Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139302e39322e3136382e302f32312d3231203d3e2031323339.roa
File:                     3139302e39322e3136382e302f32312d3231203d3e2031323339.roa (raw, json)
Hash identifier:          vuEMuVc4+YmTK4ZXrhTbfTQX+btfl+jKeT6RhxIt7ic=
Subject key identifier:   50:BC:DF:BE:86:BB:5A:0D:A7:FC:A3:42:4A:0E:73:B2:B4:E1:C4:EB
Certificate issuer:       /CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
Certificate serial:       79ED4A4F440B59D3B82A1523694C850986C548E0
Authority key identifier: 42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139302e39322e3136382e302f32312d3231203d3e2031323339.roa
Signing time:             Thu 30 Mar 2023 10:50:14 +0000
ROA not before:           Thu 30 Mar 2023 10:45:14 +0000
ROA not after:            Thu 28 Mar 2024 10:50:14 +0000
asID:                     1239
IP address blocks:        190.92.168.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ed:4a:4f:44:0b:59:d3:b8:2a:15:23:69:4c:85:09:86:c5:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
        Validity
            Not Before: Mar 30 10:45:14 2023 GMT
            Not After : Mar 28 10:50:14 2024 GMT
        Subject: CN=50BCDFBE86BB5A0DA7FCA3424A0E73B2B4E1C4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:d6:ad:39:d9:6d:95:13:70:56:66:13:ba:
                    1c:a4:e1:9c:06:c7:0c:fc:4b:9b:ac:85:0e:48:8b:
                    aa:82:de:14:f0:b1:a4:50:74:c6:e1:9e:b1:ee:76:
                    a5:21:05:1c:af:99:c1:76:9b:f4:3b:8e:ce:58:23:
                    16:7a:90:1d:d9:7d:ba:13:93:88:8d:e6:63:59:53:
                    7c:87:b4:70:05:15:44:15:93:b6:59:4c:e7:cc:c0:
                    a5:e9:29:2b:50:36:0c:18:72:26:8f:d2:65:20:ad:
                    c3:97:66:a8:08:ad:ea:cd:c3:27:b0:60:26:b5:a1:
                    d0:9a:35:d6:db:91:a2:11:bb:b4:29:3a:93:4b:0e:
                    3a:ca:62:22:b8:f8:d1:a1:8b:f1:b7:53:ae:98:34:
                    de:b1:b8:a0:69:83:37:8b:7e:55:39:a3:7b:a4:9a:
                    be:4b:a1:69:39:9d:0c:13:87:27:57:b6:8e:75:c5:
                    a2:a6:db:89:ce:c8:18:6b:0d:1b:76:ce:98:eb:9f:
                    99:20:7d:c4:92:7d:ec:61:b1:ed:42:09:70:a9:4c:
                    7d:e8:31:cc:c3:97:9d:ad:83:69:1f:76:24:c3:4c:
                    de:80:8b:d7:20:fc:cd:45:7d:6d:4b:c8:a0:35:f3:
                    ad:9b:e4:3a:86:5b:f7:40:3b:7b:9e:bc:cd:5f:fa:
                    07:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BC:DF:BE:86:BB:5A:0D:A7:FC:A3:42:4A:0E:73:B2:B4:E1:C4:EB
            X509v3 Authority Key Identifier:
                keyid:42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/423F0571785ED23F10A6CC7B27AC1B1C8781A67A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139302e39322e3136382e302f32312d3231203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:2c:7e:06:b4:82:1e:f7:fe:8a:ca:8b:d1:f2:e2:a3:df:17:
         6a:c5:0c:e7:9e:a1:9b:07:19:5b:df:22:a7:00:5c:f0:cc:e1:
         97:9d:fa:3e:38:ab:ea:9e:36:29:16:9f:68:6f:28:1c:fd:8a:
         a3:4a:8c:cc:86:11:0d:1a:40:63:f4:58:45:76:08:b7:7c:51:
         8b:83:39:8a:d6:25:42:c8:55:7a:c6:77:bf:eb:a0:d1:0d:2f:
         59:87:2d:95:a3:66:87:b0:7d:96:26:57:48:ea:31:3d:2c:af:
         56:7a:2c:29:4f:c3:9c:df:01:0a:24:2c:9b:d0:47:a8:2d:c0:
         ab:24:e7:68:43:8b:60:df:63:de:7e:f4:3b:62:af:08:ea:69:
         a4:6c:58:fa:fd:f6:d0:73:f2:dd:a0:01:89:d3:ab:a9:5f:c7:
         c5:cc:34:c7:9d:8d:f0:bf:ec:83:e4:51:46:3c:d9:ca:8c:b8:
         0e:05:7d:c8:4e:21:01:15:91:69:4b:6c:37:a3:a0:52:7c:48:
         cd:ce:98:56:c2:50:1a:22:39:4c:65:a7:e1:5c:e3:89:9e:76:
         51:2d:8c:27:51:cd:e7:6a:45:8a:9e:d0:78:e1:1e:df:43:2c:
         fe:7e:96:c9:4e:b8:27:69:7e:85:70:43:23:cd:93:9f:e2:8e:
         af:8e:47:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----