Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39352e302f32342d3234203d3e203631333137.roa
File:                     3231332e3133392e39352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          E4cbNUNOR2h1WoDJzQo/hwKgQUZLUeoEjj7Csr5yc68=
Subject key identifier:   A2:F4:42:38:54:6B:E4:7B:73:7E:7D:8F:13:4F:2D:94:81:C9:12:F2
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       3965CAF6EF1C64506C2CDDEBEE970CBD4A088B77
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39352e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 30 Jan 2023 17:18:59 +0000
ROA not before:           Mon 30 Jan 2023 17:13:59 +0000
ROA not after:            Mon 29 Jan 2024 17:18:59 +0000
asID:                     61317
IP address blocks:        213.139.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:65:ca:f6:ef:1c:64:50:6c:2c:dd:eb:ee:97:0c:bd:4a:08:8b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Jan 30 17:13:59 2023 GMT
            Not After : Jan 29 17:18:59 2024 GMT
        Subject: CN=A2F44238546BE47B737E7D8F134F2D9481C912F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:39:62:86:ed:c5:8f:e3:0b:0b:c6:67:94:b0:
                    6d:19:36:72:e3:f9:f4:ca:c9:14:52:75:d1:7a:cc:
                    6a:e5:f2:60:7f:9d:cd:33:1c:75:83:0b:60:c2:9f:
                    34:bb:65:11:6b:bd:75:c1:79:8a:2f:b6:7b:bb:64:
                    b6:06:50:35:2f:39:4e:e3:b9:ed:5f:b2:b6:83:fc:
                    b0:28:cf:03:e2:12:76:13:ef:3b:ee:9b:f0:1b:07:
                    68:c4:88:79:b0:66:fb:b1:9a:41:54:01:8c:14:7d:
                    2e:1e:25:bd:da:67:93:db:01:01:ae:60:83:f7:36:
                    72:ca:63:41:85:42:bd:81:52:a2:ca:4f:eb:e0:01:
                    05:f9:79:77:ae:08:52:35:35:5e:94:20:73:7a:75:
                    33:0a:07:94:9a:9b:f4:2c:7c:10:52:06:79:d1:c0:
                    a2:ca:04:60:db:1c:fb:b3:ab:f1:76:f2:33:f3:92:
                    c0:f5:5c:b2:c6:ce:f9:d6:95:89:7a:55:05:89:35:
                    00:bc:dd:9c:7c:6b:62:9d:7d:b3:1d:ff:ad:ff:c2:
                    10:0a:ca:36:40:28:1f:85:1d:88:74:7a:a5:6d:53:
                    6b:4b:8c:4d:2a:41:da:0c:d8:1f:56:8e:d5:d6:2c:
                    63:8e:f1:f9:39:7b:72:65:68:72:12:87:0c:7e:31:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F4:42:38:54:6B:E4:7B:73:7E:7D:8F:13:4F:2D:94:81:C9:12:F2
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6f:26:5c:3e:35:1f:a4:f4:66:f1:d4:80:98:4b:f7:30:6b:
         8c:de:3c:d6:21:0e:23:ea:72:82:06:d8:4b:50:5e:77:9a:d3:
         2f:36:ae:91:42:c2:75:3e:c4:ab:9e:7a:90:e6:76:03:aa:c0:
         ea:78:cd:75:6f:d4:0d:fb:cd:e3:bd:00:bd:7e:b9:86:93:52:
         ec:c7:14:02:ef:27:f7:6d:31:ad:10:cc:97:94:30:33:8b:bf:
         cd:77:84:57:81:1f:3c:90:c4:79:5d:2b:1d:f7:9a:c6:0d:40:
         1f:1f:6c:be:2c:a5:14:97:5f:ad:fe:c7:12:56:64:11:02:7e:
         f1:64:43:15:86:b5:c1:63:e1:7b:c5:77:89:a6:ff:58:6c:0d:
         97:76:6f:56:de:7e:e9:cb:2d:92:f2:16:14:36:d1:d4:41:4a:
         6a:87:16:7f:50:98:fb:6b:3b:76:b3:1b:c0:f8:30:c2:54:37:
         b4:8a:e6:fd:84:20:91:bd:9e:2a:07:d8:3c:06:ca:5e:9c:fb:
         a0:74:5f:83:09:6c:e1:1d:1c:f0:ac:d9:04:eb:93:39:94:c5:
         7c:c7:1b:b0:82:64:a5:c5:e7:8e:71:97:43:2c:54:0f:44:6c:
         13:a9:a6:5a:e6:19:0b:73:63:14:7c:6e:f5:7a:2c:68:c6:91:
         f2:e4:44:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----