Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vHV7tSgaRHKRfSKWgJ9-njznu8Y.roa
File:                     vHV7tSgaRHKRfSKWgJ9-njznu8Y.roa (raw, json)
Hash identifier:          1Eh/Js6V2LSq/kp05aaYakABL97WBKPnM+4gmDovqXQ=
Subject key identifier:   BC:75:7B:B5:28:1A:44:72:91:7D:22:96:80:9F:7E:9E:3C:E7:BB:C6
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018911F1AE4B758409DAC5DB9E45780F0F55
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vHV7tSgaRHKRfSKWgJ9-njznu8Y.roa
Signing time:             Sat 01 Jul 2023 14:53:18 +0000
ROA not before:           Sat 01 Jul 2023 14:53:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     149476
IP address blocks:        2a10:ccc0:cc01::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:11:f1:ae:4b:75:84:09:da:c5:db:9e:45:78:0f:0f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul  1 14:53:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc757bb5281a4472917d2296809f7e9e3ce7bbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:62:d3:38:29:24:dd:04:2c:96:54:fd:9e:7f:
                    94:f9:2d:95:03:f3:49:92:31:2a:b3:2f:e9:62:18:
                    85:b2:38:82:e1:c3:38:3e:b6:05:b5:65:9f:61:98:
                    f1:49:78:f5:c7:87:c6:16:e3:92:e8:72:48:24:f0:
                    4e:3d:5b:fd:9d:4c:f2:db:6a:80:f4:5c:7c:fa:5b:
                    1b:42:29:3e:02:38:f9:12:32:8e:86:64:6d:54:66:
                    21:41:6f:63:cf:ae:a4:0b:e2:fa:30:02:bd:02:6c:
                    82:af:6b:fc:9a:04:f9:61:c1:80:b0:30:b4:ac:62:
                    72:af:3e:98:60:6b:06:c0:e6:a6:98:d0:59:03:b2:
                    2f:ce:2a:1b:cc:d2:80:1c:2d:2f:9b:6f:1b:77:53:
                    e8:9f:80:79:3a:65:21:3e:58:2b:c6:f1:59:c7:6a:
                    f9:2d:20:6e:f4:f3:b3:23:a9:9c:5a:05:ee:cb:5e:
                    56:7e:14:84:2b:39:6a:68:d2:43:b0:48:49:63:74:
                    7e:8d:8a:df:20:90:8b:16:76:04:c0:eb:0b:2f:fd:
                    df:5d:32:a4:38:b9:e0:17:6b:76:2f:2e:ed:e2:37:
                    94:c1:69:11:91:e9:41:76:31:0e:67:8d:64:48:d1:
                    46:5c:25:9a:50:eb:30:9a:47:f2:3b:a6:e0:c1:a4:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:75:7B:B5:28:1A:44:72:91:7D:22:96:80:9F:7E:9E:3C:E7:BB:C6
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vHV7tSgaRHKRfSKWgJ9-njznu8Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:ccc0:cc01::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:73:12:4a:61:92:f7:06:b2:5e:30:b8:45:1e:31:f2:bf:52:
         3b:11:e7:89:ee:3b:79:bd:fe:11:ba:a7:a4:bb:b3:d2:d8:be:
         83:e5:05:32:ba:60:f5:17:b8:53:aa:f6:ef:58:24:ec:82:bc:
         a8:60:92:44:f6:63:e7:17:9d:cb:8b:8c:80:7e:5f:c7:78:2f:
         a7:d7:8f:2b:93:b7:6f:aa:90:25:9d:a8:25:bb:9c:ff:04:67:
         33:ae:97:09:9d:18:a4:94:a4:f8:b6:73:72:4a:32:2b:d4:ef:
         fe:2c:5c:f5:d2:fa:87:be:af:36:39:b3:3e:91:df:dc:59:50:
         bf:dd:dd:96:8e:31:8d:f2:a0:4c:cc:ad:75:5b:61:b9:09:5d:
         00:f1:0e:c2:bf:7b:1b:6a:e5:6e:91:32:30:fa:cf:0c:f4:76:
         90:d2:3d:c7:4e:4f:21:b2:70:41:cb:01:53:87:d2:a1:e7:d2:
         f9:d7:f4:68:a6:d3:32:43:3a:09:f4:bb:c7:69:91:07:c2:e8:
         66:52:de:cb:a0:06:22:f0:ed:29:de:df:af:0c:e2:ca:6e:43:
         72:76:be:1c:a0:e6:97:18:4f:42:ce:1d:40:51:27:be:e5:bc:
         bc:f8:18:e5:26:58:b7:d4:17:32:0d:6f:ef:cb:8a:8b:f2:50:
         fb:cb:f6:5a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYkR8a5LdYQJ2sXbnkV4Dw9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNzAxMTQ1MzE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzc1N2JiNTI4MWE0NDcyOTE3ZDIyOTY4MDlmN2U5ZTNjZTdiYmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2LTOCkk3QQsllT9nn+U+S2VA/NJ
kjEqsy/pYhiFsjiC4cM4PrYFtWWfYZjxSXj1x4fGFuOS6HJIJPBOPVv9nUzy22qA
9Fx8+lsbQik+Ajj5EjKOhmRtVGYhQW9jz66kC+L6MAK9AmyCr2v8mgT5YcGAsDC0
rGJyrz6YYGsGwOammNBZA7IvziobzNKAHC0vm28bd1Pon4B5OmUhPlgrxvFZx2r5
LSBu9POzI6mcWgXuy15WfhSEKzlqaNJDsEhJY3R+jYrfIJCLFnYEwOsLL/3fXTKk
OLngF2t2Ly7t4jeUwWkRkelBdjEOZ41kSNFGXCWaUOswmkfyO6bgwaTogQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLx1e7UoGkRykX0iloCffp4857vGMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdkhWN3RTZ2FSSEtSZlNLV2dKOS1uanpudThZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDMwMwB
MA0GCSqGSIb3DQEBCwUAA4IBAQB9cxJKYZL3BrJeMLhFHjHyv1I7EeeJ7jt5vf4R
uqeku7PS2L6D5QUyumD1F7hTqvbvWCTsgryoYJJE9mPnF53Li4yAfl/HeC+n148r
k7dvqpAlnaglu5z/BGczrpcJnRiklKT4tnNySjIr1O/+LFz10vqHvq82ObM+kd/c
WVC/3d2WjjGN8qBMzK11W2G5CV0A8Q7Cv3sbauVukTIw+s8M9HaQ0j3HTk8hsnBB
ywFTh9Kh59L51/RoptMyQzoJ9LvHaZEHwuhmUt7LoAYi8O0p3t+vDOLKbkNydr4c
oOaXGE9Czh1AUSe+5by8+BjlJli31BcyDW/vy4qL8lD7y/Za
-----END CERTIFICATE-----