Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SCyCw-10QWLUQ_Ruhuh9bp3CC_w.roa
File:                     SCyCw-10QWLUQ_Ruhuh9bp3CC_w.roa (raw, json)
Hash identifier:          sjACkYjpAsNy6UtsJOK3kvkEYvFRUeHQ+kOffwedDeI=
Subject key identifier:   48:2C:82:C3:ED:74:41:62:D4:43:F4:6E:86:E8:7D:6E:9D:C2:0B:FC
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       01856F796CD5DE95494D918CAB48FEC4CA15
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SCyCw-10QWLUQ_Ruhuh9bp3CC_w.roa
Signing time:             Sun 01 Jan 2023 22:35:06 +0000
ROA not before:           Sun 01 Jan 2023 22:35:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        2a10:eec0:80::/41 maxlen: 41
                          2a10:eec0:40::/42 maxlen: 42
                          2a10:eec0:400::/38 maxlen: 38
                          2a10:eec0:2000::/35 maxlen: 35
                          2a10:eec0:1000::/36 maxlen: 36
                          2a10:eec0:8000::/33 maxlen: 33
                          2a10:eec0:4000::/34 maxlen: 34
                          2a10:eec0:200::/39 maxlen: 39
                          2a10:eec0:100::/40 maxlen: 40
                          2a10:eec0:800::/37 maxlen: 37
                          2a10:eec0:e::/47 maxlen: 47
                          2a10:eec0:20::/43 maxlen: 43
                          2a10:eec0:d::/48 maxlen: 48
                          2a10:eec0:10::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:6c:d5:de:95:49:4d:91:8c:ab:48:fe:c4:ca:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: Jan  1 22:35:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=482c82c3ed744162d443f46e86e87d6e9dc20bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b0:a4:68:63:11:e0:3c:16:db:6a:9d:f3:d7:
                    cd:e7:f9:86:99:d6:48:98:b2:4f:99:d0:6b:88:f2:
                    66:40:3f:82:0a:b9:d9:3f:7b:3c:62:71:70:ea:91:
                    98:17:5d:22:56:e8:54:91:44:f7:d5:d7:64:58:27:
                    06:13:cb:3e:0f:52:48:6f:b1:bf:47:98:6e:86:ed:
                    57:b1:4b:2b:40:ef:74:1b:1c:35:f1:88:d8:2f:32:
                    85:60:9c:27:3d:3d:b9:5f:64:d8:64:a5:18:a4:d0:
                    a2:87:b8:a3:82:79:75:30:77:3f:17:9e:3a:63:d1:
                    b3:f3:f6:62:e0:2b:1e:30:fb:bc:8c:f5:5c:b8:b2:
                    c5:c5:02:e1:c9:a3:09:d1:08:a1:ff:d3:d5:f2:b2:
                    34:3f:47:a9:87:a8:e6:f6:7a:8c:42:58:63:2c:d7:
                    29:f4:fa:70:29:32:67:06:80:7e:ac:f1:be:f0:ef:
                    0c:a5:20:18:ff:9b:26:53:c8:93:8e:2b:07:fa:52:
                    d7:e8:57:39:c0:08:89:5f:a1:5d:35:bc:b3:cf:fd:
                    97:f5:c7:ad:c1:4c:6d:16:f6:de:2e:9d:39:2c:e8:
                    90:59:80:96:b3:ce:98:b7:68:4b:0f:6b:08:7b:02:
                    78:b5:62:50:2c:2b:0b:93:07:25:89:f8:3f:72:fb:
                    33:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2C:82:C3:ED:74:41:62:D4:43:F4:6E:86:E8:7D:6E:9D:C2:0B:FC
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SCyCw-10QWLUQ_Ruhuh9bp3CC_w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:eec0:d::-2a10:eec0:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         ae:73:37:7a:9b:64:cf:77:3d:15:d4:2c:b6:8b:66:04:54:df:
         d3:ff:28:2a:37:74:0f:9f:18:43:cb:74:d8:35:f0:a5:7e:56:
         06:af:1e:a2:2e:0b:92:6b:06:fe:f5:be:81:d4:62:5c:d5:02:
         98:ba:8e:15:71:e6:e6:ba:a6:bb:ff:7e:7f:ee:13:be:34:94:
         ea:e2:5a:bb:66:6f:69:3d:68:b8:ce:d4:9b:0a:4c:2b:b4:f4:
         46:58:a2:6a:eb:23:ca:dc:ab:e1:5a:9c:fc:8d:3d:db:6a:66:
         35:08:dd:9b:84:4a:3d:28:a3:a7:0f:6d:c8:bd:d5:7e:0e:e1:
         47:30:a1:e0:9b:8d:01:e2:d0:c0:5b:0d:63:70:25:79:bb:d4:
         56:cf:46:db:ca:b5:b5:6d:59:00:ce:0b:d7:54:f7:f2:51:e9:
         ea:1f:49:14:1b:3e:71:00:44:92:3b:43:65:73:17:b9:bb:c4:
         16:cd:aa:2c:63:53:ef:b5:46:64:44:0a:88:00:eb:83:2b:8c:
         1a:e2:b2:da:2f:df:ea:08:f1:9d:07:6d:2f:94:10:dd:b2:0e:
         0e:68:73:0f:a8:af:45:a2:df:76:d1:99:51:c0:e7:aa:12:b5:
         20:79:70:4d:49:83:8d:c2:31:27:e8:2a:51:63:d1:67:c6:d5:
         4c:f5:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----