Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CSxq3_od0ZC7nnTPJZR3QugCJ6A.roa
File:                     CSxq3_od0ZC7nnTPJZR3QugCJ6A.roa (raw, json)
Hash identifier:          v9EwaP/jCmDDECiqrl0BxqcpBVPlEp8L8d7HefmRgdg=
Subject key identifier:   09:2C:6A:DF:FA:1D:D1:90:BB:9E:74:CF:25:94:77:42:E8:02:27:A0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018914687B95B0E45AA2A4D1FEBC0408DD3B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CSxq3_od0ZC7nnTPJZR3QugCJ6A.roa
Signing time:             Sun 02 Jul 2023 02:22:18 +0000
ROA not before:           Sun 02 Jul 2023 02:22:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     53667
IP address blocks:        2a10:ccc2:9c00::/38 maxlen: 48
                          2a06:de01:400::/38 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:14:68:7b:95:b0:e4:5a:a2:a4:d1:fe:bc:04:08:dd:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul  2 02:22:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=092c6adffa1dd190bb9e74cf25947742e80227a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:ec:cd:7d:d5:e8:42:ed:de:91:a3:e1:31:
                    05:ca:48:eb:4d:b7:30:69:b0:c8:ec:47:ec:af:00:
                    11:56:9f:0a:5b:56:9e:a9:4c:93:5d:da:63:3b:0a:
                    49:8b:0d:11:d0:75:a1:33:b3:38:00:ce:25:28:14:
                    8f:df:fc:29:66:cc:36:2e:4a:fe:29:8e:29:4e:39:
                    db:b4:4c:9f:f2:66:2d:3f:26:7b:62:9e:54:ba:e1:
                    00:a8:bc:98:65:e0:66:a6:fb:62:05:43:63:c1:8d:
                    cd:32:ca:4b:8a:10:45:61:74:ab:a1:e4:20:93:17:
                    77:d0:d5:7a:16:79:db:ee:68:a6:5e:a1:f4:54:05:
                    4d:94:ca:64:9a:d4:e4:d8:2e:10:d8:0f:fc:50:ad:
                    38:bd:f9:66:84:b9:2c:36:9a:73:b4:91:a5:ef:53:
                    00:be:0a:98:87:69:d3:05:9b:8a:04:19:44:96:b6:
                    2d:2b:8b:da:b4:b4:54:c8:ff:ac:00:a3:6a:81:19:
                    8c:e1:5c:2f:61:21:bb:a6:5c:47:ea:6a:72:b5:5e:
                    6e:61:19:9f:e7:08:bd:d7:ec:53:b4:83:54:31:a0:
                    0c:95:e8:a7:0a:47:b3:04:7d:f7:32:ce:1f:06:ed:
                    4e:c7:3d:99:5c:7e:d4:13:3b:4f:46:94:bd:84:63:
                    22:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2C:6A:DF:FA:1D:D1:90:BB:9E:74:CF:25:94:77:42:E8:02:27:A0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CSxq3_od0ZC7nnTPJZR3QugCJ6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de01:400::/38
                  2a10:ccc2:9c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         08:ef:a6:ef:42:5a:6f:b0:4c:78:de:1e:13:d1:75:bc:2d:67:
         a4:60:6f:7f:6c:db:78:bc:c1:2b:de:20:a1:27:40:7b:8a:fb:
         47:76:b4:58:23:ae:ce:0f:a6:8f:35:13:3d:41:6d:0d:ed:93:
         ff:63:52:c2:98:25:41:69:37:8c:c2:89:44:24:c2:31:53:e5:
         da:17:7c:51:04:66:36:31:87:ce:3e:a3:6d:62:64:ba:88:6b:
         c5:26:2c:18:f5:0f:59:f3:5f:7f:dd:dd:db:84:01:6e:d6:3a:
         85:cb:42:d9:48:00:06:72:5c:2b:6c:64:7c:86:a8:25:f9:91:
         35:57:96:22:17:34:2f:1f:e5:5a:bd:10:13:23:50:0c:3e:ea:
         ad:df:ac:d5:53:99:3c:37:41:fd:1c:7e:dc:87:a7:38:b2:d8:
         08:e8:b3:fa:3e:c4:39:c3:df:73:77:ff:37:91:6d:d9:b8:f1:
         6c:db:c1:8e:ea:ec:d5:7a:4d:b5:20:af:e8:28:63:0f:e9:8d:
         c9:7c:89:e3:46:60:27:5b:95:4c:20:d1:ec:39:88:07:eb:a1:
         6a:f7:2f:97:a4:88:a4:41:5f:55:50:9a:8d:0d:d3:bb:6c:cd:
         2e:f1:c0:c9:26:1c:36:aa:52:b5:54:ca:75:cf:01:05:28:f0:
         a0:da:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----