Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tVw1fNJii-AIpB1ju_T9SynsZfM.roa
File:                     tVw1fNJii-AIpB1ju_T9SynsZfM.roa (raw, json)
Hash identifier:          VZkt0lrdAOGRvJcLFKOxVbKKQaArWaRpLiT7wbiX0v4=
Subject key identifier:   B5:5C:35:7C:D2:62:8B:E0:08:A4:1D:63:BB:F4:FD:4B:29:EC:65:F3
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0188EBC15C40F6E4A1FE4F4432C38ED09AE9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tVw1fNJii-AIpB1ju_T9SynsZfM.roa
Signing time:             Sat 24 Jun 2023 04:54:57 +0000
ROA not before:           Sat 24 Jun 2023 04:54:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204115
IP address blocks:        2a10:cc40:114::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:eb:c1:5c:40:f6:e4:a1:fe:4f:44:32:c3:8e:d0:9a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun 24 04:54:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b55c357cd2628be008a41d63bbf4fd4b29ec65f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:be:98:aa:9c:4d:b0:45:87:0d:97:12:45:be:
                    cc:a9:4e:ac:a5:9a:39:cb:20:c8:d1:97:df:0d:35:
                    b6:44:b6:80:54:4f:d9:48:37:a7:13:86:eb:3c:ac:
                    55:98:0e:ab:1d:f0:52:f4:ac:9a:51:90:65:d0:f2:
                    5b:1d:21:61:65:20:05:10:94:e0:7b:4f:ac:bd:df:
                    60:ba:b3:42:79:37:6b:c6:1a:51:2a:15:26:5c:36:
                    71:fe:07:a1:8d:ab:48:30:f5:eb:df:02:c6:57:c7:
                    de:97:b2:1d:6b:b3:3c:4a:ab:9c:28:e9:64:7b:44:
                    ed:31:e0:e9:33:30:03:ed:25:bf:9f:06:fd:2a:e7:
                    a7:a5:78:dc:a5:2d:e6:37:93:91:1d:5b:7f:68:2b:
                    1a:04:1e:99:10:4f:ad:06:11:03:a5:62:66:6b:a4:
                    fe:2f:99:0d:9e:c5:db:4a:aa:9a:17:8f:6a:f9:54:
                    a8:9c:87:8a:55:66:7b:d1:e6:29:af:cd:99:83:49:
                    58:9e:aa:22:19:fe:5c:a8:df:3f:8a:c2:91:ad:35:
                    aa:ce:f5:97:81:35:c3:d9:5f:ae:cf:74:d5:18:4e:
                    89:ef:9b:cc:56:29:e1:b2:f5:e0:58:cd:77:27:15:
                    6f:52:34:6d:fc:1d:4b:26:38:61:58:73:86:2b:00:
                    50:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5C:35:7C:D2:62:8B:E0:08:A4:1D:63:BB:F4:FD:4B:29:EC:65:F3
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tVw1fNJii-AIpB1ju_T9SynsZfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:114::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:37:43:76:6b:6a:f0:a7:5a:9f:ae:7c:8a:99:65:b1:33:0b:
         bb:cf:c6:c7:7d:ac:23:22:dc:70:a0:dc:37:50:ee:b7:ec:1e:
         11:d7:7e:f0:29:78:da:53:7e:ab:9f:87:8b:d8:90:85:c7:3a:
         d8:a4:28:65:52:4c:9c:15:2b:34:ae:b3:57:3c:60:aa:0a:9a:
         be:f4:a9:5f:38:1f:ec:f2:1d:01:ac:60:a3:5f:14:cc:28:7f:
         f5:45:73:b2:04:04:69:43:7c:35:76:42:3f:eb:5f:b8:14:e9:
         d0:47:9a:6b:6f:65:6a:45:37:48:b7:92:71:ed:10:50:1d:d8:
         26:35:34:73:96:58:1f:f2:78:af:f4:cc:68:a1:f0:22:62:df:
         b3:ab:d3:43:f6:e2:bb:8e:16:d5:14:4e:67:cb:9b:a4:2d:d4:
         e1:04:43:52:34:da:3b:7e:37:5e:6d:32:c5:99:8d:36:b6:a4:
         20:df:26:92:33:fa:2d:db:e6:83:c4:06:a2:cb:fc:da:51:b5:
         40:a3:7d:db:2a:e1:2f:3a:22:d3:45:d1:9e:02:63:b9:0f:b4:
         ba:ac:4b:bf:91:35:c4:12:be:c0:95:42:d1:83:66:4e:f4:4d:
         dc:fc:05:7d:44:3c:8d:05:74:1e:c8:2b:d3:fb:6f:d0:c0:21:
         18:8b:88:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----