Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/llLGUEKFsbwT34Ab9iDVP1raokM.roa
File:                     llLGUEKFsbwT34Ab9iDVP1raokM.roa (raw, json)
Hash identifier:          +gE/zRoskRgU08m9j+wiCRC5+hmeijbJF43xQ1+jyKI=
Subject key identifier:   96:52:C6:50:42:85:B1:BC:13:DF:80:1B:F6:20:D5:3F:5A:DA:A2:43
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018875FD84DB8422926339E63AD2D061C9AC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/llLGUEKFsbwT34Ab9iDVP1raokM.roa
Signing time:             Thu 01 Jun 2023 08:05:28 +0000
ROA not before:           Thu 01 Jun 2023 08:05:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199340
IP address blocks:        2a10:ccc2:9c00::/38 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:75:fd:84:db:84:22:92:63:39:e6:3a:d2:d0:61:c9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun  1 08:05:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9652c6504285b1bc13df801bf620d53f5adaa243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:42:28:52:3c:04:53:6a:7d:13:c0:48:d1:
                    7d:97:e2:6c:7d:dd:ea:e2:ac:6b:36:f3:a4:6a:b0:
                    5b:b4:b0:7d:af:f6:2f:be:ec:ae:92:ad:fa:29:f8:
                    b2:00:67:0c:c9:45:6f:e3:15:66:26:41:e1:e5:14:
                    a7:51:88:dc:6e:eb:77:9d:a6:b4:26:0b:1b:95:db:
                    2e:0d:b5:63:96:24:1c:7f:f8:99:02:8a:c0:97:35:
                    ba:69:cc:5f:2f:91:40:61:9e:71:51:8a:ed:5e:6a:
                    b2:05:54:73:ff:a2:34:5e:85:c8:39:86:75:58:1d:
                    85:a8:15:5a:93:d6:5e:d7:fa:b3:36:73:c5:36:f2:
                    5d:6b:05:3b:b3:ea:ce:ac:a3:2a:80:ec:59:3a:a4:
                    9a:44:5a:cd:ba:9a:f1:26:05:5d:b3:28:ab:9c:db:
                    84:f4:e0:16:b8:44:f7:71:9a:a0:2f:b6:de:48:d1:
                    c7:8f:59:74:23:fd:8c:dc:2a:a6:1f:fc:84:c5:2c:
                    19:a8:4f:70:ae:b8:55:d4:42:c5:c4:63:a9:8c:3f:
                    bc:59:35:2c:bf:a3:67:58:f3:a7:ea:fb:cb:86:20:
                    ec:ed:fd:22:d3:52:e2:33:c1:f6:65:76:81:2f:f0:
                    47:d0:b3:b9:d4:08:4b:b4:a5:02:af:1e:53:fd:2c:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:52:C6:50:42:85:B1:BC:13:DF:80:1B:F6:20:D5:3F:5A:DA:A2:43
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/llLGUEKFsbwT34Ab9iDVP1raokM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:ccc2:9c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         04:58:70:96:6e:c6:96:da:1e:4e:a3:f8:9c:61:c1:a0:a2:aa:
         f0:f6:30:39:48:bf:89:28:98:e3:fe:37:b1:1a:69:d7:93:00:
         99:e5:44:b2:74:c2:bc:dc:4d:ae:c8:a2:be:f6:d7:12:56:8f:
         12:3f:89:36:f0:73:c2:e4:ca:62:ba:48:36:c5:92:4c:26:18:
         88:a8:6f:cf:74:19:d2:a7:9d:f1:04:e1:61:e9:6f:ca:84:c2:
         8e:32:1e:03:85:ae:92:7d:66:63:0d:4c:40:b8:7a:7e:e6:8f:
         b9:0f:a9:c6:33:78:06:4a:7d:4c:84:ed:8b:ea:9f:98:b2:8c:
         c3:4c:58:94:14:f8:ab:ea:a0:94:f9:3b:a6:a3:8d:50:05:8e:
         35:75:19:01:72:a8:f3:90:17:83:0f:53:ca:b0:c2:e1:ea:89:
         34:cb:57:9c:0b:8e:4a:53:64:b0:2f:45:67:00:8b:fd:d7:a4:
         12:cd:43:c3:f4:c3:37:b7:5b:9c:2d:58:73:9f:52:3f:e1:e0:
         76:3b:fc:97:f4:64:4b:91:54:81:44:63:ff:d4:1d:e3:c7:9a:
         28:3d:b9:bd:78:18:1b:33:7e:9b:39:b2:b9:a0:3a:0f:72:07:
         24:b0:f1:24:c2:5f:81:58:d4:54:47:51:c5:91:78:c3:80:b9:
         ec:ce:5a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----