Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39352e302f32342d3234203d3e203232383232.roa
File:                     3231332e3133392e39352e302f32342d3234203d3e203232383232.roa (raw, json)
Hash identifier:          mnPeJzgYznmZJgbvbjGpNrLcXmDk/irrLXjnCSrKZEI=
Subject key identifier:   B0:C5:C6:12:9C:55:FB:9B:1B:40:E6:C3:7A:AE:CE:43:75:2C:D2:8C
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       766F32CB8E9F4FB32DF34EB2002593EE00579EC4
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39352e302f32342d3234203d3e203232383232.roa
Signing time:             Wed 12 Apr 2023 11:27:09 +0000
ROA not before:           Wed 12 Apr 2023 11:22:09 +0000
ROA not after:            Wed 10 Apr 2024 11:27:09 +0000
asID:                     22822
IP address blocks:        213.139.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6f:32:cb:8e:9f:4f:b3:2d:f3:4e:b2:00:25:93:ee:00:57:9e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Apr 12 11:22:09 2023 GMT
            Not After : Apr 10 11:27:09 2024 GMT
        Subject: CN=B0C5C6129C55FB9B1B40E6C37AAECE43752CD28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:af:a5:17:f3:3c:a7:9d:a1:45:7f:40:0c:
                    f9:46:de:09:ec:88:b2:c8:12:30:c6:f3:ef:d2:24:
                    71:4a:a0:84:ea:46:7b:f8:eb:de:27:8f:b0:a8:95:
                    a6:5b:ec:ec:b9:20:0a:37:39:90:71:00:45:13:3e:
                    88:bd:96:f3:c3:57:c1:b3:55:e3:44:ea:71:36:8c:
                    ae:65:2b:24:0a:ec:f9:53:c8:74:98:88:cd:98:fb:
                    7e:04:25:85:fa:5e:73:68:20:db:a0:7e:a6:61:27:
                    e2:8d:2d:21:45:4d:6b:6d:1a:74:39:58:38:a0:fc:
                    9b:d8:0e:67:08:4c:f6:61:8b:bc:a6:b7:92:33:a4:
                    cd:8b:d3:10:f3:8c:cf:7a:dd:d2:d3:6d:7d:ff:ba:
                    17:62:c2:93:0b:6f:2a:13:0f:fc:14:58:75:88:82:
                    a7:99:1e:9e:64:d1:3d:88:15:fe:98:59:79:d8:d9:
                    77:e0:59:d5:0c:df:3b:f5:76:69:93:2c:13:89:8f:
                    13:36:31:e5:6e:e6:75:43:59:b0:9f:62:79:a2:77:
                    04:51:a9:63:84:9a:b7:c0:f9:95:d1:4b:37:74:ba:
                    78:d6:77:d5:4d:94:e5:d3:87:8d:f0:e7:95:68:74:
                    47:fd:c6:bc:86:a1:24:16:79:d8:d9:26:3d:51:6a:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C5:C6:12:9C:55:FB:9B:1B:40:E6:C3:7A:AE:CE:43:75:2C:D2:8C
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39352e302f32342d3234203d3e203232383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:57:55:89:a0:52:b7:f7:97:44:83:cb:a9:a1:69:ad:11:d9:
         c7:2f:f5:6b:e3:c4:62:a2:5d:88:be:7c:00:c0:1b:95:0c:5a:
         2d:1c:6a:20:4f:8f:1c:21:b2:e3:72:b9:ee:8a:75:4e:a8:bc:
         eb:cb:2e:ca:94:0c:bc:74:1e:39:6a:8c:d0:99:d6:78:e2:3d:
         33:89:04:e6:25:04:29:b0:f0:8b:0f:9e:01:51:b0:14:01:81:
         3b:fc:69:ca:6d:5a:46:38:dc:17:58:bd:a4:41:ff:fe:05:04:
         eb:91:e6:08:14:13:7c:0f:cb:9a:23:96:a8:31:40:04:d9:96:
         92:2f:84:db:17:61:91:40:70:18:f6:80:79:44:b4:bd:6a:01:
         3d:4e:fd:ce:94:77:07:49:a2:b1:13:fc:38:f7:0a:43:0d:bd:
         61:ec:39:94:63:82:9c:ce:0e:33:e2:3d:1e:ac:29:c4:ec:a2:
         20:aa:04:c9:48:99:1e:eb:d7:09:01:29:19:4b:9e:10:bc:ef:
         a2:77:1b:b8:8e:9f:4f:95:77:f4:b4:31:96:ea:e2:9b:4c:bb:
         5c:44:04:08:2d:f2:ba:86:4d:61:4f:0e:41:72:67:4c:81:67:
         f3:4c:60:7e:3a:b9:57:b9:a8:64:b2:1a:43:cc:e8:6d:e0:4e:
         c0:60:33:cf
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdm8yy46fT7Mt806yACWT7gBXnsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yMzA0MTIxMTIyMDlaFw0yNDA0MTAxMTI3MDlaMDMxMTAvBgNV
BAMTKEIwQzVDNjEyOUM1NUZCOUIxQjQwRTZDMzdBQUVDRTQzNzUyQ0QyOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYK+lF/M8p52hRX9ADPlG3gns
iLLIEjDG8+/SJHFKoITqRnv4694nj7ColaZb7Oy5IAo3OZBxAEUTPoi9lvPDV8Gz
VeNE6nE2jK5lKyQK7PlTyHSYiM2Y+34EJYX6XnNoINugfqZhJ+KNLSFFTWttGnQ5
WDig/JvYDmcITPZhi7ymt5IzpM2L0xDzjM963dLTbX3/uhdiwpMLbyoTD/wUWHWI
gqeZHp5k0T2IFf6YWXnY2XfgWdUM3zv1dmmTLBOJjxM2MeVu5nVDWbCfYnmidwRR
qWOEmrfA+ZXRSzd0unjWd9VNlOXTh43w55VodEf9xryGoSQWedjZJj1RakBNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUsMXGEpxV+5sbQObDeq7OQ3Us0owwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM5
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzgzMjMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1YtfMA0GCSqGSIb3DQEBCwUAA4IBAQACV1WJoFK395dEg8upoWmtEdnHL/Vr48Ri
ol2IvnwAwBuVDFotHGogT48cIbLjcrnuinVOqLzryy7KlAy8dB45aozQmdZ44j0z
iQTmJQQpsPCLD54BUbAUAYE7/GnKbVpGONwXWL2kQf/+BQTrkeYIFBN8D8uaI5ao
MUAE2ZaSL4TbF2GRQHAY9oB5RLS9agE9Tv3OlHcHSaKxE/w49wpDDb1h7DmUY4Kc
zg4z4j0erCnE7KIgqgTJSJke69cJASkZS54QvO+idxu4jp9PlXf0tDGW6uKbTLtc
RAQILfK6hk1hTw5BcmdMgWfzTGB+OrlXuahkshpDzOht4E7AYDPP
-----END CERTIFICATE-----