Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3234203d3e2035303635.roa
File:                     37392e39392e32382e302f32322d3234203d3e2035303635.roa (raw, json)
Hash identifier:          5kI8ChhP2VpA8kjgx3fUrfQ26kWq6cDCzzxHAI8/cS4=
Subject key identifier:   1B:34:8D:3C:5D:E1:16:98:FC:A3:8A:BE:E7:A6:D6:39:B5:66:86:02
Certificate issuer:       /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial:       39113A0AD27ADC0774026DC3BC2BC3AFCCF547D7
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3234203d3e2035303635.roa
Signing time:             Fri 18 Aug 2023 02:59:45 +0000
ROA not before:           Fri 18 Aug 2023 02:54:45 +0000
ROA not after:            Fri 16 Aug 2024 02:59:45 +0000
asID:                     5065
IP address blocks:        79.99.28.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:11:3a:0a:d2:7a:dc:07:74:02:6d:c3:bc:2b:c3:af:cc:f5:47:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
        Validity
            Not Before: Aug 18 02:54:45 2023 GMT
            Not After : Aug 16 02:59:45 2024 GMT
        Subject: CN=1B348D3C5DE11698FCA38ABEE7A6D639B5668602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2a:a7:1d:30:e4:86:78:a4:0c:4c:d8:4c:7b:
                    f0:21:5d:66:ad:fc:48:f2:33:24:c4:c4:5d:c5:5c:
                    5a:ab:61:3a:93:72:95:df:99:9d:f1:3e:6f:37:30:
                    7b:b0:c3:cb:5c:58:df:87:c5:74:f4:2b:79:58:b5:
                    77:af:52:8b:7a:1b:0a:8d:92:a1:7e:55:42:79:4d:
                    43:d4:46:23:0a:1b:0b:45:b7:0a:a0:d7:4b:95:44:
                    16:39:ba:17:77:9b:d6:3a:21:c3:24:29:a9:ab:f5:
                    63:68:f9:94:f0:db:d2:52:38:d6:2c:9d:b0:78:03:
                    27:39:8c:7a:72:c8:4f:b6:67:ce:44:23:1d:46:ab:
                    84:e8:ef:4d:5b:33:68:80:da:c5:cc:f1:15:e2:35:
                    ab:79:ca:f2:e1:3e:0d:84:e3:65:9d:64:68:ed:e1:
                    38:ea:41:ac:4f:f7:fe:63:c3:16:4a:ce:5b:bf:9e:
                    a2:66:22:3a:cb:b9:58:33:d9:c7:71:48:e5:47:16:
                    56:d7:da:79:80:1a:17:dc:88:cd:99:dc:65:19:f8:
                    42:c8:00:44:36:5f:9a:df:04:2d:7f:65:f7:f3:12:
                    e1:61:b2:44:08:72:9e:36:e0:dd:2f:b4:07:e8:53:
                    bd:83:50:17:a9:49:c6:ce:91:77:fc:98:b9:8d:e9:
                    be:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:34:8D:3C:5D:E1:16:98:FC:A3:8A:BE:E7:A6:D6:39:B5:66:86:02
            X509v3 Authority Key Identifier:
                keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3234203d3e2035303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.99.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:78:87:be:1b:9a:99:d3:b6:91:02:34:b4:2a:47:cc:00:6f:
         61:7a:82:77:5e:75:d8:93:33:2c:3e:70:d2:7d:d0:47:d3:35:
         3e:ef:c7:96:4d:2d:02:ce:16:bc:76:bf:95:86:1d:4f:56:72:
         aa:f6:71:1f:fe:d3:e7:c8:9d:0c:65:41:c3:a9:10:fc:72:9b:
         56:7f:68:16:da:70:e4:9c:d7:b4:a0:d8:94:bd:4e:a5:3f:52:
         91:60:0b:98:25:19:9c:09:af:12:12:f0:38:4e:3f:1f:81:fd:
         74:22:9a:46:19:af:f2:ee:47:61:36:da:65:96:e1:c2:3d:ef:
         bb:62:0b:41:92:9c:8b:79:0e:d9:fb:6d:41:97:cf:54:bb:dc:
         58:3f:9a:13:de:c3:e7:da:e4:b8:e4:80:01:72:b9:ad:c9:c0:
         4e:49:17:0e:a4:f1:63:77:97:b0:16:85:16:ae:f4:0b:ed:2c:
         35:af:f6:04:6e:e0:50:0a:5e:81:c3:67:84:91:bc:d5:6f:3e:
         42:b3:2a:6f:66:ea:5d:1e:eb:ad:07:44:a4:f7:d1:e1:85:0c:
         13:97:07:79:c9:7c:7d:62:1a:1c:a7:47:3c:78:e5:d0:07:b5:
         07:9f:2d:05:56:e1:5a:f7:9d:6b:6a:43:44:c6:14:80:8a:b7:
         2d:b4:1b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----