Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32332d3233203d3e2037303138.roa
File:                     37382e32342e3132322e302f32332d3233203d3e2037303138.roa (raw, json)
Hash identifier:          WnGdg5B39MBZiAp8ZShdL7JFQYvTcsxKRB9K9MMBCNM=
Subject key identifier:   3D:49:0C:43:A1:3D:96:21:42:5B:6E:39:AD:97:20:B9:DC:17:FA:28
Certificate issuer:       /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial:       5C3F096B8EEDDC1C3C6C7EFC1E88431140EC4794
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32332d3233203d3e2037303138.roa
Signing time:             Fri 02 Jun 2023 15:07:11 +0000
ROA not before:           Fri 02 Jun 2023 15:02:11 +0000
ROA not after:            Fri 31 May 2024 15:07:11 +0000
asID:                     7018
IP address blocks:        78.24.122.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3f:09:6b:8e:ed:dc:1c:3c:6c:7e:fc:1e:88:43:11:40:ec:47:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
        Validity
            Not Before: Jun  2 15:02:11 2023 GMT
            Not After : May 31 15:07:11 2024 GMT
        Subject: CN=3D490C43A13D9621425B6E39AD9720B9DC17FA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:5f:f7:92:7f:67:40:e7:5e:84:68:6a:74:
                    aa:ca:62:98:fa:16:66:80:e6:06:34:c2:8a:43:56:
                    4f:46:69:fa:ba:88:81:ed:cc:95:b4:1e:5f:96:b9:
                    72:ed:34:66:98:03:f4:08:2c:47:e1:23:3f:c8:04:
                    4c:e5:a3:00:af:16:af:68:d5:79:74:88:9b:73:8e:
                    19:3d:c2:97:2d:be:51:4c:81:39:98:eb:0c:94:59:
                    f6:5f:6a:98:f9:a0:9f:dc:1e:bb:09:13:cb:0f:98:
                    8c:f6:a4:39:2e:74:53:c3:86:1a:59:e2:3b:f3:c3:
                    48:e7:d1:9e:4e:b4:b4:48:21:39:a3:e7:8d:ae:78:
                    8e:54:49:3d:b9:0a:f6:6f:0a:45:54:74:66:49:7d:
                    5c:36:47:ba:36:3e:f0:94:06:5f:8a:2e:35:a5:d6:
                    1c:40:7c:ba:26:5d:8c:01:2e:d7:d4:45:f1:6e:55:
                    48:ba:b6:2f:23:23:71:0a:62:19:f7:d5:ca:7f:f7:
                    cc:af:b5:e0:83:67:18:04:3a:1f:e1:14:8b:2d:13:
                    af:44:b9:e0:07:42:1d:db:dd:f2:2b:7b:92:44:2b:
                    70:31:d8:72:7c:1a:b0:70:c2:1e:27:d8:aa:b5:d3:
                    8a:03:87:2d:95:ee:2b:4b:6c:f3:fe:12:16:8e:d3:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:49:0C:43:A1:3D:96:21:42:5B:6E:39:AD:97:20:B9:DC:17:FA:28
            X509v3 Authority Key Identifier:
                keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132322e302f32332d3233203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.24.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:02:62:f6:af:2b:25:d8:95:e6:5e:05:59:2f:3d:9e:c3:ec:
         f1:70:06:18:99:41:c8:bd:4d:e7:00:f7:fc:36:17:de:25:e4:
         e8:92:c2:b6:5d:8e:98:aa:09:f7:62:3d:1f:56:e2:f3:91:f8:
         ca:4f:4e:8f:4c:1b:2c:f9:3d:48:55:c6:7a:83:c7:a4:0b:55:
         57:f4:e1:bb:23:97:f4:bd:22:0a:20:66:72:92:b9:9c:50:8f:
         91:ed:01:95:d5:fd:4d:e5:bd:eb:d2:20:a6:9c:90:bd:74:14:
         2e:27:46:50:1d:bf:b9:13:6b:bd:ea:a6:4f:3b:b2:74:90:6f:
         a4:f2:58:ab:a2:10:5d:e8:53:fa:d2:f1:01:15:26:b1:2a:52:
         0c:39:82:81:29:ca:7c:46:22:2e:03:4d:27:83:9f:03:0f:56:
         2b:80:be:4c:c9:d9:fb:02:ae:ca:c6:ed:73:0e:f4:f0:4d:64:
         6c:0c:a7:f9:5d:42:dd:83:45:e2:7d:c0:f9:d4:dd:59:5d:d4:
         7d:9d:ee:4c:38:8a:48:dd:7a:97:12:f0:cd:43:89:f1:e1:01:
         0b:c8:0b:82:4c:c9:89:a5:27:19:4c:20:19:95:86:86:6e:ff:
         61:df:3f:6c:8f:c7:db:ae:db:75:e8:e0:fe:4d:83:e3:0b:f2:
         57:93:f8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----