Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39342e302f32342d3234203d3e203232383232.roa
File:                     3231332e3133392e39342e302f32342d3234203d3e203232383232.roa (raw, json)
Hash identifier:          oJcWiRIaIktzevXQvqDhSO8LdN0KtPbpoZB292lGDYA=
Subject key identifier:   83:CB:22:78:B2:35:A2:53:D9:10:97:46:EB:FE:6E:04:5E:F4:4D:DE
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       556C3B6EF2A68BDEED59C8A2645AED0A1B52C70C
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39342e302f32342d3234203d3e203232383232.roa
Signing time:             Wed 12 Apr 2023 11:27:09 +0000
ROA not before:           Wed 12 Apr 2023 11:22:09 +0000
ROA not after:            Wed 10 Apr 2024 11:27:09 +0000
asID:                     22822
IP address blocks:        213.139.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6c:3b:6e:f2:a6:8b:de:ed:59:c8:a2:64:5a:ed:0a:1b:52:c7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Apr 12 11:22:09 2023 GMT
            Not After : Apr 10 11:27:09 2024 GMT
        Subject: CN=83CB2278B235A253D9109746EBFE6E045EF44DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:de:1c:f6:b9:c6:f0:92:b2:45:ce:de:fe:
                    ea:31:d9:b1:9c:a1:ff:2d:85:37:b2:1d:bd:b7:e9:
                    fa:dc:42:73:e2:7f:5d:b2:84:a1:71:13:c1:8b:2b:
                    a3:73:53:75:96:06:cb:30:61:d1:14:94:ad:c0:0a:
                    56:6e:58:f5:0f:53:d0:14:8a:e3:e3:6f:d4:e5:4e:
                    73:86:ae:1a:6e:5a:3a:2e:f9:ab:25:05:85:e9:b9:
                    19:8e:45:17:82:4c:ff:95:2f:ab:19:4a:2d:82:19:
                    a1:ed:2e:f9:74:5a:81:a6:b3:9a:8e:08:7c:5e:fe:
                    8a:88:08:8a:69:43:df:8f:c3:05:3b:ad:53:fb:fe:
                    b9:26:e4:fc:69:c5:2c:16:dd:85:43:ac:0c:a1:67:
                    e5:62:24:f6:d1:1c:96:2d:60:5d:1b:2f:7c:90:c5:
                    a8:29:95:69:8a:94:83:ad:1b:1c:a7:f8:9a:9e:1f:
                    6d:b8:95:23:38:0a:f6:75:79:46:ce:65:f3:3a:3d:
                    12:1c:b4:bd:d5:9b:ed:9e:fc:0b:f4:97:76:7c:57:
                    f2:d4:3a:9e:34:3b:70:81:6a:a5:90:07:cf:b3:e8:
                    a6:81:04:78:32:ba:4f:a8:5a:55:e0:76:c6:20:87:
                    53:1f:23:1d:e2:4d:a6:b3:64:5c:ed:48:bc:77:f7:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CB:22:78:B2:35:A2:53:D9:10:97:46:EB:FE:6E:04:5E:F4:4D:DE
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39342e302f32342d3234203d3e203232383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:92:21:d9:70:47:8f:34:a6:ba:43:42:52:96:29:ca:ab:96:
         0c:db:50:50:e3:ff:29:dd:4e:97:d2:91:07:05:12:37:8d:22:
         f2:c5:35:ff:6f:cf:cb:0f:57:7a:27:64:30:0d:a2:aa:3a:8e:
         fe:5d:49:84:65:69:28:b6:5c:dc:31:fb:d7:1c:91:4c:60:b5:
         13:65:98:cb:45:5b:fc:19:e4:5c:2d:8f:2f:20:9d:3f:02:e5:
         fe:3f:65:0b:bd:c4:ae:32:97:b2:9e:0e:e4:0b:f5:f7:39:da:
         ce:c7:1b:d8:97:84:a8:e5:98:2d:5b:11:7f:88:bb:bc:26:dd:
         21:f5:90:46:a0:90:34:05:83:ce:ca:31:73:60:4b:3a:ed:62:
         2f:af:22:87:1b:f7:f9:6b:e5:1b:d9:29:d9:6d:7b:4e:4f:09:
         e2:2f:1b:5e:35:c4:9f:af:86:3d:d6:35:2a:a7:3f:96:5b:ac:
         bb:52:8b:59:16:cb:db:8c:5f:8c:39:0a:38:1f:5f:cc:a7:01:
         84:e3:36:79:49:50:5b:17:23:65:c8:d3:45:d0:f3:02:9f:cd:
         a0:4b:ad:89:da:3e:85:ea:a3:cf:94:47:ec:e7:d0:ea:e1:38:
         58:72:c6:30:ec:09:76:da:ba:7a:68:02:08:55:5c:dc:11:6a:
         4d:10:ee:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----