Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x3QhSLdYiOiQlZvmAvtmuCqWtOc.roa
File:                     x3QhSLdYiOiQlZvmAvtmuCqWtOc.roa (raw, json)
Hash identifier:          ul7oAEzcoVYm3fHMBXUmAPhj+LQ47YLsIOHrYA9gXDw=
Subject key identifier:   C7:74:21:48:B7:58:88:E8:90:95:9B:E6:02:FB:66:B8:2A:96:B4:E7
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01898DA15355834E287923DEF8C84ACE1B78
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x3QhSLdYiOiQlZvmAvtmuCqWtOc.roa
Signing time:             Tue 25 Jul 2023 15:18:27 +0000
ROA not before:           Tue 25 Jul 2023 15:18:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197601
IP address blocks:        2a10:2f00:195::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:8d:a1:53:55:83:4e:28:79:23:de:f8:c8:4a:ce:1b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul 25 15:18:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c7742148b75888e890959be602fb66b82a96b4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:37:8f:4d:87:d3:bc:0d:67:ac:45:40:ee:4f:
                    16:d2:cb:30:64:e4:e3:b1:44:ff:d3:b7:29:9e:46:
                    1d:a2:35:ce:25:84:9d:66:80:08:29:db:89:93:5b:
                    46:38:46:4b:dc:24:02:37:0c:51:e6:0c:08:3a:c9:
                    f8:fd:b9:7e:83:94:9f:c9:8d:41:f7:ee:b2:6b:08:
                    cd:49:59:21:21:5e:da:12:9a:b3:37:c2:b7:d1:33:
                    a6:63:aa:61:59:04:b2:34:a9:47:c5:c8:da:df:ef:
                    bc:be:fe:db:14:23:52:c6:e6:eb:15:2e:74:92:30:
                    ae:cd:55:64:2d:57:d6:f7:c0:a0:76:4a:07:d4:5a:
                    1e:fe:e7:e0:85:2c:6e:fd:45:5d:9e:d7:12:97:1d:
                    87:86:ef:b4:96:4f:06:26:29:c9:21:9f:81:b8:f8:
                    de:05:76:28:fa:c6:55:04:9f:fc:b0:e0:27:8a:f3:
                    f4:1f:db:cd:35:67:e9:80:f1:a0:aa:18:87:4b:df:
                    7f:2c:11:5d:ca:be:00:a5:76:6e:e0:ec:ab:10:0d:
                    71:36:89:e1:ec:9b:85:b5:82:e8:f4:a9:81:0c:bd:
                    f8:5a:11:31:71:76:37:80:b7:07:c0:91:4d:3c:8a:
                    ca:5a:1e:74:e1:34:35:4c:d9:3c:48:8b:30:94:6e:
                    8b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:74:21:48:B7:58:88:E8:90:95:9B:E6:02:FB:66:B8:2A:96:B4:E7
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x3QhSLdYiOiQlZvmAvtmuCqWtOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:195::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:58:14:24:ba:99:b5:51:da:c4:9a:0c:74:49:1a:9f:c0:fc:
         d6:c4:c7:1c:97:1b:82:4a:18:09:fa:34:a8:d7:d5:04:f3:12:
         82:0e:ba:63:42:68:55:f7:65:d0:9c:ef:f6:26:fd:1f:9d:b5:
         96:35:1f:93:b9:f9:54:6a:1f:6f:b0:08:2d:82:f0:a4:b1:c0:
         59:6e:be:67:e6:28:0a:f1:ba:d0:37:93:74:46:1a:08:23:9b:
         81:5a:cb:e1:0a:ea:33:11:40:a6:f9:6a:85:54:64:fa:b2:e7:
         f1:84:4f:1b:cd:9a:f3:53:8f:89:39:57:bc:de:dc:72:87:48:
         a2:bb:12:bb:af:30:1e:28:70:8d:a1:50:9f:aa:39:55:cd:77:
         c3:9f:0d:bb:b1:5c:80:8d:67:bf:cd:78:a1:c7:fb:7d:40:d2:
         ad:57:92:9d:8d:6c:27:65:fa:33:c8:ab:75:8f:ad:b0:9f:c5:
         73:23:41:c1:5e:f8:ca:ad:20:8c:9c:9c:f3:dd:c0:45:06:cd:
         40:5b:55:9e:bc:5e:2f:3a:1e:cd:21:66:27:a8:f0:2d:32:df:
         ce:dd:de:25:5e:d6:ae:a8:39:ef:2a:d0:c5:d6:d2:aa:8d:d3:
         7f:69:fe:1f:e2:b2:10:ce:ed:a7:bc:3f:02:2c:2b:60:89:56:
         7a:c2:a7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----