Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e3136302e302f32302d3230203d3e2030.roa
File:                     3134382e3133352e3136302e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier:          plbCX4aOLkcanXz2RslB2UXnNGXOqvDy2e9Nrkn8EWI=
Subject key identifier:   6E:F7:60:08:99:D5:43:F5:2E:75:60:BB:FB:BD:43:0A:F7:02:56:E7
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       641AE58130C5063FD1BDBC1FA77A9C2AB3A9488C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e3136302e302f32302d3230203d3e2030.roa
Signing time:             Fri 05 Jan 2024 10:05:08 +0000
ROA not before:           Fri 05 Jan 2024 10:00:08 +0000
ROA not after:            Fri 03 Jan 2025 10:05:08 +0000
asID:                     0
IP address blocks:        148.135.160.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1a:e5:81:30:c5:06:3f:d1:bd:bc:1f:a7:7a:9c:2a:b3:a9:48:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Jan  5 10:00:08 2024 GMT
            Not After : Jan  3 10:05:08 2025 GMT
        Subject: CN=6EF7600899D543F52E7560BBFBBD430AF70256E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ca:84:81:78:1e:d9:7d:0e:d8:f1:16:77:e7:
                    7b:cb:25:ee:56:68:5d:cf:0a:38:4e:19:df:2c:43:
                    45:31:57:50:9b:ec:ee:16:5f:c9:51:dc:e9:e6:a5:
                    f0:b7:4a:28:63:26:96:92:3e:73:5f:06:d0:84:e7:
                    cc:b0:6f:63:e3:74:02:60:14:e2:4c:c1:43:12:f4:
                    02:fb:d3:ea:e8:0c:65:cf:be:1e:7d:48:bd:cd:f6:
                    00:3d:b4:ee:39:d2:73:97:e4:90:fa:d9:94:c5:29:
                    83:b4:78:ad:d1:bd:77:cf:56:85:ab:9b:e2:84:6a:
                    e7:0d:ef:ea:a8:e9:57:a5:79:e4:e2:2d:b7:37:36:
                    24:83:3d:b4:b8:b2:2d:8b:f8:aa:86:31:1a:c0:6b:
                    74:07:5f:ea:c2:8a:ec:ff:e3:eb:24:6b:d4:74:0e:
                    4d:8f:ce:a8:16:37:97:e0:3e:e6:1e:e7:a2:d1:49:
                    23:67:9d:83:be:4b:31:97:67:2e:5c:ef:e7:d8:2c:
                    fe:d4:58:27:fb:24:cd:a6:34:e2:80:df:df:83:ab:
                    55:b7:65:cf:e3:0e:90:05:bd:8c:e7:c7:93:ab:95:
                    19:d6:99:7e:0c:2d:80:70:28:d1:e0:00:bd:50:8e:
                    52:9d:05:7d:20:73:33:6f:d6:14:d0:2a:6f:7d:87:
                    98:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F7:60:08:99:D5:43:F5:2E:75:60:BB:FB:BD:43:0A:F7:02:56:E7
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134382e3133352e3136302e302f32302d3230203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.135.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:8f:d0:b9:ef:a0:54:f2:e2:d0:c3:5e:94:9d:6f:dc:13:90:
         11:fc:07:d7:88:37:7f:8a:34:60:11:1d:75:67:97:b7:a9:a8:
         de:63:0a:5a:79:a6:4a:a1:61:df:e3:0d:4e:ce:08:21:9e:46:
         03:09:55:fe:99:bc:95:91:ca:f4:f1:4e:4b:5c:1b:ad:67:03:
         bc:7b:3b:bd:71:26:39:b2:4f:62:b7:a2:48:fb:7f:29:07:ea:
         39:6f:57:03:92:f9:b0:36:66:6c:c1:c1:14:62:33:40:76:53:
         1e:1f:75:f5:2c:5b:6d:74:ac:3b:c6:7d:60:e6:0a:ad:94:b3:
         7c:30:b8:6c:bd:21:0d:f7:cd:e5:37:e9:12:63:44:a1:bd:35:
         8d:42:8c:dc:3f:a5:1e:fe:59:ce:fb:ce:59:d5:47:7c:51:e0:
         96:fb:22:df:e4:c8:3e:0a:2b:b5:9f:42:26:bd:55:cf:dc:a3:
         10:fe:01:88:c8:7b:ba:78:b0:33:43:ac:f1:8c:74:90:e9:4c:
         ed:64:08:f9:31:7c:9b:6b:81:ee:86:8f:64:55:20:8e:9d:cf:
         9b:9b:52:a3:ce:87:55:96:9b:00:9a:dd:73:a2:1e:66:1d:16:
         81:cf:00:20:1d:01:c6:8c:41:91:9f:33:e7:30:7e:ee:0b:6f:
         c9:2d:0e:91
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUZBrlgTDFBj/Rvbwfp3qcKrOpSIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAxMDUxMDAwMDhaFw0yNTAxMDMxMDA1MDhaMDMxMTAvBgNV
BAMTKDZFRjc2MDA4OTlENTQzRjUyRTc1NjBCQkZCQkQ0MzBBRjcwMjU2RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdyoSBeB7ZfQ7Y8RZ353vLJe5W
aF3PCjhOGd8sQ0UxV1Cb7O4WX8lR3OnmpfC3SihjJpaSPnNfBtCE58ywb2PjdAJg
FOJMwUMS9AL70+roDGXPvh59SL3N9gA9tO450nOX5JD62ZTFKYO0eK3RvXfPVoWr
m+KEaucN7+qo6VeleeTiLbc3NiSDPbS4si2L+KqGMRrAa3QHX+rCiuz/4+ska9R0
Dk2PzqgWN5fgPuYe56LRSSNnnYO+SzGXZy5c7+fYLP7UWCf7JM2mNOKA39+Dq1W3
Zc/jDpAFvYznx5OrlRnWmX4MLYBwKNHgAL1QjlKdBX0gczNv1hTQKm99h5hjAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUbvdgCJnVQ/UudWC7+71DCvcCVucwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM4MmUzMTMzMzUyZTMx
MzYzMDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElIegMA0G
CSqGSIb3DQEBCwUAA4IBAQCnj9C576BU8uLQw16UnW/cE5AR/AfXiDd/ijRgER11
Z5e3qajeYwpaeaZKoWHf4w1OzgghnkYDCVX+mbyVkcr08U5LXButZwO8ezu9cSY5
sk9it6JI+38pB+o5b1cDkvmwNmZswcEUYjNAdlMeH3X1LFttdKw7xn1g5gqtlLN8
MLhsvSEN983lN+kSY0ShvTWNQozcP6Ue/lnO+85Z1Ud8UeCW+yLf5Mg+Ciu1n0Im
vVXP3KMQ/gGIyHu6eLAzQ6zxjHSQ6UztZAj5MXyba4Huho9kVSCOnc+bm1KjzodV
lpsAmt1zoh5mHRaBzwAgHQHGjEGRnzPnMH7uC2/JLQ6R
-----END CERTIFICATE-----