Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/TGK-DyujhsdxlX7bivVm84dNqv8.roa
File:                     TGK-DyujhsdxlX7bivVm84dNqv8.roa (raw, json)
Hash identifier:          aHGz5MdOIkWpFCidJIgx086yaDaZ357i8ni1sWYJUKs=
Subject key identifier:   4C:62:BE:0F:2B:A3:86:C7:71:95:7E:DB:8A:F5:66:F3:87:4D:AA:FF
Certificate issuer:       /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial:       01856CEF2578DED0A89E1E5988B61E99B9CA
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/TGK-DyujhsdxlX7bivVm84dNqv8.roa
Signing time:             Sun 01 Jan 2023 10:44:50 +0000
ROA not before:           Sun 01 Jan 2023 10:44:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15542
IP address blocks:        193.177.166.0/24 maxlen: 24
                          2001:67c:45c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ef:25:78:de:d0:a8:9e:1e:59:88:b6:1e:99:b9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
        Validity
            Not Before: Jan  1 10:44:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c62be0f2ba386c771957edb8af566f3874daaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:51:cd:da:7d:65:5a:99:45:38:df:33:6c:
                    04:aa:6b:a4:1f:b4:12:f1:4d:a7:66:7b:2e:5f:0f:
                    61:eb:4b:fe:73:a9:4e:5e:cb:68:df:4c:9b:23:5d:
                    65:7f:11:6b:4b:3c:a0:6b:62:d1:15:59:f3:35:3c:
                    df:33:42:15:c2:8c:12:27:66:92:f3:c6:4f:85:e1:
                    48:4c:23:19:0b:8d:12:ab:0a:70:42:d4:01:e6:7e:
                    d4:08:b2:ae:b1:58:7e:3c:5c:9f:f3:fc:ec:26:1c:
                    2e:d0:fd:cd:1c:77:33:06:8a:9a:81:2a:1c:f4:16:
                    30:0e:12:6f:2f:34:93:c3:42:82:10:30:b1:bb:38:
                    4c:59:49:0a:e6:e9:ab:6d:74:09:59:06:d4:ec:e2:
                    8f:c4:f4:f7:2b:0a:fc:fd:be:a5:8d:8f:57:c0:98:
                    41:9b:f1:d1:5b:e5:ab:63:32:07:4d:70:61:39:f8:
                    62:d1:e9:c9:f5:b5:8d:59:b8:8d:ce:c5:62:95:bc:
                    8d:ee:a9:28:3d:f4:22:e8:45:03:f6:ed:0b:0e:a8:
                    c5:bc:69:72:41:56:21:87:fc:de:05:70:69:9e:7c:
                    fe:0d:ac:52:50:45:6a:b9:5d:50:94:0b:55:9d:35:
                    ff:ef:1e:d4:ab:20:cd:e2:b4:98:46:46:69:22:58:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:62:BE:0F:2B:A3:86:C7:71:95:7E:DB:8A:F5:66:F3:87:4D:AA:FF
            X509v3 Authority Key Identifier:
                keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/TGK-DyujhsdxlX7bivVm84dNqv8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.177.166.0/24
                IPv6:
                  2001:67c:45c::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:1a:3f:e1:4c:fe:bb:d3:37:15:05:94:f8:79:cf:5f:0d:
         34:fc:10:a2:f4:f4:0c:83:6c:c2:38:d7:5a:0f:bc:4e:e5:c7:
         1c:60:d4:46:6e:ac:c9:8a:c5:92:2b:a8:61:7c:bf:06:71:4e:
         fd:b5:65:5d:b3:c1:86:81:68:60:81:b6:3d:2b:f2:16:f0:6d:
         c5:1b:a8:50:01:93:ff:a4:b8:7b:1b:00:e1:0d:8a:4d:6d:d5:
         67:4b:30:1c:11:ae:17:04:64:b7:10:27:41:a4:ba:ce:b7:83:
         ae:4e:cf:97:97:52:85:8c:b8:e3:b8:89:cd:a6:1c:9f:4b:09:
         d1:f5:09:02:b3:57:cb:ac:47:8d:2d:c5:1e:05:17:67:81:be:
         e5:bb:26:82:04:b6:18:1e:fd:3b:88:f4:48:38:95:57:82:e1:
         44:81:42:02:80:c4:93:71:5e:03:de:70:1b:e5:2e:d4:7e:54:
         a5:c8:64:12:85:5c:3a:fc:9a:38:c5:43:03:9a:96:71:6b:cb:
         1d:e3:ff:ca:a5:12:47:18:a9:a2:35:93:11:54:23:2b:94:56:
         08:2f:77:56:7a:ab:8d:8e:05:d4:2b:91:ba:a9:23:f0:a4:e9:
         00:32:d4:94:23:9a:3c:5d:ae:b8:97:f8:e0:a5:fa:bb:d5:1d:
         7d:15:41:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----