Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/3139332e33352e3232362e302f32342d3234203d3e20383334.roa
File:                     3139332e33352e3232362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          kj7iMvoScxhoGzJWB+6HNvwMpcGliP7aFK5B96PP6Nc=
Subject key identifier:   31:C9:D6:96:FA:08:15:24:AF:0E:B9:17:CE:8F:55:57:56:B0:3D:34
Certificate issuer:       /CN=8ffb5bf8ce4106eb27d05bdb7f81f60b40e48eb8
Certificate serial:       150178AB140239C71670B7EB9025682FCD7A3372
Authority key identifier: 8F:FB:5B:F8:CE:41:06:EB:27:D0:5B:DB:7F:81:F6:0B:40:E4:8E:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j_tb-M5BBusn0Fvbf4H2C0Dkjrg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/3139332e33352e3232362e302f32342d3234203d3e20383334.roa
Signing time:             Wed 12 Apr 2023 19:30:10 +0000
ROA not before:           Wed 12 Apr 2023 19:25:10 +0000
ROA not after:            Wed 10 Apr 2024 19:30:10 +0000
asID:                     834
IP address blocks:        193.35.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:01:78:ab:14:02:39:c7:16:70:b7:eb:90:25:68:2f:cd:7a:33:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ffb5bf8ce4106eb27d05bdb7f81f60b40e48eb8
        Validity
            Not Before: Apr 12 19:25:10 2023 GMT
            Not After : Apr 10 19:30:10 2024 GMT
        Subject: CN=31C9D696FA081524AF0EB917CE8F555756B03D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:53:06:d0:9f:49:a6:71:78:82:ec:7e:e3:
                    58:ba:4b:63:a8:8e:a7:16:31:3d:27:10:0d:74:72:
                    44:3a:46:39:d7:b7:34:b3:67:7f:71:12:55:8b:cf:
                    cf:c8:13:e5:d3:bc:0e:9c:57:15:09:ff:3a:8b:b6:
                    d3:70:5a:ce:ab:29:74:4a:86:19:0a:af:68:83:cb:
                    01:b5:1e:36:10:1e:df:af:19:0f:3f:80:3a:1a:6d:
                    bc:96:6f:7c:83:9f:6a:97:04:a8:27:8d:c9:7a:73:
                    40:88:5b:d4:52:95:c0:cf:b2:c4:ee:57:15:9a:c6:
                    62:2f:20:8d:7a:23:bd:0e:3a:da:e4:9e:de:22:32:
                    99:22:ef:78:ae:da:52:4a:c7:43:a6:61:4f:b9:02:
                    c9:e6:ff:99:1d:09:c1:4b:c5:39:98:99:4c:f7:c4:
                    79:67:3c:e3:43:08:fe:50:0a:44:96:96:5a:f0:e6:
                    d3:8d:c1:b8:f9:3d:da:b1:ce:34:6c:a7:d0:28:bd:
                    6e:64:99:9f:b7:62:50:e8:54:e2:4f:b1:76:6d:5c:
                    c5:5b:2c:46:f3:cd:61:eb:1c:36:af:d5:be:b3:13:
                    7c:02:6d:9d:77:c0:77:7d:88:d5:68:0d:44:02:74:
                    61:91:28:6a:3a:2f:b5:fd:10:61:03:76:97:a1:56:
                    a5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C9:D6:96:FA:08:15:24:AF:0E:B9:17:CE:8F:55:57:56:B0:3D:34
            X509v3 Authority Key Identifier:
                keyid:8F:FB:5B:F8:CE:41:06:EB:27:D0:5B:DB:7F:81:F6:0B:40:E4:8E:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/8FFB5BF8CE4106EB27D05BDB7F81F60B40E48EB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_tb-M5BBusn0Fvbf4H2C0Dkjrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/811f085b-658f-44eb-87e5-362a40c7eef1/0/3139332e33352e3232362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.35.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a5:13:13:57:4a:34:47:0d:7a:61:4b:8d:96:1b:3e:cc:96:
         cf:67:0f:e6:af:54:67:f0:bc:57:72:e9:41:fa:f8:c3:9b:1a:
         29:d9:3b:08:bf:a2:1a:58:f1:6d:1b:e4:2b:f2:89:a6:42:57:
         a0:fa:d9:aa:45:14:f8:57:a8:c7:ff:9c:81:50:46:74:46:c0:
         6c:8e:8d:9d:79:6f:42:0d:21:51:3a:52:ff:7e:9e:09:99:32:
         17:75:38:38:8b:6f:33:2a:a9:64:3f:9b:49:a3:7d:86:9d:10:
         5b:08:43:58:f5:da:1b:08:20:f3:29:43:67:5f:b5:c2:e6:62:
         06:36:bd:aa:1d:68:a2:fb:de:33:84:8d:e7:8c:56:70:24:61:
         fa:da:c9:48:64:17:60:e3:32:82:38:0c:a5:9b:e7:90:a4:25:
         5c:43:b0:94:eb:79:d7:18:fb:bf:fd:99:88:4f:46:ae:8f:7f:
         60:52:a2:11:ce:0a:fd:b3:00:77:68:3e:7b:21:61:0f:1c:39:
         b0:68:31:57:9a:d2:49:67:8d:1d:4e:52:c7:5e:0d:f5:f6:8b:
         18:f0:33:43:92:fb:e5:ff:0d:ed:c6:4d:4b:98:97:c1:20:ba:
         f4:ca:c7:56:73:67:a6:cc:31:36:e6:30:87:3d:25:6b:59:12:
         ce:3b:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----