Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kwDRxfPm2bulQh1F43xYrEDCnDM.roa
File:                     kwDRxfPm2bulQh1F43xYrEDCnDM.roa (raw, json)
Hash identifier:          2MoyRUtwCxl1yTx505NAKbuSMKcHnmNjvJcbLkNyVz0=
Subject key identifier:   93:00:D1:C5:F3:E6:D9:BB:A5:42:1D:45:E3:7C:58:AC:40:C2:9C:33
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185DE40A8563262CB80C03D8B5DC0D993C5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kwDRxfPm2bulQh1F43xYrEDCnDM.roa
Signing time:             Mon 23 Jan 2023 10:50:57 +0000
ROA not before:           Mon 23 Jan 2023 10:50:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39753
IP address blocks:        2a10:2f01:100::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:40:a8:56:32:62:cb:80:c0:3d:8b:5d:c0:d9:93:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 23 10:50:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9300d1c5f3e6d9bba5421d45e37c58ac40c29c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:6f:b6:ca:c6:0a:1f:50:77:11:3a:dc:95:
                    47:17:d8:39:de:48:83:17:dc:75:e7:63:aa:3a:9e:
                    c4:ed:1b:0c:b6:83:ff:21:5b:b9:18:20:66:d3:6b:
                    cc:15:a4:41:83:4e:df:d7:a9:e8:3a:4f:bb:ba:bb:
                    fb:e7:a2:e4:a9:34:31:b1:e3:66:3d:9b:09:a6:a2:
                    98:17:fe:f6:86:bf:3d:33:9d:ff:8d:89:6e:f1:cf:
                    96:df:6b:03:93:68:bd:f4:31:48:08:95:5d:c3:5b:
                    f1:35:e2:5d:52:eb:31:d6:15:7e:2c:49:2c:f5:84:
                    2b:66:ea:bd:be:b2:56:60:08:e6:3b:79:3e:bf:0f:
                    87:ee:39:b9:4a:4c:d3:62:de:10:05:81:4c:18:ce:
                    f9:02:5f:6b:ce:35:ec:17:b1:cf:38:05:78:a9:44:
                    7f:67:f6:cc:41:60:70:a3:71:ad:1d:6b:a6:af:56:
                    cd:e4:22:12:07:fe:4d:2a:f6:e0:43:19:24:32:52:
                    0b:71:63:85:c9:cb:1c:cf:31:13:c2:b9:97:ef:c3:
                    f6:5c:8b:89:d3:03:e1:c8:2f:2d:a0:bb:52:03:4a:
                    aa:1f:87:64:84:89:49:f7:31:88:96:f5:1a:9c:15:
                    7f:35:f4:9f:65:a8:be:de:d5:03:2e:35:17:a8:de:
                    13:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:00:D1:C5:F3:E6:D9:BB:A5:42:1D:45:E3:7C:58:AC:40:C2:9C:33
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kwDRxfPm2bulQh1F43xYrEDCnDM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f01:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:01:c2:e1:d6:01:7f:8d:c2:d2:42:f6:15:b8:a5:c8:78:
         68:db:33:39:2c:dd:91:4d:e2:4a:d8:8f:19:91:c6:8d:75:39:
         c7:06:74:ae:af:09:53:38:b8:43:4e:91:73:91:41:36:eb:08:
         34:4c:5f:25:bb:dc:aa:e9:04:b6:2f:6e:f7:2d:6c:72:4c:cb:
         40:69:bd:a7:5e:f3:4d:c5:a9:36:f6:43:a3:4a:ca:c3:43:42:
         dd:1c:f9:5c:1f:44:f3:ec:7a:ef:7e:40:9a:f7:5c:91:2e:9f:
         4b:77:f6:d0:3e:75:a7:d7:25:16:6f:fb:9f:d9:35:c4:ed:99:
         40:48:4d:34:31:73:7c:26:f3:11:98:59:21:4b:9e:5d:80:5e:
         50:d9:82:62:79:24:97:21:33:31:10:db:ee:1a:3c:73:78:cd:
         60:11:75:93:e4:e2:3b:38:9b:fb:ea:e5:58:d0:43:7f:2d:17:
         d2:fe:69:f5:b3:84:cc:c7:77:bf:4d:87:c9:d7:ec:bf:b6:75:
         d7:5a:25:f3:98:d2:23:33:f8:e3:ad:2e:bc:1a:3b:49:06:96:
         60:6c:45:3b:a4:bb:3c:14:c6:f9:8d:eb:fd:79:15:d0:2c:66:
         1a:3f:17:98:4f:ee:e7:58:79:19:b5:4b:b4:f4:44:84:41:69:
         6a:da:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----