Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38342e302f32342d3234203d3e20323039373337.roa
File:                     3231332e3133392e38342e302f32342d3234203d3e20323039373337.roa (raw, json)
Hash identifier:          Aam43ghcv76Q3MGlFJXm9z5JcsEMZ3pxw96CD6P5Nqs=
Subject key identifier:   38:3D:7D:9E:DD:5B:05:B1:E1:EB:47:5D:99:2F:44:72:CF:2C:C4:1F
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       413FD32E92D0DE5A430D93BCD2C5E67D8D7E68EF
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38342e302f32342d3234203d3e20323039373337.roa
Signing time:             Wed 25 Jan 2023 13:02:54 +0000
ROA not before:           Wed 25 Jan 2023 12:57:54 +0000
ROA not after:            Wed 24 Jan 2024 13:02:54 +0000
asID:                     209737
IP address blocks:        213.139.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3f:d3:2e:92:d0:de:5a:43:0d:93:bc:d2:c5:e6:7d:8d:7e:68:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Jan 25 12:57:54 2023 GMT
            Not After : Jan 24 13:02:54 2024 GMT
        Subject: CN=383D7D9EDD5B05B1E1EB475D992F4472CF2CC41F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:e2:7b:49:82:e3:dc:4b:65:43:8c:c0:ca:
                    cb:20:c2:45:2e:82:fb:ee:76:a7:1b:8b:f0:67:85:
                    c2:84:36:0c:d1:1f:84:48:5d:06:97:21:54:e9:4a:
                    a6:ca:aa:2f:42:43:51:78:52:1b:4e:c1:c2:5f:49:
                    26:ac:4f:d4:a5:32:61:3a:f7:8c:f4:ca:a7:28:62:
                    fd:df:e0:47:2b:db:02:71:0f:14:32:54:62:0c:77:
                    a3:ec:9b:41:98:22:1b:cf:de:ba:bd:a2:cd:d2:d1:
                    e9:91:de:2e:5b:52:e8:4c:db:80:88:e2:6e:62:b6:
                    f9:64:b5:ac:ff:eb:94:d4:5d:c9:47:d4:b8:93:b8:
                    80:00:3c:19:3d:09:c0:01:2d:a3:1f:3a:97:79:1e:
                    ed:55:ec:3c:d4:31:85:e4:8d:98:f3:eb:9e:e4:e8:
                    56:e8:dd:b9:f2:d3:16:ab:79:88:93:d2:6d:0d:40:
                    fe:b3:59:1c:d3:3e:0c:3b:8d:73:fd:92:5d:6e:64:
                    6f:b5:9b:75:19:d9:bb:22:a4:fe:54:eb:39:f9:94:
                    1c:f0:ac:3a:ec:f9:7a:f1:33:ae:db:da:7f:74:4b:
                    45:e5:9b:c8:bf:04:bf:9c:f3:91:dd:01:e3:7e:ed:
                    a3:f8:86:4d:9c:15:79:18:ef:fd:ed:62:cc:2e:9f:
                    75:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3D:7D:9E:DD:5B:05:B1:E1:EB:47:5D:99:2F:44:72:CF:2C:C4:1F
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38342e302f32342d3234203d3e20323039373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:9c:c6:43:07:e9:32:6b:5b:78:c5:8c:4d:70:1e:94:3d:b7:
         88:6a:91:9e:cf:07:74:1e:23:07:23:31:11:b3:09:c8:df:a7:
         45:26:f1:cb:e9:11:e2:cb:33:ff:5d:2e:12:86:99:5f:e5:b0:
         0b:3c:5f:99:fa:09:95:5a:c0:fa:8a:72:de:8b:6c:e1:53:9c:
         cd:58:a0:be:93:11:d5:79:b1:5e:de:35:81:d0:29:ad:47:e7:
         c6:89:bc:a1:d8:79:b8:40:5f:ac:99:db:fa:7d:bc:5f:3c:8a:
         33:e2:dd:8b:8c:0c:28:83:1c:79:b1:88:53:37:fd:19:15:d8:
         7a:e7:b6:ea:13:4e:3f:a6:e6:64:c9:7e:0d:c1:62:0c:e1:7b:
         e8:69:41:7a:48:c6:c8:c9:74:f4:db:a9:5f:fc:fb:63:5a:6c:
         fc:fb:27:56:72:8e:be:d9:76:69:1a:8e:ac:b3:a5:a7:9e:a1:
         21:64:58:83:d0:cd:27:2c:fc:cd:0d:4c:51:db:72:55:ca:c6:
         03:d6:cb:9f:1a:0a:62:b2:1e:ff:55:77:28:18:fb:d5:4e:6b:
         f3:eb:8a:6f:16:ab:bd:7c:43:e9:a1:16:71:31:4c:01:1c:35:
         5e:45:13:23:24:70:7a:f2:9b:d2:8a:7d:38:a2:64:dd:7c:ea:
         17:62:68:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----