Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lPSldGwkOdNx6WH0fYjH5rFsVdU.roa
File:                     lPSldGwkOdNx6WH0fYjH5rFsVdU.roa (raw, json)
Hash identifier:          T0iI/mJrG8QLdyuoymVQzBgBK2tk/ZvYG504jPBBMi4=
Subject key identifier:   94:F4:A5:74:6C:24:39:D3:71:E9:61:F4:7D:88:C7:E6:B1:6C:55:D5
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189F9E8C58B1C6BBC70DBF21B95EBA7194A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lPSldGwkOdNx6WH0fYjH5rFsVdU.roa
Signing time:             Tue 15 Aug 2023 15:55:29 +0000
ROA not before:           Tue 15 Aug 2023 15:55:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207252
IP address blocks:        2a10:cc40:270::/44 maxlen: 48
                          2a0e:b107:1199::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f9:e8:c5:8b:1c:6b:bc:70:db:f2:1b:95:eb:a7:19:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 15 15:55:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=94f4a5746c2439d371e961f47d88c7e6b16c55d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:20:60:15:b2:71:dc:e4:33:67:9f:03:b3:b4:
                    68:28:61:fc:75:00:fa:d5:41:fb:20:10:9e:c9:02:
                    44:6d:d8:7f:40:8c:3b:35:0b:99:6f:a6:83:8c:d8:
                    19:f4:12:5c:14:8a:75:e8:3e:54:0c:25:7f:b9:ac:
                    2d:38:e8:25:5f:ee:28:f9:00:f2:d7:e2:22:17:b2:
                    43:15:61:32:d2:06:8f:c3:fc:ba:25:e2:a2:92:d9:
                    ca:c1:f1:49:02:62:a0:ec:4a:73:f1:87:8d:1c:e0:
                    26:31:b8:0a:cf:0b:6b:7f:ea:2e:14:ec:65:ec:da:
                    14:42:61:1b:8a:fe:a5:8e:62:3d:ae:2a:79:12:dd:
                    c2:a1:1a:cc:7c:38:f5:80:6b:88:b9:81:0f:89:bd:
                    e9:53:54:d2:ec:7e:05:73:ac:4f:b9:82:f4:11:7d:
                    88:df:d0:97:84:98:32:5a:8f:59:2e:ac:1f:c0:e4:
                    3d:50:82:7d:9c:c0:43:77:38:08:7a:9a:5c:d8:58:
                    17:cb:b0:11:3f:9f:6a:9e:e7:42:da:71:62:5e:dd:
                    2d:b3:e6:9b:d3:3c:b4:0d:dd:08:b7:c1:29:74:b6:
                    2f:d1:fa:4e:10:a6:c2:e5:75:e8:b5:e8:75:5e:9c:
                    35:c9:7f:c3:f5:6a:aa:93:fd:d9:f9:dd:6d:e7:d2:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F4:A5:74:6C:24:39:D3:71:E9:61:F4:7D:88:C7:E6:B1:6C:55:D5
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lPSldGwkOdNx6WH0fYjH5rFsVdU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1199::/48
                  2a10:cc40:270::/44

    Signature Algorithm: sha256WithRSAEncryption
         14:86:98:d2:ea:e8:45:a5:0f:fe:0d:97:c1:0e:07:44:20:c2:
         ad:66:74:4a:d2:4e:c9:ec:d5:02:46:e6:b2:db:ae:64:81:a8:
         8f:de:ad:19:b2:6b:29:ce:65:41:90:d0:fd:52:c9:e2:da:a3:
         95:55:6a:a0:69:66:cc:95:91:c4:bf:73:98:96:4d:7b:d1:cb:
         51:3f:e6:a3:91:37:bc:e4:5c:f6:7d:67:a4:88:b4:93:db:8b:
         e7:ed:e7:57:97:df:49:9c:90:ec:61:e7:9c:71:40:97:a3:dc:
         6b:0d:4a:b7:59:0f:15:36:b2:20:fe:47:66:c4:7f:af:be:3c:
         25:7f:54:a1:b5:91:e8:18:45:ed:61:79:88:ec:a4:d8:01:23:
         2a:ca:85:56:50:41:ce:6d:2a:47:b4:8c:d9:e7:6a:1d:36:a2:
         26:35:2d:9b:33:97:83:2b:72:e6:af:15:e9:65:de:68:07:98:
         07:6a:1c:13:76:7e:47:1d:6e:e4:5a:d2:0f:94:db:63:fe:20:
         16:33:70:b7:7e:31:f7:5c:b1:6a:f7:9d:ce:f0:46:fe:4c:d4:
         a6:27:76:7c:9c:eb:b8:96:eb:a2:00:61:e7:6a:6a:6c:ea:e5:
         c5:21:dc:3d:04:22:3a:ab:9d:b5:b2:28:56:86:82:29:c0:df:
         b5:97:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----