Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS49999.roa
File:                     AS49999.roa (raw, json)
Hash identifier:          WJwg9igA7iVQRnWRYZud1zi8Bv20vUBeWbV/vXilNfE=
Subject key identifier:   B1:58:0A:F4:4B:94:85:5E:F2:4C:1E:8C:66:72:0D:29:61:D0:24:4D
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       404DF0C54A106C4A7703286FCE9D58A1E134456F
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS49999.roa
Signing time:             Sat 15 Jul 2023 16:30:04 +0000
ROA not before:           Sat 15 Jul 2023 16:25:04 +0000
ROA not after:            Sat 13 Jul 2024 16:30:04 +0000
asID:                     49999
IP address blocks:        45.152.242.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4d:f0:c5:4a:10:6c:4a:77:03:28:6f:ce:9d:58:a1:e1:34:45:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Jul 15 16:25:04 2023 GMT
            Not After : Jul 13 16:30:04 2024 GMT
        Subject: CN=B1580AF44B94855EF24C1E8C66720D2961D0244D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8a:6c:73:c7:09:32:6a:11:7e:a5:47:b3:08:
                    da:76:b2:eb:c0:67:75:8b:56:31:e9:cf:7e:0c:fc:
                    96:f0:67:02:f0:d1:3e:82:7d:74:81:08:e3:7c:74:
                    7a:9e:bd:03:9f:60:fa:d5:b3:4c:09:9a:f9:81:c9:
                    04:ea:47:20:d5:6d:0f:57:50:ab:7c:9b:a9:13:01:
                    03:94:df:d7:c3:ca:ae:7f:63:3f:7f:5e:29:02:57:
                    a7:6c:53:00:a6:af:d5:4b:b7:f7:4b:ae:4b:37:45:
                    02:43:14:87:87:07:7b:17:c9:72:1b:51:b6:da:72:
                    05:18:ff:39:24:6d:82:9b:ca:e7:6b:e7:04:21:c8:
                    0f:53:21:1d:2c:c3:18:9b:67:bd:03:1d:fa:fc:1d:
                    95:b4:89:ed:d9:21:db:ec:4e:03:43:d7:83:aa:1c:
                    63:72:cd:11:4a:5a:90:3c:51:ba:66:76:25:87:e4:
                    77:65:45:67:b4:96:2a:71:2c:1b:ad:ff:4f:83:b5:
                    1c:a0:71:a5:0c:f6:de:68:54:9b:1c:33:aa:e0:46:
                    32:7f:4a:40:ad:d3:88:53:b9:64:a3:27:b8:bb:09:
                    11:18:69:f4:db:81:f4:31:34:6b:4d:52:b7:64:40:
                    d3:2a:75:87:1f:32:ff:09:46:57:38:b9:25:fb:09:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:58:0A:F4:4B:94:85:5E:F2:4C:1E:8C:66:72:0D:29:61:D0:24:4D
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS49999.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:1c:7a:09:68:ab:6f:3e:01:07:a6:27:7a:03:41:77:19:8f:
         e3:a4:25:3c:6f:3f:81:45:55:52:af:79:80:88:4e:38:a9:4a:
         a1:79:74:23:8f:53:60:94:dc:a6:d0:0b:eb:1b:4a:51:eb:54:
         61:ac:82:5b:fe:5e:81:38:04:78:55:2d:fa:49:e6:0b:18:d1:
         13:e4:89:b7:d0:87:00:62:fa:b3:65:f7:6c:a6:8a:9e:c0:3c:
         47:7e:31:c2:a6:ab:ce:7b:e8:32:80:3d:88:c6:e5:36:8b:e4:
         04:9a:47:0d:d3:34:ba:76:76:41:8f:83:16:f4:89:dc:d1:55:
         d8:dd:1a:fd:1b:2f:2d:7b:3a:9e:7f:a7:98:03:5a:e2:31:9d:
         07:fe:f8:bf:2c:b6:ae:d7:6d:76:8e:c2:71:1c:30:b8:23:10:
         03:10:6b:e0:c8:ae:de:dd:d4:c2:7e:6a:99:02:fd:50:53:fe:
         05:b3:98:43:2c:cb:07:d2:0d:b5:86:10:db:90:72:ac:dd:7a:
         da:48:50:03:d8:5e:c1:f1:09:9d:29:f4:f0:03:e4:7b:0b:e9:
         15:41:66:91:6f:1d:7d:8b:b1:4a:d4:cf:0a:0d:dd:f6:f9:93:
         6f:21:2d:36:49:a9:98:ad:69:71:fa:ef:f3:5d:2b:2c:d7:2a:
         fe:07:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----