Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xfFqX1juCPOP6EjVsl-RNy3llsg.roa
File:                     xfFqX1juCPOP6EjVsl-RNy3llsg.roa (raw, json)
Hash identifier:          wYJFs18WDOoSOYmBuuD1JZKSvLrw8IUF2XUAUOZ5/Ug=
Subject key identifier:   C5:F1:6A:5F:58:EE:08:F3:8F:E8:48:D5:B2:5F:91:37:2D:E5:96:C8
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185DE40B67F9B23832754CE1AAE7788ED95
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xfFqX1juCPOP6EjVsl-RNy3llsg.roa
Signing time:             Mon 23 Jan 2023 10:51:01 +0000
ROA not before:           Mon 23 Jan 2023 10:51:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213105
IP address blocks:        2a10:2f00:138::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:40:b6:7f:9b:23:83:27:54:ce:1a:ae:77:88:ed:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 23 10:51:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c5f16a5f58ee08f38fe848d5b25f91372de596c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:ef:27:37:f6:bd:53:7a:e4:26:f9:b1:dc:
                    6e:bd:b9:a2:e8:a4:92:7b:56:43:34:9b:c0:d4:2e:
                    6c:b9:96:30:d6:6a:ff:1a:1c:e5:83:c4:41:93:af:
                    4e:b3:6a:26:81:6b:b4:e3:c4:c7:bc:40:87:fd:ce:
                    5a:08:d7:59:3b:fc:34:e3:b2:b4:2b:37:93:b4:56:
                    3c:97:8f:49:f8:b5:83:90:44:b8:ee:d4:9b:1d:a3:
                    61:61:80:ea:88:44:be:40:fd:6d:fc:22:e1:a7:b0:
                    2c:56:fe:77:0a:5f:84:c1:fe:64:43:1e:24:5e:73:
                    6e:ff:34:9b:61:f4:82:03:60:c8:3c:dd:f9:f6:7d:
                    27:aa:3b:c6:9f:73:1f:70:64:61:eb:9e:27:b2:e4:
                    77:ac:6f:4f:3b:1f:4e:ea:4c:b6:72:2f:82:51:46:
                    d4:0a:b2:7a:a5:b3:01:fb:c2:26:18:d8:26:c3:a8:
                    56:cd:1f:d0:f6:af:24:b0:95:df:ee:19:2e:41:95:
                    fd:dd:d7:3e:6f:c7:1c:61:db:f5:45:78:d1:23:4b:
                    cb:19:64:be:1a:8c:91:b5:08:2b:68:30:5c:ef:c9:
                    f0:9e:1f:5b:38:65:57:7c:87:2b:0f:cf:b3:61:12:
                    5f:54:a9:08:b2:c0:94:5e:5b:1e:d8:88:bb:ee:14:
                    2c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F1:6A:5F:58:EE:08:F3:8F:E8:48:D5:B2:5F:91:37:2D:E5:96:C8
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xfFqX1juCPOP6EjVsl-RNy3llsg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:138::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:8d:56:95:82:62:ae:7e:b7:e3:74:0c:5f:29:fe:e7:86:
         48:d5:17:68:65:4e:e4:9f:dc:f4:32:1b:37:43:4a:7d:99:d4:
         cf:9b:db:33:ca:96:40:29:2f:6e:5b:63:8e:b0:40:8d:f8:fc:
         20:e8:88:5a:37:26:93:69:31:43:37:28:ef:de:b4:72:48:c4:
         12:ce:8d:cd:59:4d:84:94:b1:19:10:44:b4:bf:6f:c0:ff:d7:
         ef:22:18:e9:15:61:07:19:13:8c:db:37:a7:f8:13:24:4c:c2:
         2a:fb:8b:f6:1a:94:6f:68:41:1b:51:ed:eb:77:3b:ab:69:59:
         04:5c:16:44:fb:85:f4:de:d1:a4:f9:9b:4d:c5:c8:ec:ec:d3:
         74:d0:f3:14:7b:f6:3e:bf:63:11:b8:63:c1:c7:9c:b1:58:fa:
         ac:9a:5f:3d:b6:45:ce:cd:3a:7e:77:18:5e:aa:34:00:f8:1c:
         e2:f7:ef:ce:06:50:16:97:a0:d0:7f:f3:bb:1a:4a:da:3f:b7:
         d4:68:13:56:b3:e3:83:48:11:f8:6d:12:1c:41:cc:af:0d:35:
         4c:0a:a0:1c:aa:07:3d:76:af:70:dc:6d:31:cc:41:ee:04:e8:
         67:eb:09:5c:6e:6e:da:11:70:dc:84:cf:11:8d:5f:5e:c9:8c:
         a5:60:9d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----