Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/3131382e39312e3138352e302f32342d3234203d3e203437323732.roa
File:                     3131382e39312e3138352e302f32342d3234203d3e203437323732.roa (raw, json)
Hash identifier:          oblkIvwL8XmYf/Rz4duC7f6NMRfmG5HOwkS9xQDwvU8=
Subject key identifier:   91:38:9B:46:81:5B:24:38:CB:CB:6F:16:02:02:3B:61:C1:D2:75:9E
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       7EFE90833DDE984DCB54507FCB7A876B7C08D523
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/3131382e39312e3138352e302f32342d3234203d3e203437323732.roa
Signing time:             Wed 28 Aug 2024 15:45:46 +0000
ROA not before:           Wed 28 Aug 2024 15:40:46 +0000
ROA not after:            Wed 27 Aug 2025 15:45:46 +0000
asID:                     47272
IP address blocks:        118.91.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fe:90:83:3d:de:98:4d:cb:54:50:7f:cb:7a:87:6b:7c:08:d5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 28 15:40:46 2024 GMT
            Not After : Aug 27 15:45:46 2025 GMT
        Subject: CN=91389B46815B2438CBCB6F1602023B61C1D2759E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:2b:57:3e:b4:b5:b6:d4:02:14:6f:bd:1b:
                    b4:75:1b:99:54:85:d1:dd:2d:40:dd:fa:c7:08:26:
                    5f:7a:b9:3d:0f:65:26:38:32:05:d5:e4:b5:7f:5e:
                    00:aa:95:42:34:75:b5:a0:9d:6e:90:52:4c:5e:b1:
                    55:3d:6e:be:b3:08:7a:ae:ef:7d:41:c4:72:74:09:
                    6e:de:64:d2:18:68:9e:91:55:0c:4f:3a:e8:a9:e6:
                    c4:07:0c:71:f8:95:f3:78:bd:dc:7c:d9:f1:28:94:
                    2e:c9:78:24:e2:22:64:d2:73:29:1b:fa:3f:19:68:
                    09:ba:f5:87:2b:c2:85:36:b6:d1:37:73:88:3c:a7:
                    7f:14:39:d1:bd:61:ed:aa:41:50:c1:13:66:f2:c2:
                    88:8f:63:35:26:38:c4:c1:4f:ea:09:6e:16:89:3f:
                    af:11:20:40:be:9e:9c:f9:64:40:45:37:c7:fb:8e:
                    5d:9d:b4:40:25:f2:10:9e:ac:38:a9:2d:23:fe:7b:
                    e2:4f:71:29:40:b3:5a:e7:dd:7d:20:e3:df:63:e2:
                    14:bb:eb:02:e4:b0:5c:ac:4e:b5:82:10:97:60:b8:
                    b3:03:f2:32:f5:ea:a8:60:b0:35:bf:dd:81:ca:57:
                    7d:aa:4e:16:25:2a:85:73:cb:b6:d8:a2:0a:e5:d0:
                    c3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:38:9B:46:81:5B:24:38:CB:CB:6F:16:02:02:3B:61:C1:D2:75:9E
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/3131382e39312e3138352e302f32342d3234203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.91.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:a8:a5:c5:f6:70:7b:be:be:e5:00:59:28:a1:04:84:6e:12:
         a9:5d:a2:9b:82:17:dd:90:16:45:e8:2d:bd:14:70:4d:65:47:
         3d:36:68:4d:85:49:67:21:8b:68:59:23:ad:81:85:22:0a:38:
         23:eb:dd:d4:98:e4:b9:37:af:e4:b6:2f:f5:6e:73:c6:28:54:
         b2:b1:35:6d:c6:37:f0:3f:7b:0c:3f:91:9f:d8:39:32:3e:d6:
         fd:a7:0d:1f:b6:26:91:06:cd:3d:4d:96:07:ad:8f:37:51:dc:
         ca:bb:70:65:6f:59:7d:e7:ec:7d:cd:76:ba:95:55:30:b9:dc:
         1c:0d:1b:88:7b:30:4f:5e:31:08:e3:36:41:71:42:b7:15:8b:
         4c:5f:7c:ca:8f:71:d3:ab:26:71:cf:0d:4b:dc:96:ce:d5:88:
         3f:90:ab:39:07:24:68:cb:23:2e:a1:9b:bc:5d:30:08:fb:46:
         04:a7:2d:c8:9c:f9:08:cb:1b:e6:07:7a:09:7f:16:14:dc:e8:
         e0:a5:cf:0c:7d:25:77:9e:fc:4d:41:76:4f:73:83:8f:f9:20:
         77:85:80:a6:89:27:9a:ac:a7:11:2f:36:1f:ef:5e:b7:4b:0f:
         5f:3d:21:ad:39:97:84:2d:9f:4d:11:19:69:33:f2:83:2d:0a:
         c5:bb:46:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----