Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/0o_TGR6-F_9i10AyOxoopvHPjSw.roa
File:                     0o_TGR6-F_9i10AyOxoopvHPjSw.roa (raw, json)
Hash identifier:          XvDRjXLM/TfYKhOkwZXyH9PXhXuvatXcAVnWUE+os/U=
Subject key identifier:   D2:8F:D3:19:1E:BE:17:FF:62:D7:40:32:3B:1A:28:A6:F1:CF:8D:2C
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018A93954DEB8B8C02B2A7D416E5E44DEF5F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/0o_TGR6-F_9i10AyOxoopvHPjSw.roa
Signing time:             Thu 14 Sep 2023 12:05:50 +0000
ROA not before:           Thu 14 Sep 2023 12:05:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0f:f43::/32 maxlen: 32
                          2a0f:f42::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:93:95:4d:eb:8b:8c:02:b2:a7:d4:16:e5:e4:4d:ef:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Sep 14 12:05:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d28fd3191ebe17ff62d740323b1a28a6f1cf8d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:14:f3:b8:88:c0:17:67:c0:a2:c2:2e:22:d1:
                    0a:5f:53:3b:96:7c:c5:d8:1d:90:6e:80:25:ef:2b:
                    f5:f3:41:41:d9:82:38:83:67:f3:4b:c0:64:96:35:
                    58:ff:c0:a6:97:1b:49:13:6c:a9:11:32:dd:01:ac:
                    61:11:ae:f0:bc:da:3d:48:bf:96:13:30:a6:10:74:
                    19:1f:f8:a1:c1:28:22:29:54:9a:65:6a:f8:d8:0f:
                    4f:53:20:f6:82:ff:6d:4a:c9:36:72:84:35:24:ed:
                    6b:5a:9a:c0:d4:7e:e3:d1:cc:ac:4a:ed:4c:99:9a:
                    7a:4d:9f:ba:1a:98:6c:f3:98:8b:d3:78:46:8c:cc:
                    7f:1d:d8:ad:14:a7:30:09:65:ec:ad:e3:2e:6e:ef:
                    99:ac:e2:8c:3a:b2:bc:ab:e3:08:f8:ea:58:4a:18:
                    f5:47:46:b1:8a:86:de:87:c3:8e:3b:92:b0:1c:c9:
                    1f:e7:29:b4:3e:2c:bb:89:69:94:66:10:c6:a4:45:
                    97:12:61:71:4d:5d:e2:aa:78:1c:78:00:81:89:b2:
                    41:93:29:8b:af:19:76:33:33:4b:c1:17:34:a4:95:
                    9d:4a:ba:ef:63:f2:d4:da:cd:47:fc:e9:c8:86:7a:
                    9b:0f:88:29:68:98:e1:d9:26:67:3d:49:aa:a8:23:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8F:D3:19:1E:BE:17:FF:62:D7:40:32:3B:1A:28:A6:F1:CF:8D:2C
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/0o_TGR6-F_9i10AyOxoopvHPjSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:f42::/31

    Signature Algorithm: sha256WithRSAEncryption
         84:9a:37:c9:9e:de:1e:17:49:35:01:e2:08:92:15:04:70:3a:
         4e:e2:03:dc:4b:e4:9a:15:96:38:6d:0f:ef:b2:f1:44:65:00:
         67:eb:99:6c:f1:63:0d:01:08:18:52:79:b3:02:7f:c7:fd:95:
         45:81:e7:ba:de:a0:a1:87:56:26:f7:83:41:2d:97:d5:e4:a3:
         95:e2:c7:2c:cb:7c:2e:38:75:64:9e:d8:43:8f:ce:1f:af:50:
         66:2c:0c:91:1e:30:03:e9:98:fa:a2:3b:a6:97:fb:11:3f:a3:
         6d:30:3e:d0:2b:9d:f4:a6:1f:27:67:57:e6:e9:52:1f:1e:f1:
         2f:8f:f0:ea:6f:70:e4:51:03:8c:a8:b7:80:f3:0b:5b:76:e0:
         65:81:53:93:a2:3c:ca:d6:24:26:d6:0e:35:82:14:73:96:dc:
         9a:2e:61:b6:12:0c:cb:e2:88:57:a5:77:b3:2a:b5:f1:af:4b:
         56:8f:86:14:97:02:31:f0:9d:03:ea:e8:2c:6f:c0:08:f0:5c:
         75:0c:b9:1b:66:e9:36:2c:8a:d3:1a:5e:f4:e4:db:c3:1b:2c:
         22:fe:dc:09:9d:78:4d:28:21:03:d6:5b:79:85:23:d9:4f:1d:
         f1:8e:e8:f6:87:32:f7:00:62:76:55:e1:1a:31:b1:0d:82:75:
         0b:93:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----