Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e302e302f32302d3230203d3e2037303239.roa
File:                     3134372e37392e302e302f32302d3230203d3e2037303239.roa (raw, json)
Hash identifier:          ITdmyercs2JcX5ghOIzlxvUQG3R4K+7UCle4+SPb53c=
Subject key identifier:   06:F2:35:EA:18:64:02:08:0D:56:5D:BB:D2:B8:B6:1B:33:66:32:4C
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       66BB4D97C8529CDC1BE2C84E1FFF77C3A1CA66DC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e302e302f32302d3230203d3e2037303239.roa
Signing time:             Wed 06 Mar 2024 18:58:28 +0000
ROA not before:           Wed 06 Mar 2024 18:53:28 +0000
ROA not after:            Wed 05 Mar 2025 18:58:28 +0000
asID:                     7029
IP address blocks:        147.79.0.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 23 Mar 2024 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bb:4d:97:c8:52:9c:dc:1b:e2:c8:4e:1f:ff:77:c3:a1:ca:66:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Mar  6 18:53:28 2024 GMT
            Not After : Mar  5 18:58:28 2025 GMT
        Subject: CN=06F235EA186402080D565DBBD2B8B61B3366324C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:52:23:cc:05:21:46:fd:7b:7b:6f:ed:9d:
                    1f:61:a3:24:74:8b:e7:64:cc:d6:4e:1e:9f:17:38:
                    19:b4:5b:ca:32:b7:f9:97:ef:d0:bf:d5:ec:09:45:
                    31:ab:03:1f:4f:fe:55:26:d5:d9:a8:97:4e:d4:a9:
                    32:83:2d:67:08:78:71:3a:25:4f:8a:8f:05:0a:d5:
                    50:9d:aa:cf:19:9f:f0:cc:27:9b:38:a3:ed:6e:86:
                    97:ba:1d:2b:4a:e9:61:90:37:7f:3e:b3:9c:fa:bb:
                    62:2d:70:d3:ed:b1:b4:c3:27:1e:10:bd:27:9a:ad:
                    80:16:11:60:a7:d8:71:0c:f8:0b:e2:b0:93:9a:3f:
                    99:ff:30:e3:ae:e0:6a:8d:a3:b0:56:19:0a:a9:90:
                    62:00:51:19:7f:09:d8:e3:69:1a:6f:e3:79:f0:e3:
                    a0:cd:39:94:8a:46:00:56:8e:b2:df:9c:32:90:24:
                    e3:e7:c0:6c:20:92:be:71:71:0b:f1:ec:1f:a6:4c:
                    9d:42:b2:0e:d3:c8:f9:1d:a2:5b:a9:71:af:9d:77:
                    7f:b8:ef:e0:d5:13:df:89:ea:9a:1e:3b:a1:17:d9:
                    07:3f:a8:65:e2:f6:49:44:a6:8c:c1:aa:0d:20:ab:
                    27:78:e3:62:b5:1d:a7:04:96:41:9b:26:8d:bc:5d:
                    25:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F2:35:EA:18:64:02:08:0D:56:5D:BB:D2:B8:B6:1B:33:66:32:4C
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e302e302f32302d3230203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.79.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:92:79:b2:87:e9:43:9b:f5:80:10:94:5a:32:d2:74:cb:3c:
         8c:18:01:dd:3a:67:a4:65:26:11:ea:30:de:c7:9c:b2:3e:47:
         44:9a:9f:ff:13:42:68:ce:db:3d:de:00:89:4c:09:93:4c:5e:
         73:1a:f3:33:6c:b9:12:0e:95:a5:ea:d5:18:00:a9:3c:38:f6:
         ae:1a:22:80:be:55:46:1a:41:00:78:ab:07:7d:73:60:f6:c4:
         ca:c9:35:28:ed:db:3e:43:1d:40:c3:da:b4:3e:d2:59:d5:c3:
         d9:99:8f:70:c0:d6:89:8f:9f:1a:25:37:7a:3e:f0:14:0d:d4:
         11:ae:55:a5:4e:79:fe:f4:e8:64:ff:09:f7:4e:49:0b:77:bd:
         b5:d5:09:f1:70:17:fb:52:bd:e9:0a:94:db:02:20:eb:c8:0f:
         8f:07:5c:5e:6a:cb:b6:26:fa:aa:3e:1d:7b:d0:a3:5c:86:f0:
         bb:0a:c8:d5:14:62:6d:1e:66:45:c5:ac:45:80:b4:fe:c9:ce:
         1b:fd:d1:55:4d:4e:03:e0:60:98:63:a2:18:ed:0f:7f:2a:b4:
         68:33:78:ec:47:f0:db:99:b3:79:7d:fe:46:4e:68:a2:a7:10:
         13:f8:ba:19:27:36:65:7e:1e:e4:6a:96:92:35:22:90:41:e8:
         9d:0c:8d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----