Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634363a3a2f33322d3438203d3e20323135393738.roa
File:                     326131333a656634363a3a2f33322d3438203d3e20323135393738.roa (raw, json)
Hash identifier:          jQEalGuf39lmdfrA9GISzU4XaIKld+TOmMh0P9ToGM4=
Subject key identifier:   B7:60:0D:7D:3A:45:EF:15:69:59:D1:3E:68:B7:7B:D2:BF:F6:94:27
Certificate issuer:       /CN=c3044238bb4721d91399f8b02719dfd22edf0087
Certificate serial:       4E55FE5FDF0433C5CB88DB6C165B9696766258CD
Authority key identifier: C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634363a3a2f33322d3438203d3e20323135393738.roa
Signing time:             Tue 19 Dec 2023 17:03:06 +0000
ROA not before:           Tue 19 Dec 2023 16:58:06 +0000
ROA not after:            Tue 17 Dec 2024 17:03:06 +0000
asID:                     215978
IP address blocks:        2a13:ef46::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:55:fe:5f:df:04:33:c5:cb:88:db:6c:16:5b:96:96:76:62:58:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3044238bb4721d91399f8b02719dfd22edf0087
        Validity
            Not Before: Dec 19 16:58:06 2023 GMT
            Not After : Dec 17 17:03:06 2024 GMT
        Subject: CN=B7600D7D3A45EF156959D13E68B77BD2BFF69427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:14:6b:9e:92:42:61:f3:20:16:b7:75:17:
                    56:f7:2d:be:0f:03:35:49:75:fb:d6:b3:ec:ae:e5:
                    b1:7c:e8:17:30:ca:bf:23:97:6a:b8:c8:76:57:b1:
                    e3:50:13:be:67:48:04:4c:39:59:cc:1a:4d:1a:9f:
                    3b:43:6d:62:a2:ea:03:c8:40:45:79:51:67:a0:ac:
                    2d:26:0b:bc:77:1f:48:ca:9b:3d:48:01:4c:d9:4e:
                    9f:8b:d7:09:3d:f4:9b:b2:5d:11:8e:ac:ac:9e:e7:
                    32:3d:8f:ae:bc:09:7c:6b:80:32:7b:61:fb:ae:12:
                    e7:09:a0:ee:bc:7f:33:47:5e:14:40:e2:b3:5c:7e:
                    d0:b4:fa:51:9c:77:8e:99:c2:dd:c2:9e:40:e4:7e:
                    25:af:84:47:0b:b3:e9:69:c5:f0:bc:b9:83:1e:f0:
                    3d:27:9c:63:66:d8:35:c7:b2:03:98:c2:bd:04:c0:
                    da:d7:02:0c:0b:13:51:bd:2c:e0:19:a2:7e:88:c5:
                    2f:10:32:d5:61:37:0b:c7:82:8a:e5:a1:1b:4e:51:
                    b6:78:e7:ba:50:84:87:fe:e3:4f:20:f9:78:d8:22:
                    e0:4c:b4:55:26:f7:3f:6d:f5:5f:46:18:af:cf:fb:
                    56:4d:dd:df:c2:14:fe:9a:ec:10:f4:b5:09:8d:3f:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:60:0D:7D:3A:45:EF:15:69:59:D1:3E:68:B7:7B:D2:BF:F6:94:27
            X509v3 Authority Key Identifier:
                keyid:C3:04:42:38:BB:47:21:D9:13:99:F8:B0:27:19:DF:D2:2E:DF:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/C3044238BB4721D91399F8B02719DFD22EDF0087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwRCOLtHIdkTmfiwJxnf0i7fAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4e119e1-a340-4116-a297-7caf7f11ac5d/0/326131333a656634363a3a2f33322d3438203d3e20323135393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ef46::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:32:29:aa:7b:ac:e0:f2:b0:24:ea:68:d8:7b:ed:4a:a0:e7:
         a6:79:f4:fe:c7:d9:cd:fb:be:8c:84:eb:3c:75:15:95:7c:f9:
         ba:d5:e1:96:54:95:40:cd:88:f0:ba:49:1d:81:ba:e0:69:c8:
         e5:c6:fa:10:bd:f1:d4:e7:50:96:d1:cf:d9:2d:da:d0:5c:85:
         88:47:fd:db:8a:49:19:79:79:83:bf:71:97:e3:b6:e7:90:87:
         d3:14:e3:cd:84:20:a3:e9:06:71:4d:b1:96:c4:70:71:6f:e3:
         66:c4:ac:84:41:10:02:66:d1:3e:57:f8:46:ae:f8:58:52:a6:
         32:fc:94:5b:56:e7:66:8c:9c:df:7b:25:5b:8f:24:6e:d3:04:
         a7:c5:06:67:f0:64:60:db:10:51:ad:49:dd:ee:38:90:8c:09:
         cb:10:fd:24:fd:2e:44:6a:1d:0b:c3:9b:6d:b4:cd:96:5b:44:
         86:85:8a:c6:1c:ce:3f:23:c3:d0:9e:a8:8a:41:93:50:90:3a:
         52:3b:50:be:8d:bb:2a:2c:28:77:c9:17:ee:99:0b:e9:41:e4:
         88:6a:a9:9c:da:08:31:f3:a6:61:d3:8c:13:e7:9b:a9:f9:b1:
         dd:84:de:fa:74:10:6a:ac:0e:a6:b1:05:be:06:38:99:79:78:
         61:58:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----