Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bc4bab-c120-4c15-bd74-c959820a6a83/0/3139332e35372e3136362e302f32342d3234203d3e203633323133.roa
File:                     3139332e35372e3136362e302f32342d3234203d3e203633323133.roa (raw, json)
Hash identifier:          8VlY8cTcU11QI6QD28mguUYAwPjce496OiQlZTzgLTw=
Subject key identifier:   AC:88:96:62:35:69:E7:F1:0C:90:4E:AB:57:3C:9B:7F:18:4B:0C:9B
Certificate issuer:       /CN=dfd05dc390f8edf0d8eefaca62ee3fcfceb575b7
Certificate serial:       7F0CA7E006336B457C17535A15F6F5CB53884786
Authority key identifier: DF:D0:5D:C3:90:F8:ED:F0:D8:EE:FA:CA:62:EE:3F:CF:CE:B5:75:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/39Bdw5D47fDY7vrKYu4_z861dbc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/53bc4bab-c120-4c15-bd74-c959820a6a83/0/3139332e35372e3136362e302f32342d3234203d3e203633323133.roa
Signing time:             Wed 22 Mar 2023 07:55:56 +0000
ROA not before:           Wed 22 Mar 2023 07:50:56 +0000
ROA not after:            Wed 20 Mar 2024 07:55:56 +0000
asID:                     63213
IP address blocks:        193.57.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0c:a7:e0:06:33:6b:45:7c:17:53:5a:15:f6:f5:cb:53:88:47:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd05dc390f8edf0d8eefaca62ee3fcfceb575b7
        Validity
            Not Before: Mar 22 07:50:56 2023 GMT
            Not After : Mar 20 07:55:56 2024 GMT
        Subject: CN=AC8896623569E7F10C904EAB573C9B7F184B0C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:05:1b:1d:e4:40:2d:c6:e6:85:29:ee:d5:
                    16:9c:8c:f1:22:a5:26:50:3b:4b:30:13:65:cc:7b:
                    d7:58:a0:04:67:c4:05:b2:74:ef:76:01:8f:63:5c:
                    dd:d5:c5:03:c1:bd:96:00:e9:1c:b4:88:9a:53:5a:
                    21:6b:e3:2b:da:f1:47:7b:f2:59:f7:3f:3d:db:bd:
                    78:b1:b8:00:46:8c:97:f2:94:db:1a:68:07:bd:00:
                    fd:9e:75:b3:49:9a:f2:5d:04:b8:2e:62:6a:9d:7d:
                    42:34:3c:35:c1:a6:6a:24:93:2a:3e:db:c1:a7:3d:
                    3c:43:b6:31:23:6a:ec:b4:c8:63:ce:e4:a5:34:22:
                    dc:14:ce:6f:d2:d9:af:2d:4d:0e:ea:de:69:03:3e:
                    70:b1:d5:9c:80:9b:d2:ed:ec:b5:54:3f:05:fa:a9:
                    a0:dd:0e:09:72:f7:2e:23:76:26:51:07:f5:84:d3:
                    a0:fb:3e:f0:99:d7:bb:47:d1:77:74:bf:da:d9:7e:
                    e2:7f:14:b3:21:8d:4f:12:fc:de:4f:01:90:83:2c:
                    e7:2e:f7:2e:34:68:da:6a:8f:1a:fc:e2:d2:44:fe:
                    62:bb:8f:f3:33:20:aa:1b:d1:87:c6:29:05:bc:19:
                    4c:f3:6b:f5:82:d1:54:fe:6a:13:21:74:e3:71:69:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:88:96:62:35:69:E7:F1:0C:90:4E:AB:57:3C:9B:7F:18:4B:0C:9B
            X509v3 Authority Key Identifier:
                keyid:DF:D0:5D:C3:90:F8:ED:F0:D8:EE:FA:CA:62:EE:3F:CF:CE:B5:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/53bc4bab-c120-4c15-bd74-c959820a6a83/0/DFD05DC390F8EDF0D8EEFACA62EE3FCFCEB575B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39Bdw5D47fDY7vrKYu4_z861dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bc4bab-c120-4c15-bd74-c959820a6a83/0/3139332e35372e3136362e302f32342d3234203d3e203633323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:01:c7:e1:ed:3a:b9:54:4d:97:6f:f5:cb:e9:a5:91:1a:7b:
         6d:a7:62:0c:13:0e:3c:78:bc:c4:48:42:65:12:3e:a9:c4:c5:
         55:da:8c:d6:80:0c:6d:21:62:ed:54:3d:05:da:a4:d8:d6:14:
         38:2e:95:1e:76:22:f6:ca:d8:9e:99:fe:90:64:e4:b4:5f:6c:
         12:cf:65:c7:e8:1a:33:2b:39:e6:cf:55:6e:f1:25:0d:5f:f1:
         c2:4b:ab:a5:b9:80:a7:eb:59:5a:36:b2:4b:57:41:e7:23:9a:
         55:f3:35:2d:51:62:da:0c:e9:f2:c1:56:da:08:34:9a:5a:ad:
         f8:f8:64:80:0b:31:d5:81:01:27:95:da:0f:58:ae:18:2c:d7:
         2b:18:c6:88:fe:75:58:94:87:16:7f:42:26:da:77:27:d3:ed:
         13:34:d8:d5:19:0f:c3:51:23:9f:d9:3d:b8:e4:70:b8:f7:4a:
         e7:f1:9d:19:3e:50:44:d7:0d:b0:3f:e1:99:81:70:8f:9c:0c:
         51:99:f0:42:7f:d8:22:38:09:b3:02:1f:75:7a:80:63:29:03:
         2f:f5:bf:2b:f0:10:83:74:9c:a0:2b:7b:a1:5d:c1:f2:d3:47:
         6d:01:f5:f4:84:e8:d7:aa:54:7f:18:53:72:fc:e3:7c:9e:25:
         aa:ef:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----