Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JtHjdFAsoanaQT9wcaYVNw9joMM.roa
File:                     JtHjdFAsoanaQT9wcaYVNw9joMM.roa (raw, json)
Hash identifier:          fLHrRYoNopil8Q+zDktR8HuoMsYZECrH8mHlL02ouLA=
Subject key identifier:   26:D1:E3:74:50:2C:A1:A9:DA:41:3F:70:71:A6:15:37:0F:63:A0:C3
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018911FCAB65A36FAD66B95988ADE282DDDA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JtHjdFAsoanaQT9wcaYVNw9joMM.roa
Signing time:             Sat 01 Jul 2023 15:05:18 +0000
ROA not before:           Sat 01 Jul 2023 15:05:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34927
IP address blocks:        2a10:ccc0:cc01::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:11:fc:ab:65:a3:6f:ad:66:b9:59:88:ad:e2:82:dd:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul  1 15:05:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26d1e374502ca1a9da413f7071a615370f63a0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9c:20:df:bc:ed:b0:bd:db:0d:fb:0c:9e:09:
                    a0:85:f0:5b:e3:b9:55:9d:c6:03:9d:77:17:26:95:
                    e9:81:98:88:b9:c8:a5:bd:1b:86:a7:87:9c:ea:64:
                    94:b3:6d:87:ac:ef:ea:25:1b:a3:05:90:e1:3a:00:
                    a3:28:e7:70:e7:8c:ac:5b:4e:a8:2d:77:93:e5:b7:
                    d2:34:88:41:ae:5d:bf:ec:69:97:d8:20:9d:90:0a:
                    f8:9a:db:24:40:13:0b:8f:bb:39:fc:75:b3:03:87:
                    2b:19:a5:ae:84:96:d9:7d:0e:a5:21:68:a5:8e:b2:
                    b8:e7:55:75:bc:05:88:d6:4a:19:1c:63:b4:39:39:
                    87:a0:70:b4:32:1b:61:c9:b5:56:0a:e8:47:8b:14:
                    00:97:1d:36:f9:3c:dd:96:0d:0f:50:a7:42:e4:13:
                    27:89:c7:09:76:35:3e:05:87:b5:ca:b4:70:d9:8a:
                    4d:bc:b3:2e:00:23:c1:94:a9:28:ed:f5:56:43:bf:
                    0f:e6:7e:81:69:4f:45:f4:de:83:9a:dc:ef:00:b5:
                    df:60:bf:ee:f7:f3:05:83:3b:13:fb:f1:09:01:f3:
                    6a:11:74:53:eb:95:a1:6d:77:fc:be:03:8c:e4:f9:
                    c2:5d:dc:6b:38:22:18:39:28:6b:73:64:f3:00:68:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D1:E3:74:50:2C:A1:A9:DA:41:3F:70:71:A6:15:37:0F:63:A0:C3
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JtHjdFAsoanaQT9wcaYVNw9joMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:ccc0:cc01::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:16:27:63:89:28:a5:91:91:9e:79:3d:73:98:75:7d:fa:14:
         72:8b:bb:94:da:45:72:d7:2b:4d:3b:ec:11:b2:b0:63:50:a8:
         e7:08:2d:ba:ff:8a:24:2a:6b:94:5e:37:7a:76:c9:3e:6b:e1:
         63:52:e6:44:e8:1b:71:a0:ce:f4:88:69:ca:2f:52:d4:f7:d3:
         ff:7f:84:ca:e0:99:8c:f5:d8:66:dc:d8:95:24:20:1e:58:25:
         4e:92:ad:37:9d:03:f3:c0:de:ca:e9:50:f8:7e:f4:24:e7:c5:
         06:dd:07:ad:20:a8:c8:c6:e5:c0:8b:1f:ca:7e:fa:f3:f4:6c:
         3c:e9:ad:13:eb:e3:a3:4e:b4:9c:b5:0d:bf:ac:86:8a:96:e7:
         59:47:67:03:bf:c3:5c:51:bc:6a:58:ac:e9:b9:28:66:71:36:
         96:b4:b8:fd:e6:f0:71:b6:5a:83:8c:03:3e:b1:e0:c1:f0:d2:
         7b:52:a9:62:bd:d3:f6:f7:3a:05:9c:fc:bd:78:2d:70:b7:4c:
         74:5b:7c:52:0e:80:55:60:3a:1f:6c:58:6a:0b:13:14:20:f7:
         ef:e5:3b:6c:85:a3:79:0d:2d:68:36:9e:8c:0e:e6:3a:8b:b5:
         64:65:42:e7:b0:07:f4:b7:50:79:f8:f6:2d:f8:6a:01:d2:b3:
         04:9e:12:ce
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYkR/Ktlo2+tZrlZiK3igt3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNzAxMTUwNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmQxZTM3NDUwMmNhMWE5ZGE0MTNmNzA3MWE2MTUzNzBmNjNhMGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5wg37ztsL3bDfsMngmghfBb47lV
ncYDnXcXJpXpgZiIucilvRuGp4ec6mSUs22HrO/qJRujBZDhOgCjKOdw54ysW06o
LXeT5bfSNIhBrl2/7GmX2CCdkAr4mtskQBMLj7s5/HWzA4crGaWuhJbZfQ6lIWil
jrK451V1vAWI1koZHGO0OTmHoHC0MhthybVWCuhHixQAlx02+Tzdlg0PUKdC5BMn
iccJdjU+BYe1yrRw2YpNvLMuACPBlKko7fVWQ78P5n6BaU9F9N6DmtzvALXfYL/u
9/MFgzsT+/EJAfNqEXRT65WhbXf8vgOM5PnCXdxrOCIYOShrc2TzAGisuQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCbR43RQLKGp2kE/cHGmFTcPY6DDMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSnRIamRGQXNvYW5hUVQ5d2NhWVZOdzlqb01NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDMwMwB
MA0GCSqGSIb3DQEBCwUAA4IBAQC+FidjiSilkZGeeT1zmHV9+hRyi7uU2kVy1ytN
O+wRsrBjUKjnCC26/4okKmuUXjd6dsk+a+FjUuZE6BtxoM70iGnKL1LU99P/f4TK
4JmM9dhm3NiVJCAeWCVOkq03nQPzwN7K6VD4fvQk58UG3QetIKjIxuXAix/Kfvrz
9Gw86a0T6+OjTrSctQ2/rIaKludZR2cDv8NcUbxqWKzpuShmcTaWtLj95vBxtlqD
jAM+seDB8NJ7UqlivdP29zoFnPy9eC1wt0x0W3xSDoBVYDofbFhqCxMUIPfv5Tts
haN5DS1oNp6MDuY6i7VkZULnsAf0t1B5+PYt+GoB0rMEnhLO
-----END CERTIFICATE-----