Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zTDX0QbnLbShiApzlsRr_dGL9aE.roa
File:                     zTDX0QbnLbShiApzlsRr_dGL9aE.roa (raw, json)
Hash identifier:          Q2ubTsOKqmEhWMNkWqiwGDR4Fbr5Wc9xr5A/wOP3RIs=
Subject key identifier:   CD:30:D7:D1:06:E7:2D:B4:A1:88:0A:73:96:C4:6B:FD:D1:8B:F5:A1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E784957CE6B25204DBA79BEA83C88F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zTDX0QbnLbShiApzlsRr_dGL9aE.roa
Signing time:             Mon 02 Jan 2023 05:14:59 +0000
ROA not before:           Mon 02 Jan 2023 05:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50922
IP address blocks:        2a10:2f00:18e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:84:95:7c:e6:b2:52:04:db:a7:9b:ea:83:c8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cd30d7d106e72db4a1880a7396c46bfdd18bf5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:57:42:28:52:b3:7c:76:35:33:5e:df:51:da:
                    ea:87:19:19:f2:cf:c7:43:87:56:b2:0c:ea:2d:ea:
                    0e:27:8f:f0:a7:1b:4c:c7:84:4b:88:c9:c1:0f:7f:
                    55:aa:59:04:7b:d1:f8:8a:20:d8:b2:ac:17:c4:27:
                    99:4f:2b:8a:d0:7e:bc:73:c6:fe:ed:f7:58:66:b7:
                    4e:78:a8:d7:13:ec:33:9f:2d:33:51:87:5e:95:59:
                    40:db:a6:2d:c5:c0:37:4a:c6:77:86:9d:ef:76:14:
                    7c:81:3e:c1:87:18:0a:5f:6e:bc:c3:9d:46:ba:34:
                    db:9a:cd:5a:59:69:a2:eb:1a:cd:aa:6e:4c:e7:1c:
                    a6:19:33:80:3f:86:31:03:30:a6:3f:e9:78:3d:59:
                    c9:ae:c0:3c:01:4c:8b:87:27:58:67:5b:25:ab:53:
                    f6:23:24:0c:62:ee:a3:c9:34:b1:fd:8f:ae:e3:38:
                    3b:3a:99:a6:15:bd:bf:c1:96:de:e2:65:bd:f9:42:
                    1d:b4:c3:e2:7d:97:8d:b8:1a:14:47:ba:d4:d4:8a:
                    98:30:f0:72:93:c6:57:5a:4a:70:77:08:31:7b:72:
                    66:a1:c3:73:dd:1a:6d:58:ce:3f:57:2d:6f:dd:f4:
                    57:0f:bf:76:7e:73:e6:40:7d:31:d1:7e:0b:d6:26:
                    6c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:30:D7:D1:06:E7:2D:B4:A1:88:0A:73:96:C4:6B:FD:D1:8B:F5:A1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zTDX0QbnLbShiApzlsRr_dGL9aE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:18e::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:fd:cd:7a:e9:c7:55:55:1b:24:cd:e9:ab:8f:bf:1a:b5:f6:
         67:84:77:fa:db:43:7e:d3:c7:54:3b:9a:08:0f:e7:9c:40:26:
         81:f5:b7:ba:b8:00:58:56:30:69:a8:d7:58:43:e9:f1:37:33:
         49:01:4c:fc:71:04:9b:a6:b5:77:fd:12:39:05:40:f8:e7:1d:
         d2:ec:1a:68:da:eb:9e:13:d9:0d:b1:35:a1:6a:bb:06:78:f0:
         6b:89:8e:f3:17:aa:cc:7d:74:af:83:b9:e6:b5:f7:58:d0:3b:
         3f:3a:8d:6e:a7:3f:fc:53:cc:28:ea:3c:bb:f9:ba:45:3e:6a:
         48:56:61:b3:c2:2b:2f:3c:72:f3:d6:37:6e:7f:7f:cd:55:b4:
         1b:88:f8:fe:a7:82:de:c8:91:62:49:4d:d0:fc:7f:69:0c:2f:
         9b:50:7e:00:30:81:b5:e3:fc:8e:b4:79:5b:0e:1b:85:c6:81:
         74:73:78:10:5b:3a:d0:34:0a:f0:cb:8f:19:e2:89:60:39:26:
         94:61:ca:6d:05:ae:3f:3a:3c:2a:90:2a:7b:d6:f9:ab:6a:56:
         30:19:3c:67:af:3e:e2:7a:19:3b:d0:ff:8e:c5:24:6c:e2:81:
         fd:6f:cf:13:e3:df:50:05:f9:ac:d8:00:34:9a:b3:8a:67:9b:
         d5:e5:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----