Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/32332e3137322e3132302e302f32342d3234203d3e203437323732.roa
File:                     32332e3137322e3132302e302f32342d3234203d3e203437323732.roa (raw, json)
Hash identifier:          IjKjC9gWLqXvy81A0rpEXXlEpGACnkqatlOfp6Rs9mk=
Subject key identifier:   08:45:07:EE:CC:7F:50:3A:31:21:FF:96:B1:18:CC:D5:59:EF:21:EB
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       361946EF6CD6F11DB67E00E687C9EBD8065884D5
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/32332e3137322e3132302e302f32342d3234203d3e203437323732.roa
Signing time:             Fri 23 Feb 2024 16:37:18 +0000
ROA not before:           Fri 23 Feb 2024 16:32:18 +0000
ROA not after:            Fri 21 Feb 2025 16:37:18 +0000
asID:                     47272
IP address blocks:        23.172.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 09:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:19:46:ef:6c:d6:f1:1d:b6:7e:00:e6:87:c9:eb:d8:06:58:84:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: Feb 23 16:32:18 2024 GMT
            Not After : Feb 21 16:37:18 2025 GMT
        Subject: CN=084507EECC7F503A3121FF96B118CCD559EF21EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:fa:4a:1a:b3:ef:33:85:e4:92:67:2d:07:
                    e0:41:a9:3f:89:62:c7:f1:97:e1:27:e4:d4:4e:c0:
                    5a:d3:a8:13:e4:ff:d2:34:a1:e0:26:fc:a8:01:7f:
                    18:c2:bc:38:f9:58:7d:cf:39:04:c5:c6:04:b6:73:
                    03:49:7a:80:f2:f6:d9:69:83:23:ae:c9:f4:cb:68:
                    1f:7f:07:e4:73:15:6d:50:7d:18:7d:1b:ac:e6:5e:
                    7f:4f:72:7a:ed:40:72:8f:e4:d8:99:54:4f:d3:f1:
                    d6:6c:50:4b:34:dc:a6:1b:18:3a:72:f2:7b:dd:a5:
                    a0:dd:ab:d3:05:22:d1:3f:0b:54:1d:de:b3:5c:a8:
                    5b:83:4e:b9:23:31:be:c2:42:08:d2:3d:73:5a:0e:
                    05:98:5e:99:cd:a8:b5:b9:ff:1e:ee:0a:4b:12:2a:
                    5c:95:65:03:fb:87:08:fd:c8:f1:33:e2:2b:3f:61:
                    ce:f2:77:39:68:3f:b1:43:0c:bb:4f:d1:86:ea:b5:
                    9f:27:ec:d7:0c:21:60:51:97:67:9c:77:c9:c8:fb:
                    bd:64:ae:87:e5:9c:5b:e4:d8:8c:32:be:a4:8e:7b:
                    63:ce:a4:87:b3:ca:21:78:0e:07:92:62:24:0a:4b:
                    e1:cb:19:72:43:b4:64:aa:ea:6f:7e:31:7b:6e:7a:
                    5c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:45:07:EE:CC:7F:50:3A:31:21:FF:96:B1:18:CC:D5:59:EF:21:EB
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/32332e3137322e3132302e302f32342d3234203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:3e:17:c5:28:f2:85:e4:a6:c7:c1:7a:d2:34:f1:9f:71:
         61:96:20:81:e7:df:97:8f:ad:21:0f:fb:97:b1:5a:e0:b4:ec:
         a9:de:61:f9:dc:21:2c:42:bc:60:df:19:3e:28:8c:30:94:58:
         f8:ce:f0:9d:de:27:18:a3:56:79:e2:65:a0:f3:92:50:69:4f:
         c3:c2:c8:bd:fb:85:92:57:56:5a:15:65:80:2f:83:9d:dd:6a:
         6e:36:e7:da:0d:60:8e:86:25:26:24:a6:39:c3:40:20:52:f8:
         28:27:ee:84:ef:02:1d:c6:75:e0:fc:71:76:e0:8a:81:bd:ca:
         84:80:de:9a:00:ff:a8:77:ec:9b:ca:04:49:e6:86:2f:1d:a4:
         7e:1d:69:d1:55:4e:ad:d4:e5:dc:05:14:91:8e:72:83:d0:55:
         8a:6d:fb:1d:9d:48:92:46:19:1e:ba:e0:62:5a:81:19:c5:49:
         55:7d:23:46:0b:3e:8a:df:88:a4:c8:5b:0e:58:43:4f:02:18:
         57:56:c5:26:98:e1:84:3c:8a:94:8c:11:da:f8:cf:77:88:b4:
         69:37:7f:25:b8:bc:bc:46:cf:0e:e8:c7:04:08:3a:1a:0d:fd:
         08:a8:a8:b3:82:89:9d:58:f4:e7:36:8c:0b:a5:56:ab:dd:df:
         0f:39:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----