Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/TwaCnwFKEcDFPIolDwb0gU9AOKE.roa
File:                     TwaCnwFKEcDFPIolDwb0gU9AOKE.roa (raw, json)
Hash identifier:          4BDibiAeRE5T6Dc3ejhTdWQqJw5knAF8U2K+HMpi908=
Subject key identifier:   4F:06:82:9F:01:4A:11:C0:C5:3C:8A:25:0F:06:F4:81:4F:40:38:A1
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       018BEE71DD24D5F8A73EA1BE676A1780BA8C
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/TwaCnwFKEcDFPIolDwb0gU9AOKE.roa
Signing time:             Mon 20 Nov 2023 20:35:21 +0000
ROA not before:           Mon 20 Nov 2023 20:35:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212786
IP address blocks:        2a0e:5780::/29 maxlen: 29
                          2a0e:2b00::/29 maxlen: 29
                          2a09:e980::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ee:71:dd:24:d5:f8:a7:3e:a1:be:67:6a:17:80:ba:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: Nov 20 20:35:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f06829f014a11c0c53c8a250f06f4814f4038a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:1e:dd:79:65:f0:45:50:82:95:d2:4d:8b:
                    d9:ca:f3:e7:33:2c:e6:0c:54:88:a7:d8:9b:a5:7d:
                    3e:6b:70:d2:0c:59:d5:1f:c1:93:47:e5:0d:b6:ef:
                    17:85:3c:07:25:06:b6:da:30:98:49:a2:95:f8:49:
                    55:34:6c:3c:88:1d:1c:bc:a5:73:66:35:e5:3b:d5:
                    1f:53:85:27:b3:1a:7c:f7:c3:93:86:7e:00:c8:d5:
                    0f:d7:dc:08:5d:2c:61:f7:5f:15:32:77:74:f6:1b:
                    08:62:a9:e8:de:72:5f:ad:38:82:f5:6a:4b:f4:ad:
                    0f:35:31:7d:84:fa:8b:3c:c8:07:53:d6:b6:26:aa:
                    5b:85:9b:c0:a9:41:0d:fe:82:0a:a8:81:18:50:11:
                    10:f9:4f:25:12:e5:7b:2d:a8:b6:aa:59:9e:3f:15:
                    b2:a5:2e:ab:a0:2c:ba:68:82:4f:c5:41:04:9d:f7:
                    ff:b1:a4:4c:26:59:53:21:da:2b:71:dc:db:83:35:
                    7e:9d:fa:27:99:b6:cd:be:14:32:a1:5d:44:4e:32:
                    b0:5a:5f:e9:67:df:60:26:e9:8d:68:57:ef:25:2a:
                    29:a4:a9:7e:71:cd:e3:96:8d:4d:89:d9:d8:0a:96:
                    b2:84:b9:d7:f9:c6:ac:ec:18:0a:3d:47:7a:aa:a2:
                    44:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:06:82:9F:01:4A:11:C0:C5:3C:8A:25:0F:06:F4:81:4F:40:38:A1
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/TwaCnwFKEcDFPIolDwb0gU9AOKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:e980::/29
                  2a0e:2b00::/29
                  2a0e:5780::/29

    Signature Algorithm: sha256WithRSAEncryption
         38:20:e3:3e:86:6c:7e:f3:e2:35:53:ec:23:a0:92:68:2a:74:
         bf:f5:25:e1:59:eb:07:59:1e:30:a1:49:70:5f:b1:82:cd:1c:
         88:40:29:22:c5:6b:c7:1f:e7:bc:50:e2:46:f0:18:7d:32:29:
         1d:76:4a:ee:70:82:c7:b7:2e:0f:aa:53:e0:75:4e:10:41:50:
         69:93:e5:ad:8a:a0:cd:89:c7:ad:5a:e2:16:20:56:1a:21:92:
         18:85:94:68:bd:62:41:f7:37:00:17:f6:6f:ef:3f:58:d0:df:
         bb:c8:98:b1:9b:4e:78:00:43:b1:e1:c7:c6:62:e2:f5:4b:a4:
         00:48:46:53:8a:b9:6e:5d:02:69:6a:f4:43:d2:d8:21:b2:e8:
         0f:0b:e2:09:30:b9:11:e8:54:4d:a0:b0:cb:3a:9a:a4:00:bb:
         04:d7:e8:ef:51:82:97:bd:0a:00:88:02:07:76:7d:78:0d:a8:
         4c:e5:1a:db:a6:df:0f:ab:33:c6:07:09:3d:23:09:2c:af:bc:
         9d:2e:fc:b8:5f:b7:03:fd:c1:5f:0d:96:34:2a:06:a9:65:bd:
         09:92:b8:5c:f8:f1:5d:b8:8d:b6:e7:f6:6b:00:78:dd:92:a7:
         40:5c:c7:2b:ed:23:27:af:81:ab:60:12:f5:de:b2:89:57:32:
         98:98:20:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----