Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/7pXUGgnHHjv8fSfIp0meXK-oh60.roa
File:                     7pXUGgnHHjv8fSfIp0meXK-oh60.roa (raw, json)
Hash identifier:          V5Hr01K8t1fz+pITThsb5mjGiDbeBo1yzI1HF/fAmmI=
Subject key identifier:   EE:95:D4:1A:09:C7:1E:3B:FC:7D:27:C8:A7:49:9E:5C:AF:A8:87:AD
Certificate issuer:       /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial:       01891C50953AB3F8F553C1AC0452AB317A49
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/7pXUGgnHHjv8fSfIp0meXK-oh60.roa
Signing time:             Mon 03 Jul 2023 15:13:10 +0000
ROA not before:           Mon 03 Jul 2023 15:13:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197962
IP address blocks:        2a10:500::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:1c:50:95:3a:b3:f8:f5:53:c1:ac:04:52:ab:31:7a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
        Validity
            Not Before: Jul  3 15:13:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee95d41a09c71e3bfc7d27c8a7499e5cafa887ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:03:68:a8:82:f3:cf:86:c7:93:fb:61:e2:
                    7c:c5:ff:95:40:ee:38:29:6f:15:b8:cb:64:37:b1:
                    b0:4c:98:b0:7c:5f:fa:09:33:6e:08:a2:3f:8a:e8:
                    00:95:18:3d:38:8a:0d:c1:93:1b:af:2a:22:dd:a0:
                    68:05:c3:a3:34:9c:09:16:6f:20:5c:53:ee:a0:98:
                    b6:75:78:fe:aa:06:2d:00:db:88:70:28:ad:ab:fa:
                    c2:09:80:9b:11:f1:a4:88:cb:a3:6d:05:5f:0c:44:
                    1c:96:ee:c5:8e:08:c9:d2:ad:14:cf:e1:95:a9:45:
                    c8:dd:7b:d1:56:fa:1b:48:0b:e2:57:38:fa:a9:de:
                    8e:c8:78:96:17:3a:e0:41:b0:6e:91:26:54:a4:4d:
                    ba:4c:96:36:dc:db:ca:fd:27:94:f7:26:be:7f:a1:
                    2c:21:95:06:32:0e:3b:ab:c1:e3:96:14:ce:51:61:
                    30:2b:e4:00:c1:5d:75:a6:aa:ba:be:b7:e1:18:de:
                    6d:a5:16:5e:10:39:88:2f:9d:ef:0e:48:f4:55:2e:
                    af:0a:79:5a:9e:11:bd:96:23:1d:bd:64:1d:4e:7d:
                    14:3b:40:c1:3d:b8:43:1b:89:a3:0c:f5:c8:b9:51:
                    40:19:45:6e:ad:ce:01:b4:f5:2b:65:18:38:2a:8b:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:95:D4:1A:09:C7:1E:3B:FC:7D:27:C8:A7:49:9E:5C:AF:A8:87:AD
            X509v3 Authority Key Identifier:
                keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/7pXUGgnHHjv8fSfIp0meXK-oh60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:500::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:01:9f:b9:8e:1c:0f:ae:45:ad:35:9a:20:d4:19:83:f3:97:
         e3:da:fe:8f:34:e7:04:a1:49:55:70:ec:64:2e:61:ba:ac:34:
         f7:f7:c8:f3:85:47:b9:21:a5:9c:09:2e:29:1b:3d:15:06:52:
         ab:23:86:db:26:30:f5:9f:3b:b8:26:12:e9:aa:86:89:cf:fc:
         ee:16:41:3d:9b:8b:71:60:76:34:ad:a1:6b:a1:eb:ff:5f:c8:
         64:fa:95:62:f8:24:7c:f6:c1:e3:71:8c:eb:c9:2b:b2:bf:f5:
         74:de:0b:3d:4a:a4:57:1d:6b:94:90:7f:9c:10:40:2f:5a:93:
         db:c8:d5:10:cb:c7:61:17:79:ff:3a:64:e9:52:fc:26:48:d1:
         24:68:f9:7b:d4:ec:03:35:e5:3d:e7:93:ff:a4:6e:ea:76:8d:
         e4:e5:b0:9d:50:ad:52:7f:57:9c:56:81:78:74:6d:51:5c:2b:
         07:27:dd:a0:39:2c:34:71:5d:67:81:c3:16:76:32:39:43:fa:
         fe:bc:1f:8f:a7:8b:ee:b4:34:cd:fc:14:ee:ef:57:d9:82:75:
         0a:95:b5:38:a0:11:14:ea:47:36:dd:d3:f2:11:c0:bc:66:62:
         dd:36:11:d7:ce:c3:c3:a4:d0:6f:ce:79:b0:43:05:32:f2:ca:
         be:2b:1e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----