Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231302e302f32342d3234203d3e203631333137.roa
File:                     3139342e3135302e3231302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          C1MXS/3Ue6KMQIWTrnglP+d5pe1uFU/rn+QiOAdvovw=
Subject key identifier:   E2:8D:D6:63:23:07:A2:44:DB:55:CC:F2:E0:28:53:0D:96:79:5E:78
Certificate issuer:       /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial:       774B1229E3EF8C96C6A19C4AEA019CFB31F885D8
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231302e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 23 May 2023 10:50:58 +0000
ROA not before:           Tue 23 May 2023 10:45:58 +0000
ROA not after:            Tue 21 May 2024 10:50:58 +0000
asID:                     61317
IP address blocks:        194.150.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4b:12:29:e3:ef:8c:96:c6:a1:9c:4a:ea:01:9c:fb:31:f8:85:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
        Validity
            Not Before: May 23 10:45:58 2023 GMT
            Not After : May 21 10:50:58 2024 GMT
        Subject: CN=E28DD6632307A244DB55CCF2E028530D96795E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:d2:d9:68:ba:58:cb:0d:4e:cd:11:91:57:
                    0a:ac:3b:49:26:dc:21:cc:ec:f8:05:bd:91:6e:85:
                    e2:59:21:23:ca:05:5e:bf:6a:ab:c6:36:6b:ef:f3:
                    dc:e7:a4:00:f6:bb:77:ca:18:75:77:4b:89:bf:69:
                    d8:42:65:7c:47:d0:be:56:5b:29:55:b1:c3:3b:fe:
                    2f:3f:d2:b3:63:9a:4e:33:82:f4:71:25:c7:03:d7:
                    28:21:10:ae:39:bd:67:67:96:11:4f:5b:07:20:0f:
                    a6:95:58:9e:b0:18:e8:ce:b0:72:71:3e:9a:b3:3b:
                    1c:c2:7c:4a:5e:74:00:6f:21:00:37:9b:97:d6:12:
                    c3:17:f5:d0:15:e7:6d:f4:13:a7:b1:f1:38:74:8e:
                    77:d2:db:71:bc:86:0e:6a:66:9c:59:8d:e6:af:cb:
                    65:be:9f:b9:a3:34:d8:6c:ee:46:f0:7f:6d:ee:11:
                    55:e5:a2:08:3c:9a:d0:50:9f:a4:3c:aa:58:8e:86:
                    88:dd:31:c7:18:19:36:f4:cd:59:bc:46:dd:98:59:
                    5f:ad:4f:57:ed:2a:94:65:d1:87:9b:34:73:b2:3e:
                    89:12:13:e9:c9:f9:d9:38:01:98:a2:c3:60:dc:93:
                    ed:7a:bf:ba:92:f2:2c:67:ef:38:03:d2:f5:9b:be:
                    0b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8D:D6:63:23:07:A2:44:DB:55:CC:F2:E0:28:53:0D:96:79:5E:78
            X509v3 Authority Key Identifier:
                keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:5e:21:86:74:e3:50:c0:52:cb:29:44:0f:62:b0:6f:b7:59:
         11:23:bc:3d:84:6d:a5:57:39:36:43:25:56:5e:2b:4c:f3:c8:
         7a:8e:59:37:07:1e:10:bd:f3:87:ef:fe:44:fd:7d:33:c1:6c:
         4c:a1:cd:02:d6:4e:30:73:27:98:7c:d4:da:f7:7c:a1:a5:1a:
         f0:69:09:4f:f3:ec:e7:cf:3d:10:27:b7:9b:b1:db:b5:4f:80:
         81:cd:e2:50:11:f0:f1:36:fb:37:28:ff:cc:fc:0c:97:42:a9:
         23:5a:52:2d:9a:de:7d:89:25:1d:fe:42:64:9e:6e:41:b3:46:
         5e:14:a5:3b:70:56:b3:ba:1c:7f:3d:7a:5c:57:f4:cb:5d:c9:
         b3:9f:31:e7:f3:0d:aa:7d:f7:a9:34:67:b1:38:02:93:a9:8c:
         4d:85:04:13:90:b5:6a:5f:03:f9:c0:0b:4b:6c:31:0c:4f:a8:
         4b:b1:9e:cf:0a:6f:2b:b9:70:f4:03:40:d0:91:98:6d:23:19:
         bd:e2:ba:8f:ad:94:9d:9f:ae:fc:c7:6c:ec:b7:03:58:1e:f5:
         76:2d:40:b4:54:14:ce:97:0f:60:f2:ac:b0:01:7a:1f:fb:2e:
         53:9d:4b:30:d2:ba:e9:60:b1:bd:f8:66:69:db:a8:ed:c7:52:
         1e:b0:6a:71
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 23 00:19:05 2023 by rpki-client on console-fra.rpki-client.org