Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3139332e3136332e3132372e302f32342d3234203d3e20383334.roa
File:                     3139332e3136332e3132372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          9NjSUrMb8FozyKvN3QPyojsgAdgOHd8YoN/jl59TsFg=
Subject key identifier:   B8:5D:16:9B:74:02:00:F1:25:2E:49:52:CD:BF:CE:35:8F:F9:6A:7C
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       6B49915DA6FA218415DE53952503E1CB2F574E52
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3139332e3136332e3132372e302f32342d3234203d3e20383334.roa
Signing time:             Wed 27 Sep 2023 00:00:03 +0000
ROA not before:           Tue 26 Sep 2023 23:55:03 +0000
ROA not after:            Wed 25 Sep 2024 00:00:03 +0000
asID:                     834
IP address blocks:        193.163.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:49:91:5d:a6:fa:21:84:15:de:53:95:25:03:e1:cb:2f:57:4e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Sep 26 23:55:03 2023 GMT
            Not After : Sep 25 00:00:03 2024 GMT
        Subject: CN=B85D169B740200F1252E4952CDBFCE358FF96A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:3b:4c:4c:d6:12:e1:fa:84:7c:c1:18:28:
                    46:9e:59:d8:d8:f9:b8:6a:6a:54:23:df:16:66:ae:
                    7c:64:cf:5b:cd:b3:d1:31:30:25:90:ae:6c:a7:a9:
                    86:41:0d:a5:5e:f2:93:fd:28:64:cf:4e:d6:4f:36:
                    bf:58:f8:e1:36:d2:58:06:30:f9:5b:e7:9e:7d:3a:
                    00:0e:65:cd:a9:c4:aa:63:df:52:72:f2:e2:56:10:
                    50:ca:f9:99:88:bd:bc:8a:2d:79:6f:a3:4d:95:43:
                    69:9e:22:b9:96:cc:5b:11:9c:e9:2b:e2:7b:32:ee:
                    c8:f7:29:06:44:96:76:45:a3:5b:5b:81:12:b8:ff:
                    cf:be:75:eb:7a:7a:01:b9:68:a8:e0:43:78:ef:40:
                    7e:e8:3d:ac:b0:cc:06:6d:39:79:9e:67:24:82:a6:
                    c2:11:c6:7c:70:da:11:de:17:f3:37:d2:f2:86:93:
                    99:27:51:57:a3:22:1a:09:dd:c0:06:42:0e:d4:9b:
                    ed:86:2d:cb:57:1d:e5:ac:ad:2f:68:5f:db:f7:84:
                    71:12:df:29:84:98:66:eb:da:3f:d1:b0:58:24:78:
                    64:9a:f6:ce:9d:4e:b9:ff:59:bc:7a:5d:34:31:0b:
                    55:98:17:94:d1:68:a8:a3:6a:f1:98:f0:4a:11:66:
                    ed:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5D:16:9B:74:02:00:F1:25:2E:49:52:CD:BF:CE:35:8F:F9:6A:7C
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3139332e3136332e3132372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:ff:0d:4e:7d:69:e3:44:f9:49:fb:0f:c9:f5:36:56:3a:
         08:8f:39:38:b0:26:f3:06:57:01:6f:80:65:5b:21:d3:0d:d3:
         0e:e4:4e:c1:8d:64:eb:01:0b:61:30:8f:e7:9f:ec:20:c3:1e:
         e0:c6:93:5e:6b:ee:33:a0:3b:56:16:63:f4:6b:3a:3a:75:82:
         6f:5f:3a:48:0b:72:19:31:2f:9b:b3:1a:33:44:91:8c:62:d4:
         ab:34:0f:f6:e5:07:a9:4a:41:9f:2b:01:99:c8:ca:ae:c4:e6:
         c0:21:9a:d3:8c:ad:72:08:9e:ef:1c:2e:fd:bc:b9:65:c4:ce:
         dd:b2:69:a0:65:03:55:91:b1:5a:d3:86:2e:75:3f:4f:67:31:
         9e:73:6e:0d:45:f4:83:a4:70:b6:6e:29:00:54:ea:cc:91:80:
         b8:6a:6b:d5:6d:6f:93:ff:12:5e:05:7e:2d:00:14:3f:06:e0:
         0d:b1:fd:e8:81:53:f0:60:11:a2:1f:e2:6b:04:28:fa:89:2b:
         db:27:f7:e1:1f:1e:d2:b8:ec:bc:8c:29:01:88:74:e5:3e:f7:
         9d:23:5f:ec:e6:54:be:4d:0c:4e:81:c2:82:26:24:2e:69:6d:
         41:0e:6a:76:64:11:11:af:59:32:60:60:1c:5e:b1:34:6c:f9:
         76:d5:73:8b
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 28 12:43:35 2023 by rpki-client on console-fra.rpki-client.org