Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t46GYnz6g_nzsK6KHp_vOGkY2lc.roa
File:                     t46GYnz6g_nzsK6KHp_vOGkY2lc.roa (raw, json)
Hash identifier:          rqIxhSLMEV29iICRdYgSOz4IxfRI+nD9MrZNCZDl11o=
Subject key identifier:   B7:8E:86:62:7C:FA:83:F9:F3:B0:AE:8A:1E:9F:EF:38:69:18:DA:57
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E809DDF3F51AFECEB0AF9BBFE6D873
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t46GYnz6g_nzsK6KHp_vOGkY2lc.roa
Signing time:             Mon 02 Jan 2023 05:15:32 +0000
ROA not before:           Mon 02 Jan 2023 05:15:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211571
IP address blocks:        2a10:cc40:190::/44 maxlen: 48
                          2a10:cc40:190::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:09:dd:f3:f5:1a:fe:ce:b0:af:9b:bf:e6:d8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b78e86627cfa83f9f3b0ae8a1e9fef386918da57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:af:db:fd:14:dd:18:9b:2c:29:1e:3c:fd:f9:
                    1b:35:16:77:ca:e8:b1:ee:2c:5c:3d:f5:05:90:f8:
                    52:e6:ed:a4:13:f4:4d:04:89:26:97:d1:30:6e:25:
                    54:b7:9d:36:8b:48:60:8b:c7:77:d1:82:a8:2c:18:
                    eb:e3:25:52:bd:92:d0:8c:87:54:90:e7:e5:bb:f3:
                    53:5a:a8:3e:63:9b:bf:9a:e4:ac:4d:6d:2c:d7:70:
                    c1:3a:e6:fa:0c:fb:7c:22:d9:c9:c8:ed:4f:eb:bd:
                    f2:38:e3:a4:d7:79:2f:42:fc:84:be:8e:7a:59:cd:
                    e4:2c:9a:94:a1:47:83:4c:ca:de:56:94:76:ac:dd:
                    51:2f:8c:ce:c6:1a:ae:cd:13:ba:25:e0:0e:a3:b6:
                    18:bc:5d:30:4a:a5:a8:ae:2f:78:42:0c:ee:68:c7:
                    0c:54:88:fd:01:35:fc:d5:7d:a9:45:a4:a8:dc:64:
                    42:4e:84:53:32:4b:fe:33:f0:56:77:ae:aa:1c:43:
                    19:69:d3:88:7c:3d:50:d6:40:f8:ef:46:d3:3d:cb:
                    9d:b4:dc:9f:93:78:64:ae:2b:2d:2f:ab:60:ed:11:
                    a5:43:6b:56:07:f9:ae:ca:ff:a4:8d:b7:e9:23:d5:
                    07:58:99:36:1c:e6:97:19:08:cc:c8:42:13:c7:b3:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8E:86:62:7C:FA:83:F9:F3:B0:AE:8A:1E:9F:EF:38:69:18:DA:57
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t46GYnz6g_nzsK6KHp_vOGkY2lc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:190::/44

    Signature Algorithm: sha256WithRSAEncryption
         03:fc:01:86:12:ac:20:58:4c:cc:cb:95:59:b2:3b:6c:93:af:
         91:27:74:3e:6a:d0:ec:d6:dc:3a:4c:f4:8a:66:31:f3:37:af:
         5f:ff:7a:b5:9c:57:0d:25:37:28:f8:0a:53:ba:63:22:20:0d:
         6e:45:1c:07:c8:dd:5e:e2:5e:8f:e2:ce:55:1c:b6:d4:da:9e:
         33:f2:df:e6:f1:ac:78:74:54:8b:09:01:2a:92:3b:17:6c:41:
         16:b6:5e:53:ad:ba:fa:aa:9b:d3:8a:2b:13:56:e2:10:ef:1a:
         2a:12:ea:c6:56:e9:96:fb:25:9f:35:54:01:c4:c4:10:7d:6a:
         bf:fd:39:9b:81:cc:3e:a4:2f:37:ba:bb:0f:c0:7d:78:a0:1e:
         d3:fd:61:3a:cc:7f:e5:e9:52:a0:92:3c:9c:b9:a1:3e:da:44:
         49:83:56:4f:e5:9f:3e:8f:54:85:0c:9e:d6:42:d9:fa:7f:a6:
         3e:5e:f4:db:d7:e0:6d:3b:bb:16:84:15:fa:9e:1e:2d:52:db:
         7e:39:dc:b1:17:93:cb:32:fa:c8:b1:d1:5d:e2:42:b4:49:25:
         0c:e2:53:7e:a2:1c:6d:4e:2d:48:be:78:1e:58:e7:4c:d9:88:
         ef:d2:59:24:fd:3a:4c:1f:6f:1d:60:55:f8:c6:f0:61:85:ab:
         b1:04:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----