Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39352e302f32342d3234203d3e203539343332.roa
File:                     3231332e3133392e39352e302f32342d3234203d3e203539343332.roa (raw, json)
Hash identifier:          nk0sD1tN3EhcvL2sKMZ4jthmY29BkeEuGmyI/z/s7Wc=
Subject key identifier:   57:07:24:7D:10:3D:98:3A:4F:81:EC:C8:A6:79:12:1C:14:8B:29:97
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       30727191AD3F3894853C8E31A72641E7F54AE6F1
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39352e302f32342d3234203d3e203539343332.roa
Signing time:             Wed 25 Jan 2023 13:02:07 +0000
ROA not before:           Wed 25 Jan 2023 12:57:07 +0000
ROA not after:            Wed 24 Jan 2024 13:02:07 +0000
asID:                     59432
IP address blocks:        213.139.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:71:91:ad:3f:38:94:85:3c:8e:31:a7:26:41:e7:f5:4a:e6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Jan 25 12:57:07 2023 GMT
            Not After : Jan 24 13:02:07 2024 GMT
        Subject: CN=5707247D103D983A4F81ECC8A679121C148B2997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:84:eb:b8:37:24:24:6f:de:78:d8:fc:e7:
                    a8:9d:f7:62:91:36:86:ca:fc:32:15:5d:dd:69:50:
                    18:fa:65:dc:52:b8:2a:d2:63:cd:97:06:7e:7e:65:
                    77:8f:3e:99:8e:09:61:99:78:6d:06:fd:ec:71:1c:
                    75:88:cf:70:9c:da:43:e7:90:ec:5b:3a:1b:a6:50:
                    19:13:71:8e:75:af:27:a4:a2:43:5a:d3:6d:a1:51:
                    9f:44:3c:2b:5f:b6:b9:6a:a0:f0:f1:b4:10:ed:f7:
                    5d:89:23:d7:fb:32:5b:ce:51:3c:48:b8:c8:73:c8:
                    3e:dc:49:c5:e1:e2:a1:0e:00:06:d8:ee:11:e7:8d:
                    9d:d2:f0:5c:d5:e3:aa:91:4c:52:2c:8a:87:d2:ab:
                    c0:de:b3:17:b8:63:a2:e5:a9:1f:b1:f7:cd:0b:2a:
                    1a:7d:4a:d3:af:ad:7b:9f:ec:de:7f:10:9b:9a:52:
                    6a:cf:bf:32:99:84:61:83:3d:ea:aa:7b:dd:d1:a2:
                    cc:13:7f:54:50:24:09:e5:f2:b6:f9:8f:5a:88:21:
                    ab:04:73:50:f7:ed:80:78:05:6a:62:e1:89:63:83:
                    12:e7:4b:f7:6c:f2:bf:22:24:8f:67:56:c7:78:0c:
                    2e:7d:85:f7:32:2d:22:fe:fa:26:f1:af:91:d0:3e:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:07:24:7D:10:3D:98:3A:4F:81:EC:C8:A6:79:12:1C:14:8B:29:97
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39352e302f32342d3234203d3e203539343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:32:82:73:79:70:dd:6b:4c:9c:5e:1e:de:c9:1e:ae:b4:23:
         1b:f1:30:98:07:4d:85:6f:1f:6c:10:c8:1e:84:b6:2b:f7:43:
         f3:07:3e:bf:f2:8c:7b:94:8e:d6:80:6e:b5:39:17:d3:12:ab:
         2c:55:7b:37:33:0b:07:c3:e4:f0:2b:ea:d9:fa:99:64:37:99:
         e5:02:79:90:bc:43:83:ac:96:82:f3:f6:bc:d1:40:20:b8:81:
         3d:f8:cb:d0:8a:2d:3e:f7:e0:e3:3a:61:50:49:59:04:c0:46:
         32:05:8b:16:4a:c8:af:82:fc:d1:2f:5e:74:8b:f1:77:3a:96:
         97:48:28:0a:ca:c3:8e:75:63:4e:67:96:ba:74:7b:c0:8c:81:
         8f:8c:dd:b6:fa:f2:32:ab:ca:62:12:73:24:d0:66:9a:fa:8b:
         51:0c:1d:45:17:bc:fb:17:8b:c6:59:01:60:79:ca:06:22:54:
         b9:e4:f9:33:eb:99:d1:ac:3e:0f:28:01:ec:d6:64:aa:ae:1c:
         dc:12:7f:8c:0f:48:25:2e:59:b0:6c:e0:5d:cc:6e:0b:c1:09:
         17:fc:58:26:2b:71:7e:13:24:84:e3:ba:ce:16:85:3c:83:4b:
         36:8d:07:f2:5e:11:91:90:bd:41:28:2b:d4:ac:a5:e6:6d:66:
         41:7b:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----