Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135322e302f32332d3233203d3e203539343332.roa
File:                     3138352e3232362e3135322e302f32332d3233203d3e203539343332.roa (raw, json)
Hash identifier:          pKm3wwUHcsQaCdrUuSbRQXYmICM3duttNxY9IzG543M=
Subject key identifier:   B4:41:CB:FD:76:BE:9E:4C:46:02:03:6D:65:0A:AF:B1:89:07:6C:D5
Certificate issuer:       /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial:       3F1A4000AE14B44A52E70E4CA971EDEC16C5048D
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135322e302f32332d3233203d3e203539343332.roa
Signing time:             Wed 26 Jul 2023 22:47:25 +0000
ROA not before:           Wed 26 Jul 2023 22:42:25 +0000
ROA not after:            Wed 24 Jul 2024 22:47:25 +0000
asID:                     59432
IP address blocks:        185.226.152.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1a:40:00:ae:14:b4:4a:52:e7:0e:4c:a9:71:ed:ec:16:c5:04:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
        Validity
            Not Before: Jul 26 22:42:25 2023 GMT
            Not After : Jul 24 22:47:25 2024 GMT
        Subject: CN=B441CBFD76BE9E4C4602036D650AAFB189076CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:60:6c:46:aa:f4:ac:2b:09:29:46:cb:e2:8f:
                    3b:91:7e:d4:71:2d:12:d4:5e:b6:28:c8:2a:2d:9a:
                    17:f2:6b:93:7c:73:c1:c0:fe:4f:4a:93:a4:4f:98:
                    ac:6e:58:bf:7f:8b:af:67:f0:b3:b3:17:bf:86:61:
                    0d:35:0f:86:e7:2c:b6:f7:2b:78:55:48:3b:99:13:
                    ae:7e:10:a6:44:8f:84:37:07:54:d3:f9:e8:54:65:
                    d9:69:ea:21:44:05:54:0f:4e:7b:3b:16:14:54:7c:
                    68:ef:db:be:e5:af:3b:36:15:4b:4e:02:11:85:51:
                    df:f5:17:bb:41:8e:83:0b:b1:d6:9a:05:9f:34:b8:
                    b3:4a:3d:40:4d:54:e1:f6:14:dc:16:10:af:4a:bf:
                    31:40:0d:25:6c:60:93:3e:ae:ef:5d:64:a6:28:81:
                    11:10:f0:14:18:2c:40:67:ae:5a:3e:f7:ed:76:f6:
                    f7:8b:75:86:94:e1:8f:06:8a:84:c8:76:2e:a7:37:
                    ab:d9:8e:27:75:6e:a2:c7:81:9c:28:c9:cb:44:a8:
                    48:84:77:21:34:e7:d9:cd:dd:2a:18:20:ac:ae:d0:
                    98:03:00:74:ef:65:d7:05:2e:27:8e:77:5d:97:01:
                    d6:ae:f8:e2:a9:92:d9:2d:da:97:de:24:a5:13:e0:
                    d9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:41:CB:FD:76:BE:9E:4C:46:02:03:6D:65:0A:AF:B1:89:07:6C:D5
            X509v3 Authority Key Identifier:
                keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135322e302f32332d3233203d3e203539343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:94:61:cf:30:16:28:78:09:1a:fe:2c:3f:db:0d:86:79:c5:
         43:e9:9c:5a:78:89:3b:6e:f5:5e:14:d1:ca:6d:53:4d:4f:97:
         2d:0f:a0:bc:66:17:a5:2a:51:7c:84:c6:de:40:62:a9:f5:84:
         6b:c1:aa:b0:47:54:bc:da:70:ac:b8:8e:eb:98:6e:12:7f:4f:
         0a:b7:3f:1d:89:ff:0c:8f:8b:bb:80:fe:60:1c:d8:f8:8f:da:
         4b:e5:6f:f0:3f:7a:fc:20:9d:12:6a:9c:94:4c:a8:19:97:22:
         09:72:69:cf:e7:fa:51:f8:69:5e:0a:8c:43:7b:4a:18:9a:51:
         91:cc:5c:0c:84:16:ba:06:93:97:00:21:df:e6:96:21:e1:aa:
         32:cc:1a:8b:35:9b:50:2e:4d:69:93:da:22:e1:03:22:9f:5d:
         83:dc:c8:c0:4e:08:14:2d:c1:08:54:d6:cc:12:76:c8:12:62:
         3b:68:39:d7:2f:52:30:46:b8:a6:2a:f9:bf:5a:ca:20:64:eb:
         46:c0:94:a2:9b:9d:ac:e7:0c:e9:34:d6:01:0e:f7:8f:8d:b6:
         98:4b:75:00:a3:0a:f9:7c:e8:42:3b:a3:05:85:83:5d:36:75:
         0f:89:e6:b5:cc:77:b8:64:95:3a:af:df:44:92:df:68:cc:4d:
         60:6c:21:f6
-----BEGIN CERTIFICATE-----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