Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a3a2f33322d3438203d3e20323135393738.roa
File:                     326131333a656634343a3a2f33322d3438203d3e20323135393738.roa (raw, json)
Hash identifier:          e5yJLMFmof3bgJiD7IhYtvC0OJ/y+xWbdOrh+9GJb30=
Subject key identifier:   C0:40:CE:12:13:70:95:91:61:73:B5:CA:CD:DF:9D:92:C5:E1:14:D0
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       458EB0D76B83E881D00136901433636FC8717B9E
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a3a2f33322d3438203d3e20323135393738.roa
Signing time:             Sun 17 Dec 2023 15:50:30 +0000
ROA not before:           Sun 17 Dec 2023 15:45:30 +0000
ROA not after:            Sun 15 Dec 2024 15:50:30 +0000
asID:                     215978
IP address blocks:        2a13:ef44::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8e:b0:d7:6b:83:e8:81:d0:01:36:90:14:33:63:6f:c8:71:7b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 17 15:45:30 2023 GMT
            Not After : Dec 15 15:50:30 2024 GMT
        Subject: CN=C040CE12137095916173B5CACDDF9D92C5E114D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:a4:dd:6f:52:11:33:f1:b5:1a:07:f8:d8:
                    53:54:32:8a:26:ec:99:1e:3b:ea:1e:17:d2:fa:d6:
                    9f:57:f1:38:13:47:06:90:fd:81:96:12:fc:14:b5:
                    2a:83:6b:34:71:58:40:53:e2:4b:9f:a1:02:ac:ac:
                    a1:9a:aa:14:08:ce:6a:d7:bd:36:6c:27:36:de:14:
                    62:3b:c6:e5:00:e0:e3:62:1d:28:57:68:bd:51:a1:
                    63:93:65:94:fe:0d:cb:00:ad:a0:3e:78:d0:90:ff:
                    56:72:ed:24:40:d0:88:7d:b4:2b:3c:f7:76:9f:2b:
                    de:aa:22:5a:e6:77:84:14:86:2e:3d:84:02:59:80:
                    fa:0d:90:07:b1:28:96:d6:4a:35:18:c7:35:9f:46:
                    14:9e:4e:07:d1:60:0a:e1:72:63:b1:32:f1:0f:76:
                    92:8e:62:16:58:06:e8:74:e6:f7:2c:34:9d:59:64:
                    32:89:c1:32:d2:d6:bb:33:e7:34:0a:93:3d:35:85:
                    95:46:ea:19:3c:58:23:dd:53:3d:15:28:6d:ad:3f:
                    4e:f5:4a:46:b7:64:27:55:02:fe:a1:57:81:59:b3:
                    d2:c0:e6:56:b3:53:a6:a5:05:89:f2:6d:51:c8:0a:
                    09:65:b2:07:f5:de:db:f4:19:5f:3a:dd:79:26:79:
                    df:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:40:CE:12:13:70:95:91:61:73:B5:CA:CD:DF:9D:92:C5:E1:14:D0
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634343a3a2f33322d3438203d3e20323135393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef44::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:fc:04:71:08:ca:93:d0:44:b6:1c:a7:97:41:0c:4d:c6:1b:
         b7:c7:99:b4:d1:7c:2f:18:1c:7e:13:af:f6:3e:c2:f1:df:ac:
         d2:43:00:46:de:fa:e7:22:23:af:58:75:1f:0e:c3:b3:65:7a:
         7a:2c:89:d8:6a:8c:7e:e9:7a:c7:24:0d:13:03:f0:87:9c:67:
         99:e4:d5:05:47:34:0f:81:6c:6a:a4:70:f2:48:27:b5:31:9e:
         9b:ae:e9:a3:ec:6d:45:6c:0c:14:b5:37:b0:18:52:9b:4a:90:
         4f:ef:44:0f:53:57:c3:d6:d6:bd:c7:79:0d:59:98:bf:ea:63:
         95:96:fa:54:68:77:f2:55:c0:81:93:7c:d6:a9:36:55:ed:0e:
         c3:c5:c6:97:ff:7b:4e:2c:dd:6d:93:f8:67:54:5b:da:8b:a6:
         cd:91:d8:02:7b:37:19:84:41:bb:9e:ba:a0:aa:fe:c8:34:88:
         35:5b:b6:4d:fc:a2:7e:6b:d8:10:e1:ba:56:bf:6c:b1:f5:4f:
         ba:df:9d:ac:d1:4f:9d:24:e9:7f:c8:6b:28:a2:2e:be:51:f5:
         f2:a7:2d:c8:52:e0:ad:a9:0e:98:2e:af:5c:b9:c7:c3:32:2a:
         28:e6:50:20:c1:01:5c:e8:de:f4:8d:57:3b:44:18:94:0b:d4:
         16:b8:a8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----