Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/5/32332e3137372e38382e302f32342d3234203d3e20323136343632.roa
File:                     32332e3137372e38382e302f32342d3234203d3e20323136343632.roa (raw, json)
Hash identifier:          mPHzzBDxiumDGYXWElIYKVOdoCzANrvI5Nhq5UI9FSw=
Subject key identifier:   4D:FB:BF:B5:BA:A1:87:20:46:36:B9:88:91:8A:DC:F9:47:AB:8F:D2
Certificate issuer:       /CN=96a2b0e2d1ed38ae6fa24f6e3eae4950e503abf9957077da6e
Certificate serial:       44393AA905EA8329AD755A688071CD669BADE445
Authority key identifier: 80:2F:06:87:6C:FA:0F:E0:30:90:97:CF:7C:0C:EE:45:53:D2:D2:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158/96a2b0e2d1ed38ae6fa24f6e3eae4950e503abf9957077da6e.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/5/32332e3137372e38382e302f32342d3234203d3e20323136343632.roa
Signing time:             Wed 22 May 2024 18:35:47 +0000
ROA not before:           Wed 22 May 2024 18:30:47 +0000
ROA not after:            Wed 21 May 2025 18:35:47 +0000
asID:                     216462
IP address blocks:        23.177.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 14:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:39:3a:a9:05:ea:83:29:ad:75:5a:68:80:71:cd:66:9b:ad:e4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96a2b0e2d1ed38ae6fa24f6e3eae4950e503abf9957077da6e
        Validity
            Not Before: May 22 18:30:47 2024 GMT
            Not After : May 21 18:35:47 2025 GMT
        Subject: CN=4DFBBFB5BAA187204636B988918ADCF947AB8FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:4e:b1:d0:6b:6e:a9:3b:2b:b6:c5:1f:52:
                    db:c9:ea:4c:30:3d:14:45:e4:29:a9:7d:25:de:58:
                    b7:bb:76:8c:31:7b:e2:36:5a:e9:78:0e:74:c0:bc:
                    ff:fc:c9:e1:0e:b4:70:6a:13:c1:2d:0b:b2:5a:ab:
                    1a:7e:0d:1d:c4:de:5c:1e:fa:9f:79:05:21:1f:37:
                    31:39:22:30:53:98:84:fd:19:86:8d:ad:d7:33:47:
                    f3:92:80:fa:c3:03:92:6b:96:0b:d3:c2:b0:36:b2:
                    29:dc:80:ee:06:b5:87:f7:02:10:77:3e:b8:17:c9:
                    91:63:eb:76:7c:7c:bc:91:08:e9:ce:ca:fd:a4:f3:
                    fb:96:6a:a0:ae:ac:66:be:73:be:63:2b:75:e0:32:
                    7c:03:0e:30:c8:f4:26:2c:e9:6b:b7:ba:3c:04:43:
                    a7:07:6a:3f:6d:9b:a1:bd:96:74:e5:65:86:99:46:
                    b3:9e:b5:ca:96:77:91:a0:fe:fe:99:52:57:8e:38:
                    e7:11:3f:ee:c2:77:f6:0d:86:f4:d8:19:b2:e1:0f:
                    73:a1:a3:b4:02:3e:a8:45:ae:38:9f:6b:e1:4c:4b:
                    c8:b1:53:ad:3d:61:a8:50:fc:40:95:65:7d:26:4f:
                    61:84:74:4d:88:ba:92:18:4d:62:49:d0:d4:ec:b7:
                    e0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FB:BF:B5:BA:A1:87:20:46:36:B9:88:91:8A:DC:F9:47:AB:8F:D2
            X509v3 Authority Key Identifier:
                keyid:80:2F:06:87:6C:FA:0F:E0:30:90:97:CF:7C:0C:EE:45:53:D2:D2:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/5/802F06876CFA0FE0309097CF7C0CEE4553D2D215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c85ceae-9f38-49c6-ad1e-39e9bfeab158/96a2b0e2d1ed38ae6fa24f6e3eae4950e503abf9957077da6e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/5/32332e3137372e38382e302f32342d3234203d3e20323136343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:4f:17:af:50:af:c3:55:b2:9a:32:d3:4e:28:e0:33:3d:19:
         58:20:50:a8:28:7a:44:80:2c:ce:35:7c:45:7c:d1:d5:bf:f2:
         56:20:3f:43:8e:d0:2a:7f:f9:bf:70:27:53:b2:44:70:c1:e0:
         ee:20:9b:e8:66:4c:5f:af:a9:23:34:46:2c:de:cd:2a:9f:7b:
         1c:dc:ef:1a:4d:c5:3b:8c:dc:ec:b1:cb:97:a7:94:b2:3a:6d:
         60:e6:f7:59:34:77:5d:a2:5c:28:4c:16:5b:3b:cb:37:48:9b:
         a8:c9:70:38:0b:45:20:18:16:4d:d2:61:48:06:b2:2d:54:c4:
         dd:0b:fb:7b:41:6f:ac:69:49:ac:24:65:fe:09:c8:a8:fb:86:
         54:0d:ab:a7:9b:47:4e:b0:18:6b:1e:a4:6a:d6:d8:b1:6d:dd:
         28:29:07:5a:de:05:a8:73:7c:83:ff:bc:d8:2a:b4:2d:c1:f2:
         e8:c9:24:b8:da:79:9e:cf:6b:37:e0:6f:c0:21:c1:28:5e:d7:
         8c:ba:c6:f2:de:4c:7d:1b:b1:e2:95:09:5c:19:8a:d8:62:59:
         b6:e9:0f:4e:1a:01:2a:27:2d:58:80:e8:b4:24:81:5b:75:d5:
         3c:e0:7d:42:e0:3c:83:a5:70:23:86:e7:0f:dd:6b:07:e3:4b:
         b4:4c:9b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----