Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130372e302f32342d3234203d3e2036303739.roa
File:                     37372e38332e3130372e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          BbfyYBmQoE6hHUsgWVbzBCL1I99Dl/ORL0EHRiHkkhg=
Subject key identifier:   DD:38:1F:34:E7:99:23:BA:D8:F2:E8:12:D3:46:2C:90:18:B5:E6:87
Certificate issuer:       /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial:       6083F061C24281665FECFB4661CEC3C93488A8C4
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130372e302f32342d3234203d3e2036303739.roa
Signing time:             Fri 23 Jun 2023 15:32:51 +0000
ROA not before:           Fri 23 Jun 2023 15:27:51 +0000
ROA not after:            Fri 21 Jun 2024 15:32:51 +0000
asID:                     6079
IP address blocks:        77.83.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:83:f0:61:c2:42:81:66:5f:ec:fb:46:61:ce:c3:c9:34:88:a8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
        Validity
            Not Before: Jun 23 15:27:51 2023 GMT
            Not After : Jun 21 15:32:51 2024 GMT
        Subject: CN=DD381F34E79923BAD8F2E812D3462C9018B5E687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:12:b1:9e:ee:2f:2e:1c:47:13:a3:24:eb:
                    ac:38:de:5f:74:e7:97:3c:b2:0d:2c:9e:bf:32:49:
                    13:16:1b:68:54:71:1f:e1:b7:f0:bb:90:fa:ca:e8:
                    fa:fe:eb:98:96:19:08:91:fc:73:31:28:1e:70:ef:
                    15:50:29:81:c1:77:e0:2b:e6:7a:46:ea:c9:75:cf:
                    86:41:32:64:98:96:15:96:b8:a9:cb:15:5e:28:9c:
                    aa:18:d8:1f:e8:6f:6c:c5:d0:e3:20:1d:10:d5:e8:
                    05:e6:a4:3d:ce:a6:3a:8b:61:79:dc:d6:cf:da:47:
                    99:48:32:c7:e3:8c:b8:cd:16:6a:1a:34:a9:4d:61:
                    51:7e:ca:4f:1e:b3:4f:8b:46:b5:82:fc:51:32:17:
                    4b:d7:4a:4b:c2:f2:67:1b:da:8a:12:4c:3a:11:32:
                    c1:ac:73:7c:c1:5d:e6:b5:3c:e1:f4:85:d6:db:6e:
                    5b:4b:47:13:5b:41:c7:bf:5d:f4:8d:26:02:aa:3c:
                    32:4a:9f:44:e5:8d:10:b1:d8:b0:b7:55:ab:66:53:
                    e5:59:70:f6:7a:a0:65:90:66:4e:ee:65:27:aa:eb:
                    82:6e:79:fd:86:b2:38:9d:90:6b:47:01:e9:44:6f:
                    6f:44:c6:bf:41:6e:04:de:4f:85:12:4e:44:e8:98:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:38:1F:34:E7:99:23:BA:D8:F2:E8:12:D3:46:2C:90:18:B5:E6:87
            X509v3 Authority Key Identifier:
                keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130372e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:2e:51:e6:83:99:da:9a:f8:98:9b:76:d3:c1:3b:1e:17:
         9a:aa:e4:e2:74:80:36:da:09:e9:3f:f8:0a:02:3f:d4:25:ef:
         81:f7:17:a4:57:0c:bc:4d:20:c5:1b:f0:02:95:de:c4:e9:04:
         1b:b3:46:61:57:f0:51:74:f3:3f:17:d0:ec:c8:30:71:17:8e:
         c1:d8:90:e0:42:93:89:81:8e:70:e2:50:59:cd:25:34:24:25:
         ed:b5:08:24:d6:b9:95:e5:2e:04:30:5d:a0:52:49:87:3d:82:
         2c:64:7e:23:50:78:9e:21:ba:3d:13:06:a2:de:a9:ed:53:1e:
         47:54:c1:18:22:f2:d6:84:64:3f:92:6a:c2:53:10:67:23:29:
         21:49:64:bb:55:19:21:9b:06:fb:1c:9d:6f:a1:10:67:5f:08:
         f6:a7:56:5a:8b:52:28:f0:6f:eb:f8:25:64:d8:62:f0:62:32:
         da:15:85:d3:c4:57:59:7c:35:0d:b4:61:8e:dc:5a:57:ec:ad:
         16:a6:35:07:72:ee:83:22:c5:d6:38:ed:e2:0b:2b:f8:da:fb:
         9b:f2:f6:8c:1a:0d:fa:b8:5b:ce:ab:f7:eb:fc:70:bd:8d:fb:
         e0:eb:58:d4:45:73:b0:a0:a5:fe:f8:fe:2e:74:7c:e3:93:70:
         46:c4:2a:73
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 19 07:56:35 2023 by rpki-client on console-fra.rpki-client.org