Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32332d3233203d3e203539343332.roa
File:                     3138352e3232362e3135342e302f32332d3233203d3e203539343332.roa (raw, json)
Hash identifier:          pEY2O6//cvxUtzb50mU5RVzIMENSrcmWb9izlNbUsgk=
Subject key identifier:   A1:97:1C:EA:60:F1:3B:32:A8:DC:C0:23:67:F3:C5:DE:D8:82:1F:0E
Certificate issuer:       /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial:       190409AA7DB8C68EF658D0A63433A95C7C3A17E5
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32332d3233203d3e203539343332.roa
Signing time:             Mon 31 Jul 2023 22:28:00 +0000
ROA not before:           Mon 31 Jul 2023 22:23:00 +0000
ROA not after:            Mon 29 Jul 2024 22:28:00 +0000
asID:                     59432
IP address blocks:        185.226.154.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:04:09:aa:7d:b8:c6:8e:f6:58:d0:a6:34:33:a9:5c:7c:3a:17:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
        Validity
            Not Before: Jul 31 22:23:00 2023 GMT
            Not After : Jul 29 22:28:00 2024 GMT
        Subject: CN=A1971CEA60F13B32A8DCC02367F3C5DED8821F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:47:b4:6b:c6:e6:df:09:80:1d:db:d7:80:
                    1a:c4:36:fa:8d:3b:ea:c3:a1:47:80:4d:0a:77:e5:
                    90:14:d8:34:3e:31:0e:3b:18:34:88:78:c4:d4:86:
                    eb:a5:4d:5d:d6:4e:8f:b3:97:0e:d5:1c:1e:a0:13:
                    71:ff:4e:15:be:9e:7f:ce:6e:19:35:05:e0:43:76:
                    ad:42:b1:ad:27:2f:9f:c8:ec:cd:5a:27:e2:63:75:
                    40:7d:8b:b1:7a:80:78:92:11:27:09:45:13:a6:15:
                    24:92:ff:9c:df:45:df:a6:81:05:e7:a6:35:b7:1a:
                    37:c1:5b:61:f6:d2:9c:3d:d0:ce:a8:b7:cd:b9:c4:
                    75:b3:7f:cf:be:1a:70:ec:aa:56:98:58:4f:87:2a:
                    ef:ca:ce:26:07:5a:b1:6b:f0:50:f3:fa:f1:01:78:
                    f8:0c:22:e9:5a:73:ac:10:f0:bb:cf:a6:c4:fc:47:
                    9e:fa:00:26:76:a0:9e:3a:af:d4:db:00:cc:ed:d8:
                    e2:9f:43:7e:47:dd:45:e5:aa:aa:64:cc:5a:13:7c:
                    80:d3:78:2d:24:31:f1:2f:e8:6c:e6:cf:8d:59:76:
                    95:32:6d:46:13:2c:ec:ff:fe:15:03:5e:11:c9:4b:
                    7b:a8:3b:80:91:51:0a:34:5d:2e:60:54:d6:10:14:
                    f9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:97:1C:EA:60:F1:3B:32:A8:DC:C0:23:67:F3:C5:DE:D8:82:1F:0E
            X509v3 Authority Key Identifier:
                keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32332d3233203d3e203539343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:cf:42:0b:ee:c4:72:84:b7:fb:47:2b:ee:5c:04:aa:00:4a:
         9e:05:7a:5f:41:95:69:56:dd:57:6c:68:04:b0:a9:57:59:47:
         5a:5f:d9:b5:12:ef:06:eb:ce:e5:15:b8:fb:36:77:10:19:e4:
         94:de:f8:3a:1f:38:e4:b0:30:90:d4:4a:4e:5b:e7:2e:4e:7f:
         04:a3:ce:66:23:78:b9:ea:7a:07:ce:ca:f7:6d:33:c3:eb:12:
         c3:76:f1:9b:c9:71:de:35:01:e6:09:8c:84:3a:1d:17:cc:a3:
         bb:ce:ac:dd:04:f1:e2:c3:0f:6d:4c:be:09:27:70:66:c3:dd:
         04:18:3f:aa:7f:86:b6:10:58:47:aa:4c:7a:dd:69:7b:ce:0f:
         af:a3:fd:12:97:0d:ee:7f:0b:f6:10:9f:dd:21:bc:69:53:78:
         93:ee:ea:1d:82:e5:9b:be:8a:1f:16:97:f8:ea:e6:37:9f:52:
         19:18:57:f4:78:20:c2:d6:95:6b:d0:67:a4:28:29:1d:7d:a9:
         4a:43:26:e2:ed:15:4e:2d:96:80:63:77:33:80:05:35:0c:70:
         16:7c:34:e6:8c:b8:99:e6:82:f4:4c:3a:83:3a:d4:a4:24:15:
         2b:18:72:4b:07:0e:da:7a:94:93:ee:97:c2:e8:29:f5:e9:b0:
         82:13:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----