Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vMSLRANkTB-7_0BI0IdXZ496TfE.roa
File:                     vMSLRANkTB-7_0BI0IdXZ496TfE.roa (raw, json)
Hash identifier:          QTXy2C9MtNQgJFqkRw/piXceKSaJBouJi0/cQ2JTBXc=
Subject key identifier:   BC:C4:8B:44:03:64:4C:1F:BB:FF:40:48:D0:87:57:67:8F:7A:4D:F1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185DE40AD73CF31E6BCAD0300C3D48BF055
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vMSLRANkTB-7_0BI0IdXZ496TfE.roa
Signing time:             Mon 23 Jan 2023 10:50:58 +0000
ROA not before:           Mon 23 Jan 2023 10:50:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207556
IP address blocks:        2a10:2f00:181::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:40:ad:73:cf:31:e6:bc:ad:03:00:c3:d4:8b:f0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 23 10:50:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bcc48b4403644c1fbbff4048d08757678f7a4df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0d:52:ce:40:0a:95:2c:9a:e8:cd:a6:00:bb:
                    84:ae:23:3a:ff:3a:f4:69:0d:d0:a7:b4:6a:ef:95:
                    c0:5d:ce:fb:6c:47:23:2d:0c:08:5c:52:67:94:d7:
                    09:c3:c8:3d:fe:db:e2:56:5b:86:4f:2f:8b:07:08:
                    ad:1d:e5:be:98:d6:88:6f:57:11:69:f0:47:de:b2:
                    71:28:1a:d7:26:f0:86:a0:98:39:19:0b:6c:d9:2d:
                    35:61:e6:5f:63:c8:0e:fb:b2:43:ef:8a:d6:0f:3f:
                    40:36:76:8e:69:39:d1:a2:65:26:44:04:eb:f9:66:
                    01:96:c9:0e:ca:aa:70:72:4a:94:a7:f6:a8:b8:ea:
                    09:02:62:89:e7:19:81:e7:e6:dc:f3:55:c7:68:c7:
                    d5:1c:a2:ab:a0:6a:25:00:1d:3f:64:2b:a8:c8:24:
                    e2:97:87:38:33:9c:e0:80:74:2b:55:d3:dd:5b:cd:
                    6e:0c:77:df:79:60:91:87:7d:e3:4c:a9:98:06:85:
                    0f:b1:eb:e2:c3:4d:dc:77:9e:c2:b3:9b:8f:8e:7c:
                    18:a1:dd:69:b4:4e:55:47:4f:3b:2b:57:19:ba:28:
                    f3:1b:80:82:db:31:2e:27:24:54:5a:4c:00:9a:90:
                    e2:81:35:0d:99:19:35:36:87:8c:17:d9:de:88:df:
                    06:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C4:8B:44:03:64:4C:1F:BB:FF:40:48:D0:87:57:67:8F:7A:4D:F1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vMSLRANkTB-7_0BI0IdXZ496TfE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:181::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:42:72:c9:6b:02:dd:6a:45:43:dd:5c:99:02:ad:44:43:4e:
         6c:30:c2:7b:4a:56:d5:e1:48:c6:73:85:bb:98:70:49:8a:b7:
         73:66:a4:07:ca:b5:ad:09:da:24:0c:f1:64:a9:05:b5:aa:03:
         9a:5d:aa:94:4d:e0:de:39:79:04:e3:8f:1a:50:1a:2a:51:c9:
         8c:80:ca:f7:68:78:c9:38:f2:87:bb:3d:bd:82:df:5e:88:3d:
         5c:3a:e3:9d:72:08:f0:4b:c1:3d:c3:0e:66:11:ee:04:63:58:
         ac:b4:65:f4:3c:d9:58:0c:70:34:b6:41:98:63:47:57:6a:43:
         c6:b9:3c:97:18:31:02:4e:2e:1b:c9:56:3c:4e:fe:a6:02:d1:
         cd:83:5b:4e:f1:9d:91:ae:93:1b:54:b2:d3:1e:e7:4d:1a:fa:
         d2:82:f6:ae:c8:8d:54:88:73:8d:39:dc:8e:3a:6f:e4:68:3a:
         ff:67:90:16:5c:8b:48:3d:4e:35:e4:ef:13:d2:f9:6b:60:d5:
         df:4f:fe:82:b7:c6:94:cd:ec:b2:9e:fb:78:fd:7d:90:06:11:
         4d:e8:ce:37:fb:73:35:dc:68:cf:29:e5:75:2a:9f:aa:8c:ec:
         30:86:05:a4:fe:08:ba:3f:97:51:4d:21:7d:11:9c:56:46:73:
         76:8f:11:fc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXeQK1zzzHmvK0DAMPUi/BVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTIzMTA1MDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2M0OGI0NDAzNjQ0YzFmYmJmZjQwNDhkMDg3NTc2NzhmN2E0ZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7A1SzkAKlSya6M2mALuEriM6/zr0
aQ3Qp7Rq75XAXc77bEcjLQwIXFJnlNcJw8g9/tviVluGTy+LBwitHeW+mNaIb1cR
afBH3rJxKBrXJvCGoJg5GQts2S01YeZfY8gO+7JD74rWDz9ANnaOaTnRomUmRATr
+WYBlskOyqpwckqUp/aouOoJAmKJ5xmB5+bc81XHaMfVHKKroGolAB0/ZCuoyCTi
l4c4M5zggHQrVdPdW81uDHffeWCRh33jTKmYBoUPseviw03cd57Cs5uPjnwYod1p
tE5VR087K1cZuijzG4CC2zEuJyRUWkwAmpDigTUNmRk1NoeMF9neiN8GGwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLzEi0QDZEwfu/9ASNCHV2ePek3xMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdk1TTFJBTmtUQi03XzBCSTBJZFhaNDk2VGZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGB
MA0GCSqGSIb3DQEBCwUAA4IBAQBcQnLJawLdakVD3VyZAq1EQ05sMMJ7SlbV4UjG
c4W7mHBJirdzZqQHyrWtCdokDPFkqQW1qgOaXaqUTeDeOXkE448aUBoqUcmMgMr3
aHjJOPKHuz29gt9eiD1cOuOdcgjwS8E9ww5mEe4EY1istGX0PNlYDHA0tkGYY0dX
akPGuTyXGDECTi4byVY8Tv6mAtHNg1tO8Z2RrpMbVLLTHudNGvrSgvauyI1UiHON
OdyOOm/kaDr/Z5AWXItIPU415O8T0vlrYNXfT/6Ct8aUzeyynvt4/X2QBhFN6M43
+3M13GjPKeV1Kp+qjOwwhgWk/gi6P5dRTSF9EZxWRnN2jxH8
-----END CERTIFICATE-----