Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS132335.roa
File:                     AS132335.roa (raw, json)
Hash identifier:          CODMZ8h24ZfbINLcWMonj2lgGmGl4QFbCKlbR45x9LM=
Subject key identifier:   DA:F1:A3:39:AE:CE:63:50:C3:6A:CB:E2:69:2F:AE:9B:20:BF:4C:18
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       0A1233BDF828225AE7AEEAE8BAA1965571F42211
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS132335.roa
Signing time:             Wed 14 Jun 2023 12:53:13 +0000
ROA not before:           Wed 14 Jun 2023 12:48:13 +0000
ROA not after:            Wed 12 Jun 2024 12:53:13 +0000
asID:                     132335
IP address blocks:        45.153.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:12:33:bd:f8:28:22:5a:e7:ae:ea:e8:ba:a1:96:55:71:f4:22:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Jun 14 12:48:13 2023 GMT
            Not After : Jun 12 12:53:13 2024 GMT
        Subject: CN=DAF1A339AECE6350C36ACBE2692FAE9B20BF4C18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:03:74:3b:09:dc:bf:43:2d:34:a3:6b:64:
                    c7:41:f4:69:5b:ee:3d:74:c2:84:c7:ef:d5:e3:f4:
                    2d:84:bc:cc:c5:9f:38:f2:7e:55:3f:fe:09:92:ea:
                    d9:13:8e:87:0c:ee:de:f8:6c:4b:4e:19:cc:a7:64:
                    4b:90:a1:aa:44:aa:d5:1a:46:b4:75:72:e6:b0:a5:
                    2a:71:a7:e9:5e:b7:dd:15:3e:48:2c:06:d0:5b:c0:
                    52:06:27:de:0d:2f:37:da:fe:1d:3e:87:fb:cd:b8:
                    a9:24:ff:40:7f:6b:c8:22:26:9f:45:8b:f3:cc:dc:
                    16:e6:0b:19:d9:09:13:cf:f1:b8:39:4c:17:67:60:
                    d0:c5:93:f6:cb:c3:df:ea:5e:a9:d2:32:a0:cf:77:
                    f8:1b:be:dc:ff:6c:c2:e5:a9:33:65:b6:31:96:43:
                    01:12:d8:5d:5f:25:e9:8a:ab:7a:05:22:15:de:ca:
                    15:81:12:64:da:16:31:b3:de:32:09:ed:b9:4c:fc:
                    54:2e:58:d9:6c:60:29:95:d7:36:f2:fc:37:29:7f:
                    cd:72:9f:7e:34:17:2d:e9:de:5a:08:b0:c2:a3:bb:
                    3e:cd:4e:7f:83:6a:e2:3b:1e:7a:29:56:ea:35:46:
                    c5:92:28:12:1c:f9:2e:e0:cf:f9:9e:f3:2d:9a:ae:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F1:A3:39:AE:CE:63:50:C3:6A:CB:E2:69:2F:AE:9B:20:BF:4C:18
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS132335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:9b:86:f8:ea:4f:91:26:e3:3a:93:54:42:b9:df:2b:7f:c0:
         b0:c9:33:a3:78:b6:d1:d5:88:74:eb:77:a7:52:6c:02:7a:0a:
         91:8f:b9:44:de:68:9c:1c:bc:5c:f0:69:f3:17:32:54:1e:b9:
         5d:a1:75:34:3a:6f:a8:dd:0e:6d:0d:53:c3:0d:af:f6:d5:68:
         f9:9e:a6:46:fa:3f:d9:6e:ae:e1:44:ae:9d:79:b1:1f:d6:2f:
         fe:f4:32:61:fa:18:13:9d:e3:c8:d9:71:63:23:83:f7:f6:cd:
         96:e0:29:96:2e:e3:1f:d6:70:b4:6a:64:e4:65:72:6f:4e:1d:
         e0:84:19:3f:41:0a:4c:6e:36:fa:d6:14:e9:f3:b4:b4:0c:e5:
         a7:43:14:7a:30:05:3e:d0:df:7a:19:02:95:57:51:e3:cf:10:
         85:18:e2:a5:33:77:bd:58:11:94:d0:2e:97:c9:32:0e:5a:98:
         b9:2a:a3:38:63:f8:f0:fd:43:06:60:38:55:57:f2:6f:3f:51:
         97:3a:ab:85:e0:b9:a0:72:53:e3:4d:ef:94:66:70:fc:f7:39:
         69:6b:09:62:4f:6a:64:6c:61:fd:63:58:65:dc:fb:06:7f:e5:
         3b:f8:07:24:71:40:43:af:a9:1a:fb:57:a7:8b:ed:13:94:74:
         23:93:d9:f7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUChIzvfgoIlrnrurouqGWVXH0IhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yMzA2MTQxMjQ4MTNaFw0yNDA2MTIxMjUzMTNaMDMxMTAvBgNV
BAMTKERBRjFBMzM5QUVDRTYzNTBDMzZBQ0JFMjY5MkZBRTlCMjBCRjRDMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hQN0Owncv0MtNKNrZMdB9Glb
7j10woTH79Xj9C2EvMzFnzjyflU//gmS6tkTjocM7t74bEtOGcynZEuQoapEqtUa
RrR1cuawpSpxp+let90VPkgsBtBbwFIGJ94NLzfa/h0+h/vNuKkk/0B/a8giJp9F
i/PM3BbmCxnZCRPP8bg5TBdnYNDFk/bLw9/qXqnSMqDPd/gbvtz/bMLlqTNltjGW
QwES2F1fJemKq3oFIhXeyhWBEmTaFjGz3jIJ7blM/FQuWNlsYCmV1zby/Dcpf81y
n340Fy3p3loIsMKjuz7NTn+DauI7HnopVuo1RsWSKBIc+S7gz/me8y2art3PAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU2vGjOa7OY1DDasviaS+umyC/TBgwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTMyMzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZkH
MA0GCSqGSIb3DQEBCwUAA4IBAQBem4b46k+RJuM6k1RCud8rf8CwyTOjeLbR1Yh0
63enUmwCegqRj7lE3micHLxc8GnzFzJUHrldoXU0Om+o3Q5tDVPDDa/21Wj5nqZG
+j/Zbq7hRK6debEf1i/+9DJh+hgTnePI2XFjI4P39s2W4CmWLuMf1nC0amTkZXJv
Th3ghBk/QQpMbjb61hTp87S0DOWnQxR6MAU+0N96GQKVV1HjzxCFGOKlM3e9WBGU
0C6XyTIOWpi5KqM4Y/jw/UMGYDhVV/JvP1GXOquF4LmgclPjTe+UZnD89zlpawli
T2pkbGH9Y1hl3PsGf+U7+AckcUBDr6ka+1eni+0TlHQjk9n3
-----END CERTIFICATE-----