Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3233203d3e20323035323230.roa
File:                     39332e39322e32322e302f32332d3233203d3e20323035323230.roa (raw, json)
Hash identifier:          xCGS7rdokPqUWF82SpTrScohRo48LkfOP8KmsnoWvMo=
Subject key identifier:   7C:04:65:28:F1:9A:1D:8B:26:1F:3E:C6:04:7D:C9:3E:4B:C0:1B:98
Certificate issuer:       /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial:       3437CC434755EFFC824BEE7671DF99FC417A2B82
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3233203d3e20323035323230.roa
Signing time:             Fri 12 May 2023 19:20:13 +0000
ROA not before:           Fri 12 May 2023 19:15:13 +0000
ROA not after:            Fri 10 May 2024 19:20:13 +0000
asID:                     205220
IP address blocks:        93.92.22.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:37:cc:43:47:55:ef:fc:82:4b:ee:76:71:df:99:fc:41:7a:2b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
        Validity
            Not Before: May 12 19:15:13 2023 GMT
            Not After : May 10 19:20:13 2024 GMT
        Subject: CN=7C046528F19A1D8B261F3EC6047DC93E4BC01B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:7c:6c:29:59:af:5e:af:27:5c:ad:01:b2:
                    f3:97:35:91:ad:6d:90:4a:d5:23:12:25:a4:20:74:
                    c5:83:79:d9:19:2f:b0:d0:5e:2e:9d:e8:06:cd:34:
                    da:e8:9c:85:be:cd:5a:73:f0:bc:b1:da:81:24:46:
                    ff:80:82:69:4a:f3:7d:e0:b8:75:d0:ea:64:54:7e:
                    f9:51:a8:37:9a:de:8a:fc:81:fb:b3:55:0b:2d:38:
                    d3:93:00:e9:85:cb:2b:de:11:45:e2:f5:35:a8:9b:
                    18:9b:6d:45:2d:2e:49:0c:95:bc:a1:b6:8a:a8:83:
                    2d:7b:15:b6:5e:6f:f9:7f:07:19:f5:83:cf:a1:e3:
                    a7:55:69:e4:ed:c7:4b:71:b9:64:86:2d:c8:e4:d9:
                    be:86:a2:78:a9:c2:20:ca:55:a4:a5:21:a5:91:2c:
                    3f:c9:7b:83:dd:f1:f5:dc:c0:dc:b9:34:a9:b9:40:
                    e5:8c:f4:a8:c1:cd:af:f1:2e:4f:9c:ec:3d:9e:55:
                    26:37:5c:9a:82:2f:08:71:d2:f4:51:9e:50:95:f9:
                    16:0b:93:d6:8b:e1:35:76:2d:7c:64:43:e1:82:9c:
                    2a:5e:fe:ba:9a:a0:84:02:4d:b0:05:54:57:48:1e:
                    0d:90:28:f5:30:ea:cd:ca:03:df:a0:71:00:e4:9a:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:04:65:28:F1:9A:1D:8B:26:1F:3E:C6:04:7D:C9:3E:4B:C0:1B:98
            X509v3 Authority Key Identifier:
                keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3233203d3e20323035323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:51:de:6d:5f:a8:e5:96:05:3c:57:0f:00:1e:2a:6f:bc:7c:
         e5:90:66:cd:b1:b4:ee:d3:2c:55:95:3d:29:d2:39:86:d3:ae:
         78:34:32:76:42:13:76:7f:86:b2:d3:97:29:b2:f4:c1:b9:88:
         66:58:a7:97:8c:3b:6a:82:62:02:5c:fa:74:d3:aa:19:25:32:
         69:85:b0:63:76:94:59:34:b8:a1:77:48:48:a5:cc:d5:0c:99:
         3e:81:67:cc:f1:5d:6e:1c:37:7b:32:c1:7c:cc:fa:b6:5f:94:
         f4:03:22:04:89:0e:96:b8:92:44:3d:47:08:df:7d:4f:d9:62:
         a3:53:4f:89:1e:e3:c4:94:0c:06:17:fa:ae:26:e7:29:de:4a:
         1e:f9:89:4c:9d:5c:dc:4f:ee:92:5e:f4:b5:61:c0:5f:e7:e6:
         c8:fd:8b:05:ef:e9:65:7c:d9:d3:2c:70:58:4e:e0:47:dc:43:
         e8:ea:0a:d3:87:2f:8d:cd:99:f8:03:20:20:7c:85:df:31:ec:
         19:2e:61:6f:1f:c6:f8:6e:42:f4:57:06:20:53:35:04:49:15:
         a3:c9:7b:cb:f6:3a:43:96:df:7f:38:5b:16:59:f4:59:d1:86:
         42:b4:ff:c7:89:16:3d:cf:21:ba:28:ae:8a:1b:ca:d5:6c:86:
         95:db:2f:83
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNDfMQ0dV7/yCS+52cd+Z/EF6K4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm
YWRhMzQ0NDAeFw0yMzA1MTIxOTE1MTNaFw0yNDA1MTAxOTIwMTNaMDMxMTAvBgNV
BAMTKDdDMDQ2NTI4RjE5QTFEOEIyNjFGM0VDNjA0N0RDOTNFNEJDMDFCOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmnxsKVmvXq8nXK0BsvOXNZGt
bZBK1SMSJaQgdMWDedkZL7DQXi6d6AbNNNronIW+zVpz8Lyx2oEkRv+AgmlK833g
uHXQ6mRUfvlRqDea3or8gfuzVQstONOTAOmFyyveEUXi9TWomxibbUUtLkkMlbyh
toqogy17FbZeb/l/Bxn1g8+h46dVaeTtx0txuWSGLcjk2b6GonipwiDKVaSlIaWR
LD/Je4Pd8fXcwNy5NKm5QOWM9KjBza/xLk+c7D2eVSY3XJqCLwhx0vRRnlCV+RYL
k9aL4TV2LXxkQ+GCnCpe/rqaoIQCTbAFVFdIHg2QKPUw6s3KA9+gcQDkmjIbAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUfARlKPGaHYsmHz7GBH3JPkvAG5gwHwYDVR0j
BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5
NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y
YU5FUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYt
NjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5NDMxLzEvMzkzMzJlMzkzMjJlMzIzMjJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzAzNTMyMzIzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV1c
FjANBgkqhkiG9w0BAQsFAAOCAQEAF1HebV+o5ZYFPFcPAB4qb7x85ZBmzbG07tMs
VZU9KdI5htOueDQydkITdn+GstOXKbL0wbmIZlinl4w7aoJiAlz6dNOqGSUyaYWw
Y3aUWTS4oXdISKXM1QyZPoFnzPFdbhw3ezLBfMz6tl+U9AMiBIkOlriSRD1HCN99
T9lio1NPiR7jxJQMBhf6ribnKd5KHvmJTJ1c3E/ukl70tWHAX+fmyP2LBe/pZXzZ
0yxwWE7gR9xD6OoK04cvjc2Z+AMgIHyF3zHsGS5hbx/G+G5C9FcGIFM1BEkVo8l7
y/Y6Q5bffzhbFln0WdGGQrT/x4kWPc8huiiuihvK1WyGldsvgw==
-----END CERTIFICATE-----