Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32352e302f32342d3234203d3e203632353739.roa
File:                     3138352e3133392e32352e302f32342d3234203d3e203632353739.roa (raw, json)
Hash identifier:          miZ+jRdDj+yfmG14NntFFY1HWjFBxPO+fDhg+w7q9GU=
Subject key identifier:   5B:D6:8C:75:8D:59:F2:18:B3:99:91:EF:2E:12:A3:2D:49:1A:9F:5F
Certificate issuer:       /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial:       11929CFABA0B0A1E550BC811352670082A7DDDB2
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32352e302f32342d3234203d3e203632353739.roa
Signing time:             Wed 08 Nov 2023 09:22:32 +0000
ROA not before:           Wed 08 Nov 2023 09:17:32 +0000
ROA not after:            Wed 06 Nov 2024 09:22:32 +0000
asID:                     62579
IP address blocks:        185.139.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:92:9c:fa:ba:0b:0a:1e:55:0b:c8:11:35:26:70:08:2a:7d:dd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
        Validity
            Not Before: Nov  8 09:17:32 2023 GMT
            Not After : Nov  6 09:22:32 2024 GMT
        Subject: CN=5BD68C758D59F218B39991EF2E12A32D491A9F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:e7:05:91:2a:a7:1e:e5:81:12:87:b2:2c:
                    13:2c:13:95:48:27:59:12:08:06:39:a7:78:4c:7b:
                    52:c8:73:c9:12:05:64:e5:d2:39:59:92:2b:71:91:
                    45:0e:74:dd:4c:9d:ff:83:5d:08:ff:02:10:06:40:
                    be:a4:56:09:1b:52:a9:75:05:ed:0d:1a:f6:b4:e8:
                    f8:72:69:ec:6a:fb:db:c9:60:2f:da:d8:3d:49:40:
                    c6:48:ae:6c:93:84:9e:b0:e0:1d:aa:52:2f:4f:b3:
                    1c:e0:a2:10:7e:41:c1:7c:b7:6c:02:04:96:24:4f:
                    2f:c1:3a:b8:4f:d9:1d:0a:17:c4:3f:df:6f:e7:df:
                    fd:16:25:5c:e9:51:dd:f3:65:f2:f9:57:46:00:36:
                    8d:a8:62:bf:8a:7e:0d:a3:46:d0:a2:97:1f:13:92:
                    10:22:b1:91:30:f9:39:ad:8c:9d:0d:e2:4b:f4:8a:
                    b0:10:a8:be:0a:ac:7b:77:55:71:a3:03:bc:5b:b5:
                    34:92:c0:e1:d2:0a:4b:df:12:55:70:fb:1f:a8:ef:
                    94:be:d9:01:cb:7f:d8:1c:a7:9d:6c:5b:f9:1b:3e:
                    e0:50:65:c2:54:95:7b:e8:da:2c:17:33:8e:e6:70:
                    66:c9:60:d7:77:d8:4d:9b:d4:2b:e7:2c:42:31:c3:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D6:8C:75:8D:59:F2:18:B3:99:91:EF:2E:12:A3:2D:49:1A:9F:5F
            X509v3 Authority Key Identifier:
                keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32352e302f32342d3234203d3e203632353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:d3:b8:20:f7:b7:d8:31:f5:b4:71:2d:c9:af:55:c1:81:cf:
         2a:f9:51:20:4a:93:1a:28:99:09:97:42:35:23:7d:39:95:a4:
         02:54:e2:17:03:a4:a6:1c:82:61:bb:14:b0:0a:93:2b:fa:23:
         85:1a:38:be:0a:20:16:2a:33:1b:2e:42:76:38:b8:52:03:98:
         34:95:73:7f:47:56:44:7b:90:64:e1:2b:1f:05:2a:1e:ba:bb:
         56:56:e9:9c:8d:d5:85:0a:0f:7b:dd:7e:53:98:32:78:74:7f:
         3a:f8:ec:c6:09:eb:b5:07:a1:c7:ce:6b:ac:6c:f7:5b:a9:3f:
         4e:40:76:35:ab:0f:b0:a1:00:fc:37:43:5f:91:4a:ae:d9:57:
         24:26:87:65:4b:57:ba:30:81:c1:54:0d:92:64:bb:f7:18:ab:
         11:62:10:59:ac:b7:de:65:53:45:98:92:42:d7:66:6d:16:d7:
         b3:31:22:90:fe:96:5a:c9:14:07:ad:e4:b6:57:43:5d:01:de:
         e4:f7:b1:f6:01:a4:6a:fe:13:58:7e:26:14:b5:7c:6d:e2:86:
         1c:b5:e8:e8:2c:a6:d9:76:22:c0:60:49:7c:5b:26:85:a4:dc:
         4a:74:37:15:4a:eb:50:3d:56:6f:57:d7:ec:d9:7d:bc:f7:5d:
         bd:3c:75:f6
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 10 14:30:15 2023 by rpki-client on console-ams.rpki-client.org