Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
File:                     34352e3134382e3134332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          YU+nKs6XU1kGvNDOL5VJPCRvuhC0raZLk0FIseHBD/w=
Subject key identifier:   64:29:88:E8:20:2F:A4:F8:5A:3E:C1:AA:EE:03:28:17:C4:A5:42:21
Certificate issuer:       /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial:       1AA6913F394EA1B1FC9208264DDF7A4AAA6DED44
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
Signing time:             Mon 23 Oct 2023 09:41:37 +0000
ROA not before:           Mon 23 Oct 2023 09:36:37 +0000
ROA not after:            Mon 21 Oct 2024 09:41:37 +0000
asID:                     834
IP address blocks:        45.148.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a6:91:3f:39:4e:a1:b1:fc:92:08:26:4d:df:7a:4a:aa:6d:ed:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
        Validity
            Not Before: Oct 23 09:36:37 2023 GMT
            Not After : Oct 21 09:41:37 2024 GMT
        Subject: CN=642988E8202FA4F85A3EC1AAEE032817C4A54221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:09:39:05:c5:e1:db:60:dd:d3:b0:cc:86:
                    4a:c8:84:a6:9a:ab:41:b8:b6:b3:26:c1:75:20:aa:
                    c1:35:89:66:a9:61:d2:c1:3a:e3:4d:2f:17:35:a7:
                    1c:e0:82:10:b2:45:bf:d6:d3:58:5d:16:cb:a4:44:
                    2e:3c:65:61:b2:35:5a:56:87:68:70:dd:17:fc:f4:
                    41:26:83:c2:45:38:44:49:7b:06:25:42:bc:6c:23:
                    bc:62:35:92:e9:e2:28:c1:c1:36:a8:46:c6:a5:f6:
                    cb:dc:cd:9c:b2:ba:0f:1e:44:ac:73:4b:ad:10:b8:
                    78:e9:38:a4:fc:d4:27:6e:16:78:a8:6b:ab:ef:f9:
                    aa:c7:c7:e1:5d:84:a4:35:b1:16:1f:e3:60:08:63:
                    5d:e7:57:38:38:37:61:39:5e:47:38:69:f1:37:ed:
                    76:56:92:f2:fd:7d:6c:9b:9e:5d:17:78:57:d4:fd:
                    0f:da:bb:d9:7d:ab:a3:e5:88:12:26:6f:b0:27:1a:
                    82:54:b1:8e:db:25:cf:c7:95:87:6a:34:0a:61:b5:
                    2a:55:96:59:be:40:5c:39:0e:67:0a:19:90:0c:83:
                    82:cf:91:f7:4c:d6:15:54:39:91:2c:a0:f0:51:76:
                    9c:14:e8:43:ca:89:e5:f2:b3:19:73:2b:fa:6e:c3:
                    00:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:29:88:E8:20:2F:A4:F8:5A:3E:C1:AA:EE:03:28:17:C4:A5:42:21
            X509v3 Authority Key Identifier:
                keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:29:d9:cf:aa:57:f9:57:9e:8f:ed:af:67:17:ef:28:9b:34:
         f5:d4:fd:9b:12:ac:47:fe:7f:e0:97:02:09:1f:8d:01:f8:f8:
         98:d7:2e:54:b5:4b:38:b9:4e:11:b0:66:47:04:7c:82:7b:46:
         8b:d9:9b:35:17:0b:bb:7b:36:d2:e5:84:7e:20:34:7f:97:e7:
         7c:f5:b7:fd:7e:7d:7f:f8:2f:97:94:fb:6f:7f:9e:bc:52:80:
         dd:70:40:12:a3:07:61:9f:7a:a3:75:fa:37:cc:5a:2f:98:4a:
         75:fe:b2:ad:5f:c1:91:fb:7d:d3:f6:f4:9b:99:40:cf:7a:93:
         ee:9f:05:ec:95:73:a4:d2:cd:b5:fb:09:5c:df:d0:eb:4f:00:
         df:bb:d9:05:d9:56:77:6f:26:8f:59:81:95:d4:74:9b:27:01:
         f2:82:4e:20:21:a3:96:bd:3d:2c:c2:f7:0e:6c:63:45:ed:ac:
         8f:57:47:08:b2:78:50:00:20:71:89:91:c0:c6:11:c7:af:b3:
         fc:2f:55:72:9d:29:c4:a0:3e:6b:e5:e0:71:99:0a:72:e7:bc:
         66:c1:e7:47:33:c1:cf:73:24:a2:fd:fa:46:84:52:1e:47:46:
         a0:87:a8:e6:87:8b:cf:0c:c2:89:5b:a3:dd:26:52:37:ee:8e:
         b3:d2:d2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----