Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32312e302f32342d3234203d3e203631313338.roa
File:                     39332e39322e32312e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          nt6mPqhIi87az2xEZHCt/IfNUCyvuoSLDkaprnKP25Y=
Subject key identifier:   71:20:1C:E9:D6:80:6F:FC:0C:63:B8:EE:83:65:D7:7D:F7:ED:E0:F1
Certificate issuer:       /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial:       184D08B0AE9FE08EF39C42C80FCEF45226081C71
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32312e302f32342d3234203d3e203631313338.roa
Signing time:             Sat 13 May 2023 06:10:55 +0000
ROA not before:           Sat 13 May 2023 06:05:55 +0000
ROA not after:            Sat 11 May 2024 06:10:55 +0000
asID:                     61138
IP address blocks:        93.92.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4d:08:b0:ae:9f:e0:8e:f3:9c:42:c8:0f:ce:f4:52:26:08:1c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
        Validity
            Not Before: May 13 06:05:55 2023 GMT
            Not After : May 11 06:10:55 2024 GMT
        Subject: CN=71201CE9D6806FFC0C63B8EE8365D77DF7EDE0F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1c:f1:78:45:e0:80:2a:3c:d2:f1:87:90:1d:
                    a2:d0:18:ee:cc:1a:a4:9b:e5:85:dd:56:7c:52:e4:
                    d8:6a:77:31:1c:0d:b5:83:05:fa:5f:af:e8:bb:cb:
                    99:51:88:30:75:52:58:34:d5:24:40:45:ef:b4:d7:
                    84:66:49:ca:f8:40:63:16:78:e0:f4:7a:ad:f4:b6:
                    73:08:8f:b5:0e:4b:a8:50:30:aa:2d:4d:00:25:23:
                    30:96:79:8b:b2:a6:a7:b7:29:8a:16:b1:d7:41:88:
                    2b:80:bc:a4:28:08:e4:c2:a4:9b:51:85:35:cb:8b:
                    50:80:1c:f8:44:4e:73:94:fa:f0:cb:68:b4:3b:92:
                    30:e0:93:1d:da:58:8e:75:98:16:61:0a:3c:3e:2b:
                    9c:93:f9:9a:79:8f:8e:49:83:aa:f6:76:0e:8d:9f:
                    ac:38:70:35:71:8c:65:0d:50:0f:32:17:3f:27:09:
                    1a:b4:71:15:61:2e:9f:ba:84:e1:62:8c:a2:f7:d5:
                    0a:65:d7:8f:c8:bf:7e:87:82:ce:7c:fd:9f:4f:8b:
                    0b:c7:7d:b3:b1:0c:79:72:53:54:8c:da:f3:1d:21:
                    e5:5b:24:11:c0:7f:2e:0b:7f:ee:23:04:83:6d:f1:
                    27:76:64:d7:16:fe:09:97:b7:d5:5f:a2:27:44:5b:
                    9d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:20:1C:E9:D6:80:6F:FC:0C:63:B8:EE:83:65:D7:7D:F7:ED:E0:F1
            X509v3 Authority Key Identifier:
                keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32312e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:12:5d:cb:c2:3d:b8:de:8c:85:ab:a3:cd:7a:e2:52:49:df:
         64:31:9a:1f:ad:9d:23:71:15:e5:1d:2e:ce:fc:42:b0:11:98:
         cb:82:24:3f:e7:f0:fb:ef:2b:5e:02:f5:83:a9:0d:4a:4e:3e:
         1e:87:f4:99:ae:ed:5f:57:a7:be:70:d6:88:c8:04:a5:dc:29:
         1b:0e:ad:63:8b:90:0c:5a:53:80:a4:5d:8c:92:8a:82:9d:52:
         21:3f:a4:5a:41:5a:33:1b:ad:59:bd:3f:17:9c:fa:02:0e:43:
         aa:9f:a9:e9:40:e6:45:32:d9:d4:a3:5b:43:ee:52:9b:09:b3:
         4e:f2:f0:02:57:11:19:fa:9d:7a:6a:3a:41:60:3e:ad:7e:2b:
         68:c2:ff:e2:52:36:23:87:95:ba:aa:a9:88:35:5b:74:11:7f:
         e3:91:65:08:e2:12:66:91:c4:0d:1e:6a:3c:80:13:bb:ef:8b:
         26:aa:31:a7:cf:e3:b1:aa:83:ac:33:0c:f5:d7:9c:4d:35:54:
         2f:4e:7b:3c:ad:9b:76:5a:1c:07:25:54:8c:15:11:41:d8:48:
         29:67:ca:66:eb:91:e0:8a:e1:fd:bb:1e:37:f3:25:93:13:c3:
         e4:19:0d:86:28:64:41:32:59:43:90:8d:b1:71:2e:c7:b8:87:
         8c:ff:4c:25
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUGE0IsK6f4I7znELID870UiYIHHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm
YWRhMzQ0NDAeFw0yMzA1MTMwNjA1NTVaFw0yNDA1MTEwNjEwNTVaMDMxMTAvBgNV
BAMTKDcxMjAxQ0U5RDY4MDZGRkMwQzYzQjhFRTgzNjVENzdERjdFREUwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpHPF4ReCAKjzS8YeQHaLQGO7M
GqSb5YXdVnxS5NhqdzEcDbWDBfpfr+i7y5lRiDB1Ulg01SRARe+014RmScr4QGMW
eOD0eq30tnMIj7UOS6hQMKotTQAlIzCWeYuypqe3KYoWsddBiCuAvKQoCOTCpJtR
hTXLi1CAHPhETnOU+vDLaLQ7kjDgkx3aWI51mBZhCjw+K5yT+Zp5j45Jg6r2dg6N
n6w4cDVxjGUNUA8yFz8nCRq0cRVhLp+6hOFijKL31Qpl14/Iv36Hgs58/Z9PiwvH
fbOxDHlyU1SM2vMdIeVbJBHAfy4Lf+4jBINt8Sd2ZNcW/gmXt9VfoidEW50tAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUcSAc6daAb/wMY7jug2XXffft4PEwHwYDVR0j
BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5
NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y
YU5FUS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYt
NjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5NDMxLzEvMzkzMzJlMzkzMjJlMzIzMTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMTMzMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdXBUw
DQYJKoZIhvcNAQELBQADggEBAEMSXcvCPbjejIWro8164lJJ32Qxmh+tnSNxFeUd
Ls78QrARmMuCJD/n8PvvK14C9YOpDUpOPh6H9Jmu7V9Xp75w1ojIBKXcKRsOrWOL
kAxaU4CkXYySioKdUiE/pFpBWjMbrVm9Pxec+gIOQ6qfqelA5kUy2dSjW0PuUpsJ
s07y8AJXERn6nXpqOkFgPq1+K2jC/+JSNiOHlbqqqYg1W3QRf+ORZQjiEmaRxA0e
ajyAE7vviyaqMafP47Gqg6wzDPXXnE01VC9Oezytm3ZaHAclVIwVEUHYSClnymbr
keCK4f27HjfzJZMTw+QZDYYoZEEyWUOQjbFxLse4h4z/TCU=
-----END CERTIFICATE-----