Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pb4JXm8iQPbBTP_05ePvmOK2Ak0.roa
File:                     pb4JXm8iQPbBTP_05ePvmOK2Ak0.roa (raw, json)
Hash identifier:          GyTHAAZMZErj/KxNFuSx/9Oe2HMFyrKWpuMSd75G0wI=
Subject key identifier:   A5:BE:09:5E:6F:22:40:F6:C1:4C:FF:F4:E5:E3:EF:98:E2:B6:02:4D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185DE40B3DD734153CB90E4DC79CB0F13AB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pb4JXm8iQPbBTP_05ePvmOK2Ak0.roa
Signing time:             Mon 23 Jan 2023 10:51:00 +0000
ROA not before:           Mon 23 Jan 2023 10:51:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212129
IP address blocks:        2a10:2f00:160::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:40:b3:dd:73:41:53:cb:90:e4:dc:79:cb:0f:13:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 23 10:51:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a5be095e6f2240f6c14cfff4e5e3ef98e2b6024d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:cb:b7:cb:55:3c:53:23:5a:bb:fc:61:d4:
                    b1:17:3e:aa:d4:c2:ef:ef:d3:07:7c:ea:16:a9:de:
                    ca:52:92:47:c7:9f:6a:dc:05:db:c8:69:a8:71:c7:
                    56:27:cc:3f:08:d8:05:c5:27:2d:2e:da:e5:64:c3:
                    34:ad:76:3c:f6:b1:9a:cb:e7:f5:4e:ad:34:83:48:
                    57:01:92:2d:10:e3:50:2d:ea:ca:79:aa:ea:83:70:
                    ab:61:2e:94:82:60:9d:e5:2e:0e:fd:44:b5:78:d1:
                    fa:2c:75:e3:f0:b8:e3:4c:a9:2c:02:4b:c5:61:fe:
                    b7:1f:a5:ea:cd:af:f2:92:8f:58:3c:cc:f3:8f:8a:
                    bd:42:f8:99:aa:8d:96:4c:d9:45:70:78:c7:5c:cb:
                    80:47:7c:56:2e:13:c7:e4:9e:b1:1d:95:33:39:f9:
                    de:ee:5b:40:fd:e4:0a:14:99:90:58:0a:85:0c:ee:
                    02:e7:ff:71:1d:fd:92:a3:c8:c0:fd:80:53:33:b1:
                    89:88:91:59:e9:ab:85:bd:7d:fb:07:a3:67:e0:90:
                    44:f9:36:9e:84:fb:44:3e:8c:05:2a:4e:6a:48:d3:
                    6f:bc:57:f1:c8:b5:72:2f:fa:2f:db:80:06:35:e2:
                    75:c7:e9:4e:f7:89:7d:f0:25:b0:cb:0d:3e:e0:f0:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BE:09:5E:6F:22:40:F6:C1:4C:FF:F4:E5:E3:EF:98:E2:B6:02:4D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pb4JXm8iQPbBTP_05ePvmOK2Ak0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:160::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:21:3c:9a:1c:6a:43:5c:15:a1:86:9f:2b:91:eb:51:05:97:
         5f:24:55:03:9f:0b:1e:3e:50:71:1f:8d:84:35:35:5b:74:93:
         58:8f:7b:fc:8b:71:2c:86:3a:51:9e:57:c5:67:bd:b2:b3:52:
         23:fc:92:7d:0a:4a:30:43:53:d9:cc:fc:72:81:10:cf:6c:61:
         d3:72:0a:7d:e2:b5:70:eb:68:8d:96:03:c5:3b:df:e3:fe:4a:
         0b:e6:c9:c1:b4:3d:d6:62:70:ab:3d:95:af:f2:6c:9d:67:3a:
         be:98:a6:19:39:f0:22:d9:d9:2a:d2:a3:ee:3f:31:34:56:9a:
         94:5c:91:e8:4f:8f:1e:53:79:73:b3:73:41:f6:fb:e6:78:d5:
         9c:fc:01:8c:90:23:9d:b6:7f:80:fa:26:3f:54:1d:51:db:65:
         1e:c7:af:92:51:85:d0:9e:88:df:9b:53:5c:2b:85:bf:9c:07:
         76:34:1d:fc:c2:6c:cd:3b:0a:a4:0c:e9:6a:6f:27:09:84:39:
         7d:59:19:ec:44:35:55:b2:76:0a:30:14:ee:a4:29:56:e9:58:
         23:92:b1:b9:a1:06:2f:77:4b:59:41:1d:ba:ee:fe:ab:38:32:
         54:63:7f:48:a6:bc:91:2a:65:ad:51:f6:9f:ca:c8:63:3d:8e:
         f3:96:50:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----