:15:43:53:7b:3f:ff:91:71:51:66:53:8f:b8:04:
                    a0:7f:01:50:f7:02:b2:32:af:96:fc:90:ec:89:ff:
                    04:53:b4:b9:d4:f5:33:0e:e4:00:11:b7:02:1e:30:
                    ff:f5:75:a8:9f:af:08:d4:3a:10:0c:4e:4f:e6:77:
                    b7:63:f7:65:0a:35:bc:8a:45:2c:54:ce:09:73:ff:
                    58:d5:05:be:a8:8f:ed:27:32:18:82:1f:48:e2:5d:
                    d9:32:61:5f:75:5e:a8:95:18:38:de:60:79:45:9c:
                    ab:6e:2d:9d:49:e2:c2:ff:41:36:e3:fb:80:24:0c:
                    07:8a:40:3b:5e:f0:33:de:2a:57:19:56:be:75:f5:
                    4b:0f:01:b9:6b:ca:1b:8a:5f:5a:ea:bc:57:62:82:
                    3d:3a:15:f7:08:08:47:8f:b0:42:32:55:82:7f:a8:
                    b5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:66:A6:E1:0E:F7:D0:62:73:5A:71:B8:F4:AD:CC:63:11:94:BE:24
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jmam4Q730GJzWnG49K3MYxGUviQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc44:202::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:76:bf:18:0d:9a:44:23:15:04:b9:eb:e2:73:70:2d:77:36:
         9d:d0:b5:ca:a6:99:1d:d5:fc:ad:9d:87:b4:72:0c:93:d2:98:
         e2:de:6c:be:6e:0b:2c:b3:77:7e:2b:1d:1d:0b:92:75:8c:af:
         c8:60:83:2e:11:53:e4:61:ff:2d:94:32:7f:fc:d3:18:66:4f:
         51:1a:99:f2:b5:65:fb:ed:1f:62:e8:8c:4b:71:25:9b:85:7f:
         28:ec:98:3f:85:aa:6a:b2:c4:4b:c8:9c:b2:20:92:61:56:c2:
         ef:2a:b8:51:1d:42:f9:64:e9:f7:8e:71:90:a1:82:ef:e2:06:
         aa:09:93:48:a2:19:3c:c4:7d:4b:ec:42:9a:68:9c:37:83:9c:
         1f:d9:e4:3c:43:71:f4:66:5d:60:bc:0a:c5:19:01:b3:a9:34:
         48:05:e0:a7:94:8f:a5:fe:10:2a:b0:db:fe:20:48:1b:23:c5:
         66:a9:d7:8a:1a:4b:b1:e4:ef:01:db:b2:a0:d2:cf:88:33:d5:
         dd:55:f3:a6:21:be:df:4e:b7:bc:86:32:c8:ea:d6:4c:99:68:
         9a:22:63:e7:75:ab:e5:09:89:22:b7:57:39:0f:fa:c8:84:44:
         9c:37:3b:19:21:97:ea:f2:bc:a6:90:ce:2e:c5:40:17:30:87:
         49:7a:0f:58
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw5/pF8MtqIOabwuLcRm47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTY2YTZlMTBlZjdkMDYyNzM1YTcxYjhmNGFkY2M2MzExOTRiZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk19PmBe1pHz71Unww4yCM2kHZVzW
vE4327+f+gkk1U5+CFCMfXUIDbiTV5SJsnFVSbPH5gVm3+gRoxCrzIlt2Yv3dQDC
OhDdS9q6g0OoBD+ZWL02t//K2P7IFUNTez//kXFRZlOPuASgfwFQ9wKyMq+W/JDs
if8EU7S51PUzDuQAEbcCHjD/9XWon68I1DoQDE5P5ne3Y/dlCjW8ikUsVM4Jc/9Y
1QW+qI/tJzIYgh9I4l3ZMmFfdV6olRg43mB5RZyrbi2dSeLC/0E24/uAJAwHikA7
XvAz3ipXGVa+dfVLDwG5a8obil9a6rxXYoI9OhX3CAhHj7BCMlWCf6i1CwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI5mpuEO99Bic1pxuPStzGMRlL4kMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvam1hbTRRNzMwR0p6V25HNDlLM01ZeEdVdmlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDMRAIC
MA0GCSqGSIb3DQEBCwUAA4IBAQBFdr8YDZpEIxUEuevic3Atdzad0LXKppkd1fyt
nYe0cgyT0pji3my+bgsss3d+Kx0dC5J1jK/IYIMuEVPkYf8tlDJ//NMYZk9RGpny
tWX77R9i6IxLcSWbhX8o7Jg/hapqssRLyJyyIJJhVsLvKrhRHUL5ZOn3jnGQoYLv
4gaqCZNIohk8xH1L7EKaaJw3g5wf2eQ8Q3H0Zl1gvArFGQGzqTRIBeCnlI+l/hAq
sNv+IEgbI8VmqdeKGkux5O8B27Kg0s+IM9XdVfOmIb7fTre8hjLI6tZMmWiaImPn
davlCYkit1c5D/rIhEScNzsZIZfq8rymkM4uxUAXMIdJeg9Y
-----END CERTIFICATE-----