Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/3231322e31382e3131342e302f32342d3234203d3e203631333137.roa
File:                     3231322e31382e3131342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          vcfS9mKRwQegWgr2yQzEfvITUhzwzF7+Ks2jwZc7S1Q=
Subject key identifier:   31:1C:00:44:46:BC:22:14:67:F4:BC:97:A1:77:10:C2:5F:F9:D5:45
Certificate issuer:       /CN=f6253299001f2d1a01a517056cd577f41c34eb71
Certificate serial:       148650914BDA68DAF4D57E05EBA7BC9BA81340B4
Authority key identifier: F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9iUymQAfLRoBpRcFbNV39Bw063E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/3231322e31382e3131342e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 23 Mar 2023 16:11:33 +0000
ROA not before:           Thu 23 Mar 2023 16:06:33 +0000
ROA not after:            Thu 21 Mar 2024 16:11:33 +0000
asID:                     61317
IP address blocks:        212.18.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:86:50:91:4b:da:68:da:f4:d5:7e:05:eb:a7:bc:9b:a8:13:40:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6253299001f2d1a01a517056cd577f41c34eb71
        Validity
            Not Before: Mar 23 16:06:33 2023 GMT
            Not After : Mar 21 16:11:33 2024 GMT
        Subject: CN=311C004446BC221467F4BC97A17710C25FF9D545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:99:42:1e:6a:50:d7:a3:ab:dc:3d:d4:04:c6:
                    1c:f7:91:45:dc:a8:49:d8:64:06:d4:09:29:cb:c7:
                    6d:c8:ec:73:e9:e3:e1:35:45:70:5e:87:56:f8:00:
                    7a:7c:7e:94:32:32:f7:4f:75:dd:50:39:d5:d6:87:
                    a8:52:6c:cf:11:21:c8:5c:15:cb:f4:f4:fb:d2:47:
                    5c:3e:a2:98:d4:04:01:68:67:04:ad:66:16:bb:0a:
                    8e:15:93:78:3a:06:41:fb:03:cd:0f:c7:05:6a:92:
                    89:fc:40:9a:26:a6:40:a0:92:83:22:08:42:a8:e0:
                    2b:a5:d8:7a:e3:0c:0d:7c:da:4a:9b:70:16:03:e6:
                    a5:7f:af:61:4c:b0:47:4d:ad:35:c1:df:95:e7:73:
                    1c:79:5c:82:e5:01:ab:6a:f0:04:6b:a6:cf:91:a8:
                    c6:36:43:b6:1b:8c:6e:8b:95:b6:fb:6e:3e:d9:89:
                    82:dd:c1:a6:07:ea:d0:3a:82:28:fa:3c:7c:bf:ad:
                    a5:ea:df:e4:f9:41:91:57:83:01:3a:88:3b:24:b7:
                    db:a9:5f:cb:69:db:e8:b6:13:7d:49:7a:80:09:75:
                    03:5b:49:ef:73:e9:12:1b:b4:38:0f:27:f1:77:11:
                    dc:05:c6:db:5c:0e:0d:04:34:31:53:4a:d9:14:f3:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1C:00:44:46:BC:22:14:67:F4:BC:97:A1:77:10:C2:5F:F9:D5:45
            X509v3 Authority Key Identifier:
                keyid:F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/F6253299001F2D1A01A517056CD577F41C34EB71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iUymQAfLRoBpRcFbNV39Bw063E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/3231322e31382e3131342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:07:cb:de:7e:bc:20:03:72:4a:ba:51:ea:04:72:3c:ea:8a:
         e5:9f:2d:c5:ce:57:d3:ff:cf:36:81:24:74:c0:52:02:c5:77:
         b0:8b:ca:42:14:f3:ad:b5:42:00:0f:da:2d:24:7f:c6:8f:45:
         1e:e0:69:24:bb:a6:03:41:2e:07:94:79:48:26:2c:53:0b:79:
         bc:e9:b3:4b:87:ee:92:f0:e0:d4:fa:61:e5:6a:77:76:e1:ae:
         17:09:af:76:c0:d0:03:e4:0d:6f:c8:05:71:aa:4c:49:12:6c:
         c1:a6:15:dc:73:24:21:13:f1:12:e2:83:10:43:46:1d:49:6c:
         05:58:fa:e6:1f:74:15:93:7b:46:3c:c8:44:c2:89:05:05:7b:
         d0:67:0a:ab:76:e6:99:62:56:82:47:8d:e3:43:62:ac:b4:8c:
         84:98:de:6e:7d:bc:7d:7b:d6:84:13:73:92:d6:80:8e:93:8a:
         d9:58:9e:27:7b:0d:b5:94:56:49:04:36:cb:c3:49:7c:59:eb:
         ab:02:25:6c:09:b6:db:2e:e2:f2:14:66:7c:08:82:93:50:ed:
         0f:90:16:f4:95:f7:86:d9:77:57:a5:07:5d:47:40:49:3c:93:
         2f:1f:09:e8:8e:a0:94:1f:01:b9:ed:2a:c9:c9:cd:af:78:7a:
         14:05:ca:4c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUFIZQkUvaaNr01X4F66e8m6gTQLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjYyNTMyOTkwMDFmMmQxYTAxYTUxNzA1NmNkNTc3ZjQx
YzM0ZWI3MTAeFw0yMzAzMjMxNjA2MzNaFw0yNDAzMjExNjExMzNaMDMxMTAvBgNV
BAMTKDMxMUMwMDQ0NDZCQzIyMTQ2N0Y0QkM5N0ExNzcxMEMyNUZGOUQ1NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdmUIealDXo6vcPdQExhz3kUXc
qEnYZAbUCSnLx23I7HPp4+E1RXBeh1b4AHp8fpQyMvdPdd1QOdXWh6hSbM8RIchc
Fcv09PvSR1w+opjUBAFoZwStZha7Co4Vk3g6BkH7A80PxwVqkon8QJompkCgkoMi
CEKo4Cul2HrjDA182kqbcBYD5qV/r2FMsEdNrTXB35Xncxx5XILlAatq8ARrps+R
qMY2Q7YbjG6Llbb7bj7ZiYLdwaYH6tA6gij6PHy/raXq3+T5QZFXgwE6iDskt9up
X8tp2+i2E31JeoAJdQNbSe9z6RIbtDgPJ/F3EdwFxttcDg0ENDFTStkU88udAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMRwAREa8IhRn9LyXoXcQwl/51UUwHwYDVR0j
BBgwFoAU9iUymQAfLRoBpRcFbNV39Bw063EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjUzNDZmMzItZjgwZS00NGI3LTg3NzctNTJjOTQ1MWEx
Y2M4LzAvRjYyNTMyOTkwMDFGMkQxQTAxQTUxNzA1NkNENTc3RjQxQzM0RUI3MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlpVXltUUFmTFJvQnBSY0ZiTlYzOUJ3
MDYzRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjUzNDZmMzIt
ZjgwZS00NGI3LTg3NzctNTJjOTQ1MWExY2M4LzAvMzIzMTMyMmUzMTM4MmUzMTMx
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1BJyMA0GCSqGSIb3DQEBCwUAA4IBAQAMB8vefrwgA3JKulHqBHI86orlny3FzlfT
/882gSR0wFICxXewi8pCFPOttUIAD9otJH/Gj0Ue4Gkku6YDQS4HlHlIJixTC3m8
6bNLh+6S8ODU+mHland24a4XCa92wNAD5A1vyAVxqkxJEmzBphXccyQhE/ES4oMQ
Q0YdSWwFWPrmH3QVk3tGPMhEwokFBXvQZwqrduaZYlaCR43jQ2KstIyEmN5ufbx9
e9aEE3OS1oCOk4rZWJ4new21lFZJBDbLw0l8WeurAiVsCbbbLuLyFGZ8CIKTUO0P
kBb0lfeG2XdXpQddR0BJPJMvHwnojqCUHwG57SrJyc2veHoUBcpM
-----END CERTIFICATE-----