Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e203538323132.roa
File:                     3231332e3133392e36362e302f32342d3234203d3e203538323132.roa (raw, json)
Hash identifier:          cFiD4zlqHg2Uszwg0oL1BjN/5ZjhfkTUNCZZYq6Kw4o=
Subject key identifier:   C2:26:D6:67:3B:D8:9A:E4:FA:B6:D4:C5:8E:E4:9A:F4:7C:30:6C:CF
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       6F8274300E467A15C77E6578261826F6311188FD
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e203538323132.roa
Signing time:             Wed 25 Jan 2023 13:02:03 +0000
ROA not before:           Wed 25 Jan 2023 12:57:03 +0000
ROA not after:            Wed 24 Jan 2024 13:02:03 +0000
asID:                     58212
IP address blocks:        213.139.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:82:74:30:0e:46:7a:15:c7:7e:65:78:26:18:26:f6:31:11:88:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Jan 25 12:57:03 2023 GMT
            Not After : Jan 24 13:02:03 2024 GMT
        Subject: CN=C226D6673BD89AE4FAB6D4C58EE49AF47C306CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:e2:8d:0e:de:4f:aa:12:ca:8f:a3:68:19:
                    65:36:ff:6f:4f:15:53:5b:44:7e:17:02:26:cb:e2:
                    82:75:c3:b4:5c:7e:e3:5e:8e:32:4b:6e:f6:02:f0:
                    a9:b8:7e:24:0f:1c:88:d1:db:e9:83:f7:d7:30:f0:
                    17:6d:ce:0c:d9:17:c1:a7:d7:aa:f2:90:f9:eb:4a:
                    17:1c:d4:d7:cc:1d:e6:0e:75:15:67:c5:09:19:10:
                    84:8d:6a:ca:a4:9a:0b:2e:76:c8:f8:5a:a4:6c:a8:
                    1e:0a:41:f5:1c:14:6d:7e:09:ee:03:34:b4:b2:96:
                    8e:cf:20:0b:b7:53:63:d5:b1:7c:d0:5d:7b:59:d7:
                    8a:fa:b6:a3:5d:50:3b:4d:de:4d:9f:95:3d:05:12:
                    ba:9a:2a:0e:a8:00:62:8f:16:ba:7f:96:59:e7:6d:
                    fb:d9:0a:4c:41:36:41:b3:64:02:89:4b:67:34:02:
                    9b:d6:f7:15:18:48:c3:79:3a:a8:44:d9:bb:21:48:
                    55:8e:cd:d8:f3:36:46:4a:a6:01:ca:91:29:7b:df:
                    92:0d:2d:7e:8d:af:cb:b5:3a:bd:4f:8e:07:d2:78:
                    df:d3:97:bc:b9:e7:1c:86:9c:ec:64:2a:61:93:01:
                    e8:c3:c8:11:81:a3:9e:6e:9c:82:03:24:9f:17:60:
                    5c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:26:D6:67:3B:D8:9A:E4:FA:B6:D4:C5:8E:E4:9A:F4:7C:30:6C:CF
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e203538323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:6f:f7:04:f3:0e:03:cb:c7:e6:04:7f:d6:85:b6:a7:20:fa:
         50:18:9f:c3:86:2f:18:52:08:a0:2c:63:f2:21:43:d0:43:10:
         8e:86:b4:ea:b3:00:26:4a:b0:2f:26:29:c2:7c:1a:27:cc:68:
         31:32:e2:00:55:c5:e4:38:10:09:f3:61:73:dc:d6:7d:ef:e7:
         52:a9:98:59:96:10:5c:35:8d:a2:fe:ab:ed:3a:b0:98:9c:9c:
         8e:22:65:3e:7e:98:46:22:be:60:ad:37:3d:bc:f3:4a:1b:d4:
         10:2c:f4:b5:21:ac:83:da:20:7c:3a:87:d2:79:d3:b6:7c:e6:
         9d:a4:d0:02:d8:74:e5:d5:e7:07:3b:26:ba:4d:77:de:96:34:
         cd:c6:64:0d:cf:c6:bc:c0:b2:3b:0f:a4:19:58:c8:4c:73:50:
         10:56:a9:01:8f:f2:48:15:57:15:ed:28:7d:c9:b3:25:af:8e:
         a4:9e:99:8a:94:5d:45:42:78:fb:f9:61:e6:fa:e6:7c:d8:a9:
         62:b0:54:3f:b1:7f:22:42:86:c0:92:04:18:bb:79:86:2a:78:
         5d:88:28:f2:d9:51:f0:75:2f:37:7e:64:70:30:df:38:2c:52:
         dd:7f:b2:82:08:26:e7:ce:70:2f:ac:6e:74:14:dc:84:b5:6b:
         54:11:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----