Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w9S9QwTLjjhYN0RPWF18zV0ZiPE.roa
File:                     w9S9QwTLjjhYN0RPWF18zV0ZiPE.roa (raw, json)
Hash identifier:          ID409nfylYNLp8IxAr5XN+YSlo2fHHIpwUUSm/ouDlg=
Subject key identifier:   C3:D4:BD:43:04:CB:8E:38:58:37:44:4F:58:5D:7C:CD:5D:19:88:F1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01898DFA22033F039D3BACAEA4FD64804CD8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w9S9QwTLjjhYN0RPWF18zV0ZiPE.roa
Signing time:             Tue 25 Jul 2023 16:55:27 +0000
ROA not before:           Tue 25 Jul 2023 16:55:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197601
IP address blocks:        2a10:2f00:195::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:8d:fa:22:03:3f:03:9d:3b:ac:ae:a4:fd:64:80:4c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul 25 16:55:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3d4bd4304cb8e385837444f585d7ccd5d1988f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:85:9c:1a:cb:fa:75:71:59:14:2f:3c:95:a9:
                    83:c3:fb:4d:74:ab:4f:a3:3b:9b:60:eb:f8:5e:d0:
                    0e:54:99:4a:55:ab:09:55:c1:8f:4a:50:ca:cb:12:
                    86:c0:90:c8:2c:55:a9:91:f1:32:b5:1d:e1:a5:63:
                    38:6d:f1:4d:42:af:4a:04:1e:1b:60:06:90:51:d4:
                    de:b2:bc:7d:1b:68:14:59:bc:6e:1c:60:ea:75:fb:
                    75:27:a5:20:59:12:a4:41:6e:2e:61:cc:3e:09:f1:
                    95:aa:15:b0:d1:95:aa:12:e0:82:27:9e:41:2b:96:
                    a1:92:db:e5:a5:0b:d2:76:ae:b2:90:87:3c:eb:f8:
                    af:e0:4a:27:6c:a6:e8:7e:0b:9a:60:18:21:cc:da:
                    3f:61:3b:2b:c6:de:fc:d1:9e:78:4f:4f:2b:7f:f4:
                    f5:44:cd:92:38:60:9d:73:3e:a7:57:9d:e7:d4:8a:
                    02:42:a8:64:1b:fb:80:36:17:29:1e:fe:0a:00:1f:
                    34:08:33:04:b7:7a:d7:93:f0:1f:e1:45:da:ae:c8:
                    82:7d:54:5b:03:8d:f9:6c:34:fe:23:64:32:e6:3f:
                    38:90:b0:0d:6b:6a:5f:48:78:66:b9:7e:a7:22:d1:
                    82:43:97:3b:ad:47:50:06:77:fc:c1:a5:1d:4d:2b:
                    04:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D4:BD:43:04:CB:8E:38:58:37:44:4F:58:5D:7C:CD:5D:19:88:F1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w9S9QwTLjjhYN0RPWF18zV0ZiPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:195::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:49:4c:11:74:22:0c:c5:54:bb:af:22:f6:6c:5b:86:aa:40:
         c7:e5:73:56:27:66:6d:77:1d:6f:9d:41:19:1d:c0:f2:a5:b6:
         fe:f2:bb:2d:f4:19:59:25:80:42:02:9c:53:5f:00:c5:54:f3:
         01:d7:c0:23:d9:52:95:84:dc:97:59:c6:bc:24:f7:ad:8b:ae:
         7d:b0:5f:cb:cc:41:38:ba:f2:01:37:cf:44:86:bc:39:3c:31:
         92:75:81:5b:6e:8c:d1:dc:fe:09:bf:80:a2:4e:98:0e:ef:1e:
         e0:6d:47:5f:3f:1d:ac:47:d5:0b:9f:46:9e:28:24:5c:21:85:
         91:bc:61:49:06:e9:62:83:6a:b6:e2:9c:b3:f5:a3:e8:c4:8d:
         00:7e:a9:2d:a8:76:7f:e0:54:2a:23:99:1f:c1:be:c7:77:07:
         a8:f4:a1:d1:4a:55:26:81:c0:00:66:86:94:fc:09:0d:2a:14:
         da:a1:db:31:44:a1:ff:b4:74:89:26:1c:83:e1:9e:c4:35:23:
         0e:71:d9:57:57:cf:d0:ea:94:0a:2b:4a:8f:bc:a0:22:f1:b1:
         32:3a:36:7f:6f:35:83:12:89:49:89:9b:f5:24:24:8b:4b:4a:
         e6:33:0d:a5:06:97:e6:a2:ec:e6:ca:3b:9a:57:a1:7a:53:5a:
         ea:fe:48:2a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYmN+iIDPwOdO6yupP1kgEzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNzI1MTY1NTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2Q0YmQ0MzA0Y2I4ZTM4NTgzNzQ0NGY1ODVkN2NjZDVkMTk4OGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oWcGsv6dXFZFC88lamDw/tNdKtP
ozubYOv4XtAOVJlKVasJVcGPSlDKyxKGwJDILFWpkfEytR3hpWM4bfFNQq9KBB4b
YAaQUdTesrx9G2gUWbxuHGDqdft1J6UgWRKkQW4uYcw+CfGVqhWw0ZWqEuCCJ55B
K5ahktvlpQvSdq6ykIc86/iv4EonbKbofguaYBghzNo/YTsrxt780Z54T08rf/T1
RM2SOGCdcz6nV53n1IoCQqhkG/uANhcpHv4KAB80CDMEt3rXk/Af4UXarsiCfVRb
A435bDT+I2Qy5j84kLANa2pfSHhmuX6nItGCQ5c7rUdQBnf8waUdTSsEQwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMPUvUMEy444WDdET1hdfM1dGYjxMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdzlTOVF3VExqamhZTjBSUFdGMTh6VjBaaVBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGV
MA0GCSqGSIb3DQEBCwUAA4IBAQC+SUwRdCIMxVS7ryL2bFuGqkDH5XNWJ2Ztdx1v
nUEZHcDypbb+8rst9BlZJYBCApxTXwDFVPMB18Aj2VKVhNyXWca8JPeti659sF/L
zEE4uvIBN89Ehrw5PDGSdYFbbozR3P4Jv4CiTpgO7x7gbUdfPx2sR9ULn0aeKCRc
IYWRvGFJBulig2q24pyz9aPoxI0AfqktqHZ/4FQqI5kfwb7Hdweo9KHRSlUmgcAA
ZoaU/AkNKhTaodsxRKH/tHSJJhyD4Z7ENSMOcdlXV8/Q6pQKK0qPvKAi8bEyOjZ/
bzWDEolJiZv1JCSLS0rmMw2lBpfmouzmyjuaV6F6U1rq/kgq
-----END CERTIFICATE-----