Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qdxzKtV_jb-VuDm6YnnXpNTGMiA.roa
File:                     qdxzKtV_jb-VuDm6YnnXpNTGMiA.roa (raw, json)
Hash identifier:          hSSzyVnhLOEoYnIRlK86btflZLpXV+8D8xYjnpT1R+U=
Subject key identifier:   A9:DC:73:2A:D5:7F:8D:BF:95:B8:39:BA:62:79:D7:A4:D4:C6:32:20
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189EE19405F34B472EB045628D9448E936E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qdxzKtV_jb-VuDm6YnnXpNTGMiA.roa
Signing time:             Sun 13 Aug 2023 08:52:59 +0000
ROA not before:           Sun 13 Aug 2023 08:52:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149476
IP address blocks:        2a10:ccc3:ccca::/47 maxlen: 48
                          2a10:ccc3:ccc1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ee:19:40:5f:34:b4:72:eb:04:56:28:d9:44:8e:93:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 13 08:52:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a9dc732ad57f8dbf95b839ba6279d7a4d4c63220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:d7:88:78:25:0a:a9:f9:09:24:9a:12:80:
                    39:18:35:2b:31:df:bc:a6:01:76:d5:82:28:19:cc:
                    5f:c4:36:82:58:fd:80:bb:eb:fb:e9:e4:56:98:c6:
                    3d:c6:cd:62:1a:23:7a:8f:94:75:a1:fa:62:de:96:
                    3f:22:86:5b:63:04:84:95:fd:57:1a:a2:28:00:a2:
                    ce:71:71:ab:91:d8:8e:45:6f:cd:48:a2:45:8b:6b:
                    d3:20:16:13:ea:54:d7:51:46:9b:3e:30:d8:e3:1a:
                    d8:35:47:f1:f8:c7:10:8a:53:28:f0:fa:d6:82:ae:
                    e9:af:84:1d:9a:92:e6:b0:95:ac:c1:9d:c4:de:6d:
                    73:21:75:d3:26:ff:87:6f:e1:02:39:16:38:df:c2:
                    b5:26:d2:76:6b:86:ce:81:26:cb:7a:8d:4e:65:5d:
                    49:c0:f6:3c:fd:0d:bf:83:37:45:88:c4:8b:30:64:
                    a7:b3:18:43:58:27:43:4b:ac:60:25:ec:4d:88:1c:
                    76:e6:b2:85:41:0e:18:a0:4e:07:8c:45:3a:ad:4e:
                    a2:93:b8:b1:db:81:6b:f1:0c:f4:db:1c:b5:cd:46:
                    c8:d2:cf:ee:c5:47:db:37:86:26:f0:ae:60:16:93:
                    a0:18:85:e3:b5:ba:06:71:59:0b:0e:c0:0e:9b:a7:
                    28:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DC:73:2A:D5:7F:8D:BF:95:B8:39:BA:62:79:D7:A4:D4:C6:32:20
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qdxzKtV_jb-VuDm6YnnXpNTGMiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:ccc3:ccc1::/48
                  2a10:ccc3:ccca::/47

    Signature Algorithm: sha256WithRSAEncryption
         38:f6:ab:82:71:9f:34:e1:28:a7:63:39:06:98:5d:af:66:11:
         7f:53:03:06:8a:6d:a0:bf:54:08:42:aa:af:96:49:3d:dc:c5:
         3c:4a:9f:8a:47:f3:ad:61:c7:e3:47:8d:56:ad:08:6d:df:d3:
         14:e1:a2:66:6a:eb:10:cc:78:45:93:6b:81:58:da:72:81:2d:
         b7:00:08:0d:fc:cd:52:d9:45:33:26:92:60:82:07:7f:12:b7:
         f8:36:d9:7f:14:79:5e:37:c6:c7:63:27:5b:be:db:97:0e:e7:
         10:dd:7c:fb:30:c0:56:89:c0:c9:78:07:af:10:3c:e3:36:47:
         aa:aa:5c:ca:f2:a5:85:7b:9d:24:b4:16:d2:7e:63:44:44:59:
         cd:6e:cc:45:3d:70:45:58:b4:4a:0c:81:e9:b5:97:03:bc:e4:
         bd:4d:06:51:cc:77:ff:fa:5d:7b:e5:82:c3:f2:1e:7d:63:0e:
         34:f1:9c:ed:16:b8:6c:0e:0a:bb:2e:21:78:d0:94:9a:fb:b3:
         3c:0d:c8:f3:e4:ba:b2:ff:2d:84:d5:a6:d0:dc:58:60:9c:a8:
         d1:68:13:1c:38:97:7d:60:67:57:47:0e:19:37:87:d8:1b:34:
         69:17:45:3b:98:86:42:b0:74:0e:d4:e8:68:c7:87:07:5d:1e:
         42:88:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----