Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137352e302f32342d3234203d3e20323035333230.roa
File:                     3138352e3137322e3137352e302f32342d3234203d3e20323035333230.roa (raw, json)
Hash identifier:          Cl/kbdtW182GvdUrtpCFxnFMP9BLb1v6Ac2Edjn9zAM=
Subject key identifier:   E7:76:9C:99:EB:DB:2B:4E:10:07:C7:97:EB:A2:B7:92:CF:F1:DB:3E
Certificate issuer:       /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial:       5DB39059D682BE0CF6B9C1E90D2D2865CAA22C8F
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137352e302f32342d3234203d3e20323035333230.roa
Signing time:             Fri 19 May 2023 11:28:07 +0000
ROA not before:           Fri 19 May 2023 11:23:07 +0000
ROA not after:            Fri 17 May 2024 11:28:07 +0000
asID:                     205320
IP address blocks:        185.172.175.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b3:90:59:d6:82:be:0c:f6:b9:c1:e9:0d:2d:28:65:ca:a2:2c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
        Validity
            Not Before: May 19 11:23:07 2023 GMT
            Not After : May 17 11:28:07 2024 GMT
        Subject: CN=E7769C99EBDB2B4E1007C797EBA2B792CFF1DB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:89:e9:c4:33:90:38:84:62:de:22:84:35:
                    ef:38:53:7d:90:7c:46:44:c5:8b:e3:2c:07:c9:31:
                    5c:13:15:61:59:37:31:ad:08:39:ee:2d:29:9e:1d:
                    5f:89:2b:67:9e:6d:29:68:f3:b7:70:ee:d5:ec:f5:
                    fd:f8:27:47:2e:03:0b:4a:ca:b1:c3:af:2e:56:be:
                    24:c2:1e:d9:88:fb:d8:07:ae:11:ce:34:9c:25:6a:
                    c3:8b:40:25:69:c0:7a:d3:98:28:67:a2:29:15:5b:
                    c6:80:2e:c8:5c:5d:ed:4e:5b:f9:0a:5e:99:a1:d0:
                    d5:c1:e1:42:db:af:24:03:29:3c:59:50:c8:4f:20:
                    b8:6c:01:d5:11:4c:65:f4:88:f8:e3:b4:77:10:40:
                    f2:c7:3c:8e:a0:2d:6f:b8:51:fd:76:c3:c9:ac:2f:
                    a2:13:3c:c4:95:d6:15:11:05:fe:9a:e1:fd:38:74:
                    2a:07:5a:e2:3c:55:79:75:d7:59:c6:89:f0:4c:ad:
                    d8:f7:5d:67:b8:19:46:da:f9:4a:bd:b1:8d:a8:18:
                    08:66:dc:e6:33:40:53:f3:6a:48:9c:91:09:6f:e3:
                    3d:77:f3:65:68:5b:b7:9f:eb:54:82:63:b0:8b:54:
                    05:83:94:81:97:c3:b5:c5:27:48:0f:0b:38:63:d7:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:76:9C:99:EB:DB:2B:4E:10:07:C7:97:EB:A2:B7:92:CF:F1:DB:3E
            X509v3 Authority Key Identifier:
                keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137352e302f32342d3234203d3e20323035333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.172.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:bf:0e:0d:a9:64:39:a1:9b:22:80:fb:32:14:ae:d3:0c:60:
         b8:83:b9:c3:db:a4:1c:84:af:f3:99:0c:2f:50:da:89:ed:2f:
         ae:ca:9d:3c:7e:74:9c:6e:a2:02:62:89:97:bd:f4:c8:61:83:
         bf:2c:9d:7a:45:28:e7:bb:44:44:d9:c9:fe:4b:e1:7f:1a:4f:
         dc:18:c6:6f:56:d1:f9:9f:c3:ab:87:8f:68:64:ec:97:74:b7:
         f4:58:b2:87:f5:ae:fd:72:d2:82:43:e5:b2:a2:e2:2d:80:cc:
         c1:ed:49:2b:b9:42:33:b8:6b:74:94:34:32:51:d5:32:58:e4:
         d7:60:f9:d9:56:b2:05:0c:76:7f:54:6b:dc:1b:a2:df:3a:42:
         a5:31:70:de:24:5a:a1:ab:0d:59:47:92:ca:1b:7c:78:15:25:
         83:d2:5b:34:ea:81:81:72:7a:4e:63:75:c3:d9:f1:b8:da:c8:
         3a:3b:36:1d:b0:9b:fa:56:54:8f:f8:2a:d9:ae:00:77:24:1c:
         21:49:70:23:8e:b1:c0:cf:61:41:d7:f9:40:95:c7:cc:1f:77:
         85:06:a5:35:9f:a3:1b:b0:94:68:05:d9:d7:8c:69:34:eb:e0:
         56:46:42:7b:8b:8e:a9:14:52:96:dc:bf:96:7c:21:a7:fa:93:
         f9:ff:8f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----