Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/3231322e31382e3131342e302f32342d3234203d3e20383334.roa
File:                     3231322e31382e3131342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          2EF7MOZ8iVqEMkUo8LQt6ucDtVcsIOstewJLKoHsopA=
Subject key identifier:   09:97:78:D9:DA:8E:9D:71:D7:25:CC:95:9F:6F:2B:1B:D7:E9:09:A2
Certificate issuer:       /CN=f6253299001f2d1a01a517056cd577f41c34eb71
Certificate serial:       705E1488F2163A0D97802544C76B946C15B0AB4D
Authority key identifier: F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9iUymQAfLRoBpRcFbNV39Bw063E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/3231322e31382e3131342e302f32342d3234203d3e20383334.roa
Signing time:             Sun 17 Sep 2023 00:00:08 +0000
ROA not before:           Sat 16 Sep 2023 23:55:08 +0000
ROA not after:            Sun 15 Sep 2024 00:00:08 +0000
asID:                     834
IP address blocks:        212.18.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5e:14:88:f2:16:3a:0d:97:80:25:44:c7:6b:94:6c:15:b0:ab:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6253299001f2d1a01a517056cd577f41c34eb71
        Validity
            Not Before: Sep 16 23:55:08 2023 GMT
            Not After : Sep 15 00:00:08 2024 GMT
        Subject: CN=099778D9DA8E9D71D725CC959F6F2B1BD7E909A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:46:fd:4e:a2:63:72:fc:2e:ad:45:af:3a:7f:
                    c9:90:87:68:51:9e:a2:6c:50:46:8a:d1:f1:ce:f3:
                    5d:74:1c:96:56:ea:f2:20:ab:19:34:df:3f:7a:27:
                    96:f7:40:6e:ba:1f:5c:26:d6:21:c8:f1:e4:ed:1f:
                    1e:59:96:46:7e:3a:92:d6:8c:42:80:cf:65:f6:ad:
                    44:6a:a8:07:e9:4e:2d:e4:ef:5b:65:2d:8c:de:df:
                    d1:14:97:a1:bf:c5:3f:1c:07:8a:09:1b:38:72:fe:
                    eb:24:da:79:cc:a3:b5:37:05:9c:a1:08:33:0b:87:
                    03:fa:87:4d:36:8c:6b:89:f0:4e:a6:60:4e:12:f6:
                    33:ba:6f:55:5b:cf:a9:2f:ac:04:86:3f:15:2b:af:
                    7c:3f:d7:5f:cb:97:d1:df:f8:06:f5:e8:67:37:35:
                    71:5b:50:6d:8b:00:1c:d3:15:fd:93:da:54:bf:90:
                    35:dc:e7:98:5e:05:be:0d:3a:41:92:5a:a5:dc:98:
                    f2:fa:28:f5:a0:ed:17:77:4f:1f:6c:86:5e:c7:0f:
                    42:c4:88:94:24:e1:c7:ae:29:b8:61:17:b2:f9:ab:
                    68:f2:8b:95:aa:ba:34:ab:d2:01:74:7a:e2:d0:cf:
                    ea:aa:c4:12:87:a1:15:7d:1b:67:08:96:03:4b:c1:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:97:78:D9:DA:8E:9D:71:D7:25:CC:95:9F:6F:2B:1B:D7:E9:09:A2
            X509v3 Authority Key Identifier:
                keyid:F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/F6253299001F2D1A01A517056CD577F41C34EB71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iUymQAfLRoBpRcFbNV39Bw063E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/3231322e31382e3131342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:9f:9b:50:84:dc:60:34:50:87:8c:b4:e9:2e:f3:fa:5b:24:
         b7:88:6e:46:f1:a9:18:50:d6:d9:8b:b6:e8:1d:d7:89:88:40:
         df:79:5e:f3:7d:41:2b:3d:98:fc:c4:c1:2c:e9:fa:9e:69:68:
         a5:dd:77:9f:2c:30:5a:30:44:8e:b9:4e:a6:64:89:36:70:33:
         07:07:71:7d:be:3a:74:4b:60:58:fd:31:f2:da:d4:90:8e:ab:
         fe:94:44:ce:c6:a1:9f:d7:f5:d1:f0:9d:23:21:b8:9e:d2:1c:
         14:26:92:03:fe:77:82:e8:08:49:a7:f9:e0:fd:82:9a:c7:b4:
         ab:d3:bc:4c:35:29:30:f6:4b:fe:93:95:32:04:76:55:3b:44:
         22:b4:7d:ed:de:8e:71:de:65:9f:47:56:0e:8a:19:f3:97:4e:
         a4:d8:de:51:bd:47:05:08:6a:16:66:8a:f2:d5:d6:2f:ed:3c:
         60:c1:66:35:53:31:c1:73:5e:a7:7e:bb:94:74:6a:fa:aa:74:
         85:b6:3a:5c:94:31:44:d4:f1:b7:54:89:a5:a7:11:81:0e:ea:
         65:04:de:dc:73:7b:77:b6:0e:da:9b:84:6f:b6:48:4d:f8:ef:
         d5:be:90:c6:cd:9d:f0:40:5c:c5:5e:d9:bd:53:ee:69:d4:2b:
         f1:74:f7:72
-----BEGIN CERTIFICATE-----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