Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32332d3234203d3e2037303138.roa
File:                     3231332e3133392e36382e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier:          ooi/Ceq+iyEamIHHagp4AftOBGA6nOl7YVC6HY205WI=
Subject key identifier:   18:FC:79:C5:C8:ED:57:5B:16:55:3C:BB:14:75:40:2A:84:58:36:77
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       141A3B1A94B7B9BA99931FED63CB4CE6A63B7521
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32332d3234203d3e2037303138.roa
Signing time:             Fri 24 Nov 2023 17:09:45 +0000
ROA not before:           Fri 24 Nov 2023 17:04:45 +0000
ROA not after:            Fri 22 Nov 2024 17:09:45 +0000
asID:                     7018
IP address blocks:        213.139.68.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1a:3b:1a:94:b7:b9:ba:99:93:1f:ed:63:cb:4c:e6:a6:3b:75:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Nov 24 17:04:45 2023 GMT
            Not After : Nov 22 17:09:45 2024 GMT
        Subject: CN=18FC79C5C8ED575B16553CBB1475402A84583677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:79:74:e1:ed:fb:48:ab:80:2f:d2:86:ff:
                    98:9f:4d:ff:6b:ad:26:5b:21:be:4e:01:50:93:29:
                    d0:49:63:52:32:ea:f7:b3:ea:93:60:b3:67:af:ba:
                    2d:f9:dc:2f:4d:04:0d:b2:cb:a7:af:7e:ef:ba:bd:
                    b5:8a:66:b4:94:b4:4b:37:5f:a1:06:0b:f8:f7:31:
                    f0:af:d0:22:d3:8a:3a:83:2f:72:a1:66:35:d6:00:
                    a4:35:65:bd:94:37:5b:ba:86:26:12:92:52:84:4a:
                    22:f5:65:5e:b0:e1:05:56:6c:0b:81:95:a7:56:dc:
                    95:10:b2:0c:5f:61:9a:36:91:af:e2:bd:f8:e2:d7:
                    70:fe:45:0c:4d:1e:ab:63:30:5c:3f:0c:7a:30:f5:
                    51:b7:c9:9e:4c:98:4a:35:db:48:fb:d9:0a:3d:a5:
                    7c:e4:6d:13:7c:b0:e6:fe:4c:b3:72:c8:f6:0a:8d:
                    d0:93:0a:91:f9:1e:fa:65:62:bd:d4:b2:c2:11:f8:
                    a2:5d:27:92:e3:bc:0b:79:e6:89:a2:f0:53:4a:8f:
                    c4:79:74:ba:3b:d4:fe:00:c9:ed:6a:d1:ad:d5:fa:
                    42:38:5b:28:52:a3:d6:f3:dc:52:7a:77:8d:ba:43:
                    1d:0f:89:8b:e8:69:b6:3a:57:ba:d4:17:4f:8d:de:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FC:79:C5:C8:ED:57:5B:16:55:3C:BB:14:75:40:2A:84:58:36:77
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36382e302f32332d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:fb:fe:17:8a:a0:de:e0:f4:ec:e7:64:69:b7:02:1c:07:ad:
         11:75:fb:8e:b6:00:36:69:ee:0f:52:b9:1d:85:05:22:9d:0a:
         e7:a5:ae:00:00:d8:36:97:a7:04:09:be:8b:0c:36:45:15:2f:
         b4:6f:18:3a:01:99:aa:40:09:ea:a1:df:90:60:93:52:8e:70:
         d0:64:28:30:d6:ad:16:f0:9d:74:54:26:aa:25:8d:e3:4d:b8:
         3e:bf:92:bd:62:fd:a4:23:a5:e3:89:2d:83:ca:18:c8:80:2e:
         12:f9:da:0b:89:f0:8a:0e:a5:02:d1:36:61:55:90:52:b7:85:
         0c:bd:2d:0b:e2:54:ea:4a:3d:c9:34:26:cd:c4:8d:54:6a:e7:
         0b:c3:ad:ac:28:ac:6e:6b:ec:e8:11:7f:a3:9c:ff:a7:a3:4d:
         e6:56:7e:d8:84:a9:31:2c:39:15:49:26:2f:a9:5f:33:d7:11:
         88:d9:7c:00:1d:45:3b:cf:60:10:30:2d:52:5c:cf:8f:f0:ae:
         c9:75:3a:c5:af:9c:fa:70:ca:a9:82:15:a6:05:fe:32:12:88:
         c6:99:36:f2:70:50:25:9b:4e:53:54:df:03:6f:40:13:1d:fb:
         f1:8f:ef:38:3f:56:51:18:e2:15:39:fd:40:79:6b:7d:b3:44:
         56:34:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----