Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e302e302f31372d3234203d3e203335393136.roa
File:                     3134382e3133352e302e302f31372d3234203d3e203335393136.roa (raw, json)
Hash identifier:          wLDWL9sptZQNY+CxM7pmRHlKlFjZkg0drEnGwSNpxlk=
Subject key identifier:   F2:E4:B8:33:2E:7B:32:20:C0:B7:FF:FA:B3:C0:56:44:BD:4C:E4:F6
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       78698E34930B6C9B7D4B680B03D5072E455BC6D4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e302e302f31372d3234203d3e203335393136.roa
Signing time:             Sun 16 Jul 2023 17:44:20 +0000
ROA not before:           Sun 16 Jul 2023 17:39:20 +0000
ROA not after:            Sun 14 Jul 2024 17:44:20 +0000
asID:                     35916
IP address blocks:        148.135.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:69:8e:34:93:0b:6c:9b:7d:4b:68:0b:03:d5:07:2e:45:5b:c6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Jul 16 17:39:20 2023 GMT
            Not After : Jul 14 17:44:20 2024 GMT
        Subject: CN=F2E4B8332E7B3220C0B7FFFAB3C05644BD4CE4F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:11:e9:a7:56:1b:a7:94:aa:3a:91:01:0a:81:
                    a2:71:96:0e:dd:f0:9b:a2:a1:7f:d6:bc:2f:dd:ce:
                    fe:9c:1a:6c:40:3c:33:72:ab:35:97:f9:4f:03:c5:
                    15:e1:0b:ee:90:6c:39:3f:ee:81:61:f0:0b:f5:bf:
                    b6:26:63:f9:20:9a:ec:f8:23:82:93:6f:3a:58:d1:
                    55:3f:8c:cd:64:8f:07:f5:ff:16:b6:4c:a9:2a:a4:
                    8f:95:a5:99:a1:d5:fb:11:ec:dd:6f:de:0e:7d:fb:
                    f5:6a:59:d4:3a:5c:8f:c2:6c:16:6d:d4:50:5f:5a:
                    34:2f:d2:f3:dc:0c:28:b1:d0:4d:76:30:85:e4:52:
                    4b:d7:a4:78:de:e3:e9:7d:0e:da:c5:65:8e:13:84:
                    5d:21:c3:a1:d8:55:7f:b9:75:6a:07:52:ce:94:47:
                    ef:67:5a:0b:d4:63:62:cd:4c:7f:89:5e:b0:6f:d4:
                    18:ad:00:97:c3:03:e8:f1:c1:16:cf:80:17:15:9d:
                    bc:0b:21:df:7d:89:ef:b6:16:87:e8:86:01:a7:ef:
                    b6:99:54:97:c4:c9:fa:cd:d8:7e:06:f0:a1:61:db:
                    67:51:65:55:58:7b:55:9b:2c:57:52:3a:37:10:fd:
                    53:a7:a2:2a:2e:3b:64:8c:ef:ed:e7:78:19:8a:31:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E4:B8:33:2E:7B:32:20:C0:B7:FF:FA:B3:C0:56:44:BD:4C:E4:F6
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e302e302f31372d3234203d3e203335393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.135.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a8:37:d7:a2:28:9e:93:65:4d:a5:71:41:7e:ca:38:cc:0f:c6:
         0d:83:89:a6:db:93:dd:8a:43:62:cd:29:d1:2f:95:a1:5a:c7:
         33:f5:cb:1d:f6:90:5e:dd:c8:ff:6e:ef:f6:b1:8c:1a:17:9f:
         7a:d4:91:01:de:a7:bc:51:a9:7f:ca:f2:4a:97:ce:97:5e:e8:
         61:47:e6:67:23:41:8e:0d:d6:c8:7d:1d:08:ea:fc:f5:a5:be:
         ed:26:2d:59:99:a3:7f:d4:8d:55:5b:08:ea:d0:5a:2e:bc:91:
         6d:8c:46:c6:c5:4a:44:4f:48:bb:78:92:56:0f:1c:c8:ae:79:
         24:fc:43:d0:3d:a2:0a:c2:d9:6b:a4:b0:a4:6a:20:96:a9:17:
         15:42:2c:a0:91:6d:f5:71:5c:ba:f4:9d:ce:e8:0b:7e:6b:2c:
         7e:49:a2:25:f5:a8:d9:67:bc:66:84:d5:67:b3:ab:1c:4f:c4:
         6e:30:2a:a6:c3:3a:92:5f:b5:61:0d:ca:ba:6b:c2:d9:1f:ff:
         c9:e3:0c:89:36:3b:53:62:4b:a3:e1:33:1a:07:3b:9d:87:f6:
         1f:e1:03:06:e8:91:b0:0a:95:75:89:fd:d3:f5:be:f7:bd:70:
         ed:88:8c:68:15:57:e6:50:68:ed:70:59:61:e3:41:80:f3:c8:
         91:20:86:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----