Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lc-z3MOE0HpX24m8pCqdWJ8--Sk.roa
File:                     lc-z3MOE0HpX24m8pCqdWJ8--Sk.roa (raw, json)
Hash identifier:          Ae/Ew/UbVvWRQtsYepnY+AokdOg3QLuFHeht2J2m1LI=
Subject key identifier:   95:CF:B3:DC:C3:84:D0:7A:57:DB:89:BC:A4:2A:9D:58:9F:3E:F9:29
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018B439652AF667AF0580AFD7E19995193D2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lc-z3MOE0HpX24m8pCqdWJ8--Sk.roa
Signing time:             Wed 18 Oct 2023 16:20:06 +0000
ROA not before:           Wed 18 Oct 2023 16:20:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207252
IP address blocks:        2a10:cc40:270::/44 maxlen: 48
                          2a10:cc40:270::/48 maxlen: 48
                          2a0e:b107:1199::/48 maxlen: 48
                          2a06:de00:400::/38 maxlen: 48
                          2a06:de00:400::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:43:96:52:af:66:7a:f0:58:0a:fd:7e:19:99:51:93:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 18 16:20:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=95cfb3dcc384d07a57db89bca42a9d589f3ef929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:ae:dd:55:86:9b:96:21:26:a4:47:5c:c9:
                    ee:ba:bb:6d:51:cb:65:12:d8:87:d4:90:b7:94:a6:
                    c3:2d:30:bf:18:78:76:27:18:64:05:10:e5:fc:9b:
                    86:d6:51:42:2a:1d:32:a6:07:28:1c:71:19:0b:21:
                    c3:b9:58:31:af:15:d1:94:6d:46:93:18:81:e3:cc:
                    36:cc:b2:1a:86:bb:f6:35:0c:87:95:ee:f7:ce:cb:
                    0b:8c:f8:07:e7:c7:4b:e1:56:0a:c8:9e:92:38:71:
                    0d:88:c6:9a:33:f7:07:95:2d:c1:d7:a0:88:c4:19:
                    f3:0f:fd:86:3d:4d:39:e4:11:e5:28:34:c7:03:58:
                    05:3f:57:73:a5:f4:86:7a:51:99:07:27:af:58:7c:
                    d0:8e:f3:87:f2:cd:a2:16:6e:b7:99:c4:87:eb:53:
                    df:55:6b:6a:35:b6:72:12:7d:39:7f:5e:3e:21:53:
                    cb:fa:c1:68:36:ca:67:5c:80:4b:fc:b1:e6:17:f4:
                    f0:f8:e2:4c:19:d5:e9:5b:e1:2c:2f:d9:44:dd:7c:
                    a8:21:88:33:cb:97:92:85:a8:66:5a:6b:48:b3:3c:
                    3e:83:a3:b5:8a:4d:2a:74:68:a4:39:39:98:21:28:
                    66:12:f7:4e:7f:10:8b:2d:ad:00:7c:8a:77:fc:14:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CF:B3:DC:C3:84:D0:7A:57:DB:89:BC:A4:2A:9D:58:9F:3E:F9:29
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lc-z3MOE0HpX24m8pCqdWJ8--Sk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de00:400::/38
                  2a0e:b107:1199::/48
                  2a10:cc40:270::/44

    Signature Algorithm: sha256WithRSAEncryption
         03:36:ad:1f:de:a2:a5:81:a7:8f:50:80:e9:da:4e:3a:2c:81:
         7d:4a:17:57:d0:96:7e:04:cf:d8:50:2f:5f:05:5b:fb:68:39:
         f3:01:7b:23:d8:c3:03:d2:a0:b2:18:db:77:34:23:ff:b1:e1:
         57:ca:88:9e:ce:b9:2e:29:7e:54:38:04:57:71:cf:f1:b9:9b:
         87:f5:3a:33:4e:e6:2a:e3:3a:a9:23:05:99:1d:3c:5a:a1:5f:
         0c:e8:70:af:62:a8:6e:4b:d5:9a:30:cc:9f:b6:dd:47:6e:de:
         d5:3e:aa:fc:a5:b0:71:69:db:65:e3:0e:ad:67:fe:11:e6:ac:
         27:db:1c:37:e7:c0:72:8c:78:a9:c3:aa:5f:bd:fb:54:ec:63:
         55:a8:df:d6:80:0b:7f:54:fb:58:3a:12:0a:9b:fb:ad:df:49:
         b3:6c:fb:5b:98:d1:08:a9:b0:ff:50:34:87:f4:58:26:e3:da:
         80:68:eb:20:17:95:7c:40:80:d8:bf:ae:51:6e:c0:18:da:5d:
         16:5f:fa:65:4b:47:9b:50:bc:f9:02:8b:68:92:70:5c:32:42:
         01:b1:3e:cb:aa:bd:95:4b:50:09:8d:eb:ab:7e:d9:bd:69:96:
         9a:e5:89:7a:b8:7b:61:5f:c2:0e:3e:95:b3:f6:a6:b2:89:3c:
         44:f2:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----