Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e203632323430.roa
File:                     3231332e3133392e37392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          hWj6a9xHlR9CB5Gv/YTtgw9qU02Mo/q/zuacKuhPjlo=
Subject key identifier:   B0:82:80:6F:75:BC:04:73:82:F7:88:D2:21:7C:6F:FB:7E:D2:AB:7C
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       599FD0D61FC0814CE4067013E0EA6EA569BB01E1
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e203632323430.roa
Signing time:             Wed 25 Jan 2023 13:02:48 +0000
ROA not before:           Wed 25 Jan 2023 12:57:48 +0000
ROA not after:            Wed 24 Jan 2024 13:02:48 +0000
asID:                     62240
IP address blocks:        213.139.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9f:d0:d6:1f:c0:81:4c:e4:06:70:13:e0:ea:6e:a5:69:bb:01:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Jan 25 12:57:48 2023 GMT
            Not After : Jan 24 13:02:48 2024 GMT
        Subject: CN=B082806F75BC047382F788D2217C6FFB7ED2AB7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ae:bd:66:01:69:23:4a:21:e1:bd:7e:1c:96:
                    2d:76:54:74:9b:12:86:17:16:26:e6:e5:37:72:d1:
                    ff:96:ec:26:1e:c3:fe:24:4f:fa:a5:03:bf:4f:64:
                    81:4a:df:6b:60:f3:57:7e:24:94:59:b0:de:b1:c6:
                    63:c1:53:47:a2:b8:0b:f5:97:5a:d9:e0:ce:7b:43:
                    66:f7:29:05:9e:f0:2d:ce:9d:88:09:77:fd:1c:56:
                    5b:4a:41:c6:0f:00:6b:5f:f0:f7:53:86:7d:af:2a:
                    dc:63:14:a5:fc:b5:aa:06:26:57:56:32:6f:98:43:
                    42:fe:6d:3d:b2:25:94:6a:b2:c5:58:f3:35:c2:b8:
                    0d:8f:20:d1:e0:8c:fa:fb:5b:ff:da:85:49:d3:f6:
                    31:24:fb:71:87:1a:92:c4:a5:f8:d6:9f:12:a9:c9:
                    9c:90:d4:41:08:2f:ad:ea:63:cd:8e:b9:d6:f8:7b:
                    06:88:11:df:6a:05:3b:0a:92:1e:1f:33:45:4b:aa:
                    0d:3c:29:2a:73:03:13:07:e4:65:b2:af:1c:97:3a:
                    95:3c:25:7c:7d:62:0f:f2:67:50:6c:b7:61:bf:39:
                    31:89:89:11:e3:8c:b5:f3:d5:6c:2b:e0:57:e6:cf:
                    43:28:f7:c9:5a:1b:9d:03:d0:7a:f0:d9:de:8f:ce:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:82:80:6F:75:BC:04:73:82:F7:88:D2:21:7C:6F:FB:7E:D2:AB:7C
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:66:bc:09:16:ef:d7:80:b9:c2:f0:54:e6:8f:70:d1:bd:7e:
         38:a0:0d:54:ea:7d:48:3f:d1:4f:ab:aa:53:60:c9:97:66:ff:
         42:ea:de:78:51:46:61:8f:19:84:8a:7f:b4:22:d1:70:c8:9c:
         75:03:c1:95:24:c7:3d:74:1d:f7:01:8e:e3:d2:6c:fb:6e:c8:
         fc:1f:44:14:e8:54:ce:b8:cd:15:e3:82:37:bc:10:2c:db:c0:
         74:ac:29:d5:24:1d:29:d7:2f:87:ba:be:64:0e:5d:34:be:71:
         c8:c1:59:d9:5a:48:ce:de:7a:e4:75:76:9f:47:7c:56:26:4a:
         20:10:1f:7f:42:ef:32:12:48:48:22:92:4c:ab:54:23:79:5a:
         10:d8:a6:84:82:b0:20:da:86:4e:da:d8:49:74:5a:40:08:8a:
         00:f0:be:a5:41:80:61:06:9a:c9:8c:e0:9c:86:89:dd:31:9a:
         1a:2e:d1:19:37:e5:c6:e7:5a:f7:32:93:5f:5d:f0:7e:e5:fb:
         5f:b1:77:f5:ac:96:66:5a:40:a3:c4:ab:9e:28:f7:b8:3e:07:
         f1:c1:b5:3f:bb:39:e9:0b:94:7a:00:43:1c:91:6b:6f:ec:fa:
         b2:c4:35:1f:af:a9:34:42:23:f3:70:16:3a:f1:ac:d7:2d:9d:
         c9:e4:02:48
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 9 00:52:33 2023 by rpki-client on console-ams.rpki-client.org