Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38392e302f32342d3234203d3e203232383232.roa
File:                     3231332e3133392e38392e302f32342d3234203d3e203232383232.roa (raw, json)
Hash identifier:          boYYkJlkrjYGM4mEVKdBQLcSbiXA7IhFeEu4BUdr+mw=
Subject key identifier:   1D:E0:CD:56:CD:73:2A:32:29:7B:FD:95:2B:A4:9D:BD:D8:D6:F2:B7
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       3B3A4AA5FC33C64A8C829E8969AA3F8DF409C0BE
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38392e302f32342d3234203d3e203232383232.roa
Signing time:             Wed 12 Apr 2023 11:27:11 +0000
ROA not before:           Wed 12 Apr 2023 11:22:11 +0000
ROA not after:            Wed 10 Apr 2024 11:27:11 +0000
asID:                     22822
IP address blocks:        213.139.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3a:4a:a5:fc:33:c6:4a:8c:82:9e:89:69:aa:3f:8d:f4:09:c0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Apr 12 11:22:11 2023 GMT
            Not After : Apr 10 11:27:11 2024 GMT
        Subject: CN=1DE0CD56CD732A32297BFD952BA49DBDD8D6F2B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:7b:27:9f:29:61:ae:ed:4d:be:ad:93:43:
                    d6:1c:0e:48:ed:4d:5a:0f:4e:c4:26:27:5f:a8:8b:
                    cc:26:c5:6f:f8:e2:2e:be:d7:87:63:8f:a4:78:ec:
                    9f:10:a4:d0:58:4a:08:6a:6a:cf:85:f3:1b:b4:2e:
                    13:b8:bc:86:bd:32:4a:a4:92:f1:24:ef:2d:6e:a0:
                    d6:c1:59:ab:dc:0b:f2:c6:0a:60:5a:b2:2e:e5:da:
                    ef:ff:e8:0d:98:d4:88:76:87:12:da:bf:39:91:a6:
                    b9:7c:0e:ff:e8:84:ae:e0:19:37:23:28:d3:d4:88:
                    a4:6f:30:8b:4a:2d:0b:c8:5f:3d:b0:28:88:01:1b:
                    79:f9:c7:44:0e:fb:ed:2d:0a:ee:94:fe:0d:65:27:
                    e0:4c:bf:f0:11:e9:f1:e4:06:b2:7b:77:23:bb:2d:
                    74:2d:ad:a5:21:74:f0:a0:39:eb:c7:94:a7:fc:99:
                    57:1b:3e:87:e5:a3:02:e4:71:58:e7:55:d6:40:4a:
                    0e:26:6a:65:74:d3:c9:d7:8f:73:f7:f8:16:e0:d0:
                    2b:f9:ba:f1:50:97:2a:ca:9f:e2:1f:26:a3:a5:09:
                    ef:a7:bc:c3:5c:b0:a6:49:0d:fe:cf:d0:93:8f:ab:
                    94:61:1b:8b:d9:f1:0c:ed:76:90:1a:4f:f5:7e:52:
                    d7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E0:CD:56:CD:73:2A:32:29:7B:FD:95:2B:A4:9D:BD:D8:D6:F2:B7
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38392e302f32342d3234203d3e203232383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:71:35:02:ae:bd:cf:df:be:65:8b:5f:97:f1:cd:b1:77:3a:
         cb:95:41:38:b4:ff:3a:07:fe:69:75:07:bb:ee:f2:ed:35:b1:
         65:61:c2:0b:3a:f1:1a:f3:cf:de:97:63:b1:34:83:ae:e4:be:
         a9:52:24:56:6b:a4:06:08:35:ac:78:0e:94:b6:dd:eb:f7:dd:
         ba:da:be:a1:3d:82:b5:f9:ba:b0:91:fd:b0:13:93:12:b3:db:
         07:b8:61:fa:79:5b:75:60:2f:7e:f4:b3:e8:53:8f:fc:17:9a:
         5a:8c:3f:0b:ea:18:cf:24:fb:c8:0e:b3:32:92:92:f7:98:3f:
         2a:df:79:83:b2:9c:47:8e:d3:b8:76:fe:73:ef:0b:42:cf:80:
         42:90:a1:94:71:23:ad:6d:4e:12:9f:07:79:cf:92:37:62:74:
         79:91:ff:e5:fc:dc:f8:3f:82:e6:6a:d8:87:d5:35:c3:a0:12:
         db:db:67:10:0c:26:84:1a:09:0d:a4:e6:98:fb:09:c8:49:db:
         66:c5:26:63:70:81:7c:9d:bb:67:31:07:b6:2e:4f:79:f1:22:
         2d:4e:cd:f2:8b:9e:3e:b9:7d:34:c0:0b:8a:45:6f:de:15:e3:
         39:f2:0b:76:80:94:e7:99:03:4c:34:a3:86:8f:21:d9:3e:3e:
         e2:ff:94:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----