Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31322e302f32322d3234203d3e20323030303139.roa
File:                     33312e362e31322e302f32322d3234203d3e20323030303139.roa (raw, json)
Hash identifier:          ispiiTbQxYpOorbo51/3wGE797xgGLm6ex9k2z2Y6+A=
Subject key identifier:   C3:6A:21:90:9E:CA:51:64:9F:2F:39:B3:75:3D:C9:4E:81:23:E7:4E
Certificate issuer:       /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial:       4D00803A00F61FC94A4B0F44FC05B006D022CBE3
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31322e302f32322d3234203d3e20323030303139.roa
Signing time:             Wed 22 Mar 2023 15:29:43 +0000
ROA not before:           Wed 22 Mar 2023 15:24:43 +0000
ROA not after:            Wed 20 Mar 2024 15:29:43 +0000
asID:                     200019
IP address blocks:        31.6.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:00:80:3a:00:f6:1f:c9:4a:4b:0f:44:fc:05:b0:06:d0:22:cb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
        Validity
            Not Before: Mar 22 15:24:43 2023 GMT
            Not After : Mar 20 15:29:43 2024 GMT
        Subject: CN=C36A21909ECA51649F2F39B3753DC94E8123E74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:83:34:74:35:dd:d2:96:f4:41:f4:e5:5f:
                    76:7e:12:24:58:dd:f2:25:03:79:9a:d5:80:29:ce:
                    a9:ae:71:72:0e:ab:1d:8b:d5:e8:d5:54:d5:9b:a8:
                    48:a0:af:2d:11:f8:dd:44:a4:61:e4:23:02:11:78:
                    a5:82:61:52:c3:f8:ea:a0:d9:89:bc:e4:d1:e6:da:
                    8b:a8:55:0c:ed:53:91:54:8a:7a:26:6d:0d:b2:cb:
                    70:81:c5:c5:35:8b:9a:29:d9:44:de:2f:d3:aa:f9:
                    61:d4:25:11:8b:6c:88:19:67:69:83:e4:9f:98:ea:
                    64:fe:50:2a:5b:72:01:0c:75:8b:9f:82:2f:5e:45:
                    fb:49:1e:98:0e:b5:53:79:77:5f:28:23:c3:a0:48:
                    c4:7c:36:a6:58:38:35:cb:11:f4:3b:1a:35:d3:05:
                    bd:fd:ae:a1:b1:37:6c:16:78:44:6d:05:15:5d:50:
                    52:02:c1:0f:e7:d0:3a:ea:e8:32:e7:91:a7:7c:75:
                    35:6c:a9:ee:12:b1:10:71:2b:43:16:d6:dd:d4:fa:
                    8f:14:1c:86:e0:4b:3f:05:89:59:5f:26:5b:9d:16:
                    96:f8:66:46:7a:2b:ee:89:d9:04:fc:d7:23:89:aa:
                    84:dd:3a:06:7c:5e:6f:fe:0e:0d:ec:9d:5c:ea:30:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6A:21:90:9E:CA:51:64:9F:2F:39:B3:75:3D:C9:4E:81:23:E7:4E
            X509v3 Authority Key Identifier:
                keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/33312e362e31322e302f32322d3234203d3e20323030303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:f8:a7:52:80:1b:9b:70:3f:09:af:ad:6f:0b:c6:43:a1:
         2e:62:9d:c7:6e:c8:6e:df:90:84:ff:59:10:3e:21:bc:c4:82:
         76:1f:ef:2b:f6:11:47:27:93:6c:dc:e0:1c:54:17:8c:33:40:
         07:aa:0d:c0:5e:92:47:db:b9:a4:de:94:a0:35:86:32:95:f7:
         ea:40:5d:92:7a:32:97:75:45:5b:b6:30:9f:c1:c1:4f:1a:36:
         8f:eb:a8:52:13:3e:30:b1:4e:d4:1b:ee:02:4a:f6:2e:ac:cc:
         89:91:d1:4f:e4:7c:de:93:39:54:38:78:21:94:7c:f2:71:4b:
         8c:bd:19:a3:af:e2:c7:a2:76:6b:86:3e:7b:5b:18:75:c7:de:
         a6:70:60:c8:1d:4f:ce:e3:76:8a:1d:6c:ed:57:2d:01:6a:dd:
         5e:b6:0a:6f:60:68:69:d2:83:9d:5b:a9:4d:01:ef:77:7f:32:
         19:22:a8:39:b2:79:f1:d1:39:5d:5a:84:30:50:a2:33:d5:41:
         ff:96:b0:dd:22:e7:72:de:20:ca:ae:85:5f:99:2c:e0:0b:f7:
         26:8e:c6:51:78:0b:20:29:6a:a4:57:a0:e9:e7:98:52:2d:af:
         3a:01:5a:45:2a:9c:9e:99:7b:d7:0c:6c:e2:ab:0f:5f:9a:e5:
         e9:f7:bf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----