Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Gtu-QOB0126TO992ttkCZC8V8-A.roa
File:                     Gtu-QOB0126TO992ttkCZC8V8-A.roa (raw, json)
Hash identifier:          sv8XuEu08gTA6ZpCcUlU7mh48GP52ER7brWlJ52c4bM=
Subject key identifier:   1A:DB:BE:40:E0:74:D7:6E:93:3B:DF:76:B6:D9:02:64:2F:15:F3:E0
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       018C11788A651B140AA83180784A092DE6BA
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Gtu-QOB0126TO992ttkCZC8V8-A.roa
Signing time:             Mon 27 Nov 2023 15:49:21 +0000
ROA not before:           Mon 27 Nov 2023 15:49:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209641
IP address blocks:        2a0e:4bc7::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:11:78:8a:65:1b:14:0a:a8:31:80:78:4a:09:2d:e6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Nov 27 15:49:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1adbbe40e074d76e933bdf76b6d902642f15f3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:67:68:cc:0e:a4:97:ba:8d:14:9c:30:d1:
                    e2:2d:fb:fa:3c:d3:d4:c8:ed:d6:ee:87:10:e0:9c:
                    9a:8a:42:6f:0e:c4:99:6e:c0:e6:34:d1:8d:db:c7:
                    76:af:00:e2:6f:4e:52:5b:3a:31:14:e1:2e:5f:9c:
                    e9:ce:67:07:59:52:a6:fc:bd:65:a2:c0:dd:19:02:
                    be:88:cd:df:1a:9a:cd:0f:e9:d7:54:bd:35:a7:17:
                    43:90:31:a6:b8:8e:5d:a8:76:31:fd:8b:1d:bc:44:
                    cc:62:8d:17:03:47:46:bf:f1:bf:7d:f7:5a:f3:bb:
                    6f:62:3d:01:a0:bf:0d:ff:d0:e9:4f:0e:e3:0e:45:
                    f3:bd:57:df:33:54:cd:1c:b5:a3:a3:da:5c:23:78:
                    12:8c:a5:62:1b:fa:ec:af:fb:a9:fb:a6:45:39:f6:
                    e9:40:59:7c:41:8b:b9:e9:79:91:2c:5b:50:fb:f4:
                    ea:b3:eb:00:a5:91:4b:74:a7:a8:5e:43:89:30:c2:
                    2a:e0:49:f8:f0:09:cd:ab:47:db:e1:49:20:de:f1:
                    c7:50:07:cd:86:e5:2e:cc:97:83:07:b6:00:3b:89:
                    6b:45:8f:de:7d:a5:3c:9f:f0:07:59:ad:64:31:a9:
                    f8:5b:ec:43:44:05:36:13:a5:16:36:42:4c:20:22:
                    9a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DB:BE:40:E0:74:D7:6E:93:3B:DF:76:B6:D9:02:64:2F:15:F3:E0
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Gtu-QOB0126TO992ttkCZC8V8-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:4bc7::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:a3:07:ea:b2:e3:97:01:f3:4d:f3:29:b1:96:09:f4:e0:25:
         4e:78:31:19:e1:ee:e1:1d:d0:b9:fc:bf:c3:51:b7:dc:f4:8c:
         44:00:1a:e9:9a:55:60:ec:41:81:60:7f:64:f2:89:17:5c:5a:
         57:e8:3c:c4:cc:ef:d3:4f:bb:2f:3a:8e:61:64:b1:24:3d:8d:
         d6:9b:0c:27:27:2e:14:c4:ec:ba:0e:48:3b:c6:d7:2c:05:79:
         bc:49:b9:01:5d:7a:fa:4d:bf:94:9d:5f:f6:88:99:5a:b9:5b:
         9d:0c:83:21:df:ef:ee:d1:61:de:0f:e7:d3:70:50:f4:d5:43:
         f4:d9:64:81:8b:82:e1:2b:f8:94:2d:f5:ce:4d:c9:1c:18:13:
         46:1a:84:49:76:1a:bb:ae:9d:41:a9:52:b7:a9:d7:22:49:ef:
         e3:83:2a:b6:d0:e9:ce:da:2f:ab:41:d5:c8:ae:18:91:dc:25:
         7a:fb:5e:dc:e5:6f:fd:92:a0:b5:79:60:a0:63:5f:15:fc:b9:
         10:47:db:3f:81:4b:ec:7b:31:83:04:d8:08:7c:96:64:29:22:
         fe:0e:19:a7:3b:45:7f:12:7e:ad:a9:84:f1:fd:2d:83:8f:23:
         6e:2f:1a:f2:8e:ce:ba:02:6b:20:e4:73:0e:9c:eb:a9:9d:4a:
         fb:a5:82:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----