Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ve0p7N3_cAP0BXof4vyEHFBSbvA.roa
File:                     ve0p7N3_cAP0BXof4vyEHFBSbvA.roa (raw, json)
Hash identifier:          1BPYDOwHcCJuxpOzKJbCzFFZ7UgKpq29ib7fZxVgf48=
Subject key identifier:   BD:ED:29:EC:DD:FF:70:03:F4:05:7A:1F:E2:FC:84:1C:50:52:6E:F0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BE2398499CAAB06F790841CD33A82DA8E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ve0p7N3_cAP0BXof4vyEHFBSbvA.roa
Signing time:             Sat 18 Nov 2023 11:38:22 +0000
ROA not before:           Sat 18 Nov 2023 11:38:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200890
IP address blocks:        2a10:cc40:180::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:e2:39:84:99:ca:ab:06:f7:90:84:1c:d3:3a:82:da:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 18 11:38:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bded29ecddff7003f4057a1fe2fc841c50526ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:ac:b2:a0:a6:e0:1f:06:e2:57:b4:df:14:
                    f5:28:32:18:8f:d1:95:39:c9:67:4d:3e:2c:13:97:
                    c0:cc:d1:b3:f3:ed:fa:55:40:e8:46:c5:17:69:7d:
                    0f:ab:23:7f:e4:42:9a:76:06:ba:63:a6:b3:e3:a4:
                    c5:25:0e:df:d1:c8:36:52:2c:8c:c0:5d:47:c9:4d:
                    59:44:5c:54:9f:9f:3a:c4:ba:44:c4:77:49:19:89:
                    fc:66:30:15:b8:0b:4f:4a:92:b1:56:a9:70:35:d7:
                    8c:2c:74:34:1d:84:7f:7d:0f:75:54:f2:55:10:f8:
                    66:da:69:7f:b0:6c:de:06:46:e6:77:fd:a1:83:fe:
                    4b:68:53:2a:ef:21:6e:dd:5c:68:95:88:94:ee:85:
                    86:f3:84:2d:06:b5:55:33:ea:3a:44:bc:a7:1a:78:
                    f7:c1:2e:c8:3a:52:f2:f4:2d:cd:1d:34:6e:06:8b:
                    57:45:b8:5d:5f:ea:fe:ef:ca:6a:d0:13:ea:99:90:
                    82:57:8b:b9:1f:17:50:7e:75:d5:33:a0:58:e6:87:
                    44:9a:cc:e9:eb:cc:c1:c6:83:8d:bd:2b:d5:e1:3b:
                    5e:d5:90:38:7a:5e:f9:77:5e:ca:ea:4b:b8:fc:d1:
                    1b:3e:3b:10:1a:e0:f2:f7:ce:ac:93:7f:04:a8:fc:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:ED:29:EC:DD:FF:70:03:F4:05:7A:1F:E2:FC:84:1C:50:52:6E:F0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ve0p7N3_cAP0BXof4vyEHFBSbvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:180::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:65:7b:98:63:82:dd:4e:e4:15:e2:d1:6d:e4:dc:e4:53:
         af:82:0c:17:60:20:bf:6f:75:dc:8a:9d:26:40:f8:c8:d4:41:
         96:44:95:8c:b4:69:78:9a:cc:0f:e9:dd:cc:db:2c:95:06:a7:
         97:8a:d1:35:b8:60:5e:87:95:43:ad:b6:54:d4:4a:f8:02:2c:
         50:5c:a4:db:a7:74:56:ea:78:8c:e1:f8:30:32:db:9d:80:23:
         f1:59:9b:f6:40:72:f0:d1:9c:94:42:0d:80:a7:c6:75:3a:3f:
         dc:ec:e1:ab:52:80:3c:fa:06:85:fb:fa:17:46:1f:85:ec:c6:
         b1:f1:4d:18:c5:e2:8d:76:74:1e:7c:48:42:d8:8a:04:88:23:
         a2:e3:fd:3e:ec:28:bb:8c:40:62:07:35:27:e5:4d:6d:db:df:
         d2:ca:c7:ea:fe:db:3c:89:5c:fb:23:7d:21:a9:df:07:74:d9:
         fd:18:66:49:c3:c4:42:0a:08:73:ea:84:89:30:98:a8:fc:2f:
         76:de:c4:9f:6b:d4:6e:d7:6f:de:01:75:ad:f2:eb:b6:24:5e:
         18:0d:b9:34:d4:0b:53:25:17:96:50:3d:35:7b:58:6e:81:12:
         e7:b2:e8:bc:d4:29:49:52:fc:81:33:49:f5:fc:e5:d5:6e:89:
         da:b3:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----