Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38332e302f32342d3234203d3e203232383232.roa
File:                     3231332e3133392e38332e302f32342d3234203d3e203232383232.roa (raw, json)
Hash identifier:          O9b3fQt4hOQS//n4onsbnbfv7GjLCy/psC3XlzTpiac=
Subject key identifier:   5E:77:E5:3E:C6:6D:12:92:35:AC:37:75:D3:6D:FB:4B:C9:03:10:98
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       2C762854D2430FA61600727DBB37507A252B0FA2
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38332e302f32342d3234203d3e203232383232.roa
Signing time:             Wed 12 Apr 2023 11:27:13 +0000
ROA not before:           Wed 12 Apr 2023 11:22:13 +0000
ROA not after:            Wed 10 Apr 2024 11:27:13 +0000
asID:                     22822
IP address blocks:        213.139.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:76:28:54:d2:43:0f:a6:16:00:72:7d:bb:37:50:7a:25:2b:0f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Apr 12 11:22:13 2023 GMT
            Not After : Apr 10 11:27:13 2024 GMT
        Subject: CN=5E77E53EC66D129235AC3775D36DFB4BC9031098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c8:c6:d9:22:30:2c:e5:54:b5:34:e9:de:c8:
                    2d:bd:3b:f9:07:bc:99:9c:f5:05:63:51:12:86:71:
                    82:80:2b:8c:b1:6a:c2:1b:f5:ae:5e:f0:dc:ae:20:
                    e6:74:22:0e:e6:72:c5:44:15:98:90:a8:b0:44:f2:
                    83:3e:0d:bf:72:59:b2:ff:1c:54:16:83:d1:3d:0f:
                    40:06:9a:5d:38:dd:77:85:24:d8:c6:e9:44:bd:74:
                    d8:e2:fd:f5:61:d0:64:e4:8c:53:53:c2:c5:7d:a0:
                    b8:d8:d7:c4:77:b3:7d:d5:ea:f6:62:00:e2:50:3d:
                    70:db:a3:16:e2:55:bc:54:78:fd:6c:57:69:0f:b6:
                    e8:20:a1:98:90:7e:77:c2:6d:48:58:ab:bc:12:e5:
                    bd:9c:0f:4b:c5:61:c0:1c:9b:95:d1:ef:d9:89:b0:
                    c0:da:9c:d7:62:a4:80:8c:78:42:0f:a9:74:21:01:
                    44:11:bc:7e:23:64:7c:2b:7e:7f:f2:97:b0:3d:85:
                    94:f1:4b:1a:8c:ae:c5:3e:71:b6:43:8d:aa:1c:f2:
                    8b:19:12:25:61:69:c5:be:d5:f6:ac:c8:6c:9c:27:
                    e8:45:d0:76:fc:31:dd:bd:dd:c9:49:ca:5a:c6:e4:
                    66:14:26:eb:8d:e6:56:e5:13:23:2b:b0:0c:bf:59:
                    51:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:77:E5:3E:C6:6D:12:92:35:AC:37:75:D3:6D:FB:4B:C9:03:10:98
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38332e302f32342d3234203d3e203232383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:b6:5f:2f:2f:32:43:19:92:81:47:26:dd:8d:e9:fd:83:50:
         67:57:ff:f0:72:a1:9c:18:20:8b:df:f0:d0:3a:0c:d8:82:4e:
         ff:96:1a:f7:6a:2b:2a:b5:77:99:e4:08:3a:cf:24:f7:ed:94:
         ac:6a:c2:ca:25:c9:64:df:bd:bb:26:42:60:bf:b7:ec:ef:ac:
         1e:0c:69:84:4e:28:9f:14:c0:c6:25:2e:53:56:2e:78:3f:4c:
         76:fb:08:3e:33:df:9c:21:c8:f7:98:b7:0f:fc:f7:41:96:21:
         9c:8b:92:18:79:5d:d5:ce:1f:01:36:e7:60:4a:92:2f:60:3e:
         ce:64:55:72:39:4c:3f:bb:41:b8:61:3f:da:02:3d:f1:1f:86:
         38:16:6b:60:59:c6:32:56:aa:75:49:eb:6f:bc:55:d9:44:b6:
         64:7f:91:59:7b:82:83:1f:e8:0b:fb:04:4b:53:71:97:0d:eb:
         7e:0a:0b:c7:24:7f:93:85:31:00:50:23:44:db:ee:de:73:50:
         14:51:86:4b:1b:0c:49:ef:9b:ca:cc:ab:b9:ed:45:97:d7:40:
         5e:6c:eb:82:24:40:e5:c9:9d:49:dc:f3:1e:64:fb:12:5c:c2:
         87:5d:ae:bc:54:70:3e:b4:36:a3:37:a7:0b:12:39:42:1d:66:
         1d:6d:2c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----