Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/322e35382e38342e302f32342d3234203d3e203439353831.roa
File:                     322e35382e38342e302f32342d3234203d3e203439353831.roa (raw, json)
Hash identifier:          c/zbLd2mykeMB2XT5EJ1/89jptAxUoc4EL67fnY0qnI=
Subject key identifier:   82:BF:9F:D0:B2:66:44:B9:8C:31:97:98:81:D8:3A:B6:03:C8:E4:75
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       3517079CCEA36C8842EBE73D5608B628F4DE6E6D
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/322e35382e38342e302f32342d3234203d3e203439353831.roa
Signing time:             Thu 23 Mar 2023 16:54:30 +0000
ROA not before:           Thu 23 Mar 2023 16:49:30 +0000
ROA not after:            Thu 21 Mar 2024 16:54:30 +0000
asID:                     49581
IP address blocks:        2.58.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:17:07:9c:ce:a3:6c:88:42:eb:e7:3d:56:08:b6:28:f4:de:6e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Mar 23 16:49:30 2023 GMT
            Not After : Mar 21 16:54:30 2024 GMT
        Subject: CN=82BF9FD0B26644B98C31979881D83AB603C8E475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:09:32:a8:2c:67:fc:76:2d:83:fe:48:c7:
                    ae:9a:09:88:f7:54:0f:03:fd:45:0e:29:e1:45:de:
                    f9:af:0d:ec:64:18:db:39:24:d9:3c:7f:65:86:15:
                    7c:27:63:0d:2d:05:bf:b5:eb:71:62:14:d3:64:86:
                    50:e0:88:f8:06:23:db:6d:20:f2:94:63:d8:bf:ab:
                    dc:16:85:aa:56:cc:04:de:76:eb:59:69:b5:0c:4e:
                    2a:2b:86:52:3c:08:70:ce:aa:d2:cf:9a:24:d6:89:
                    5e:65:45:5b:59:d3:a5:f6:7f:29:15:db:48:2b:34:
                    78:f8:03:2d:92:a1:c9:36:7c:28:4f:34:1c:ea:f7:
                    3c:ef:63:80:2a:c0:b2:76:b8:1d:95:92:c5:d9:d0:
                    60:db:ea:2e:89:03:a0:11:08:07:d1:07:4b:1d:2d:
                    18:08:c6:43:ae:f7:23:7b:ba:9a:ff:8d:b5:bd:9b:
                    82:cf:38:fe:01:f9:a4:11:eb:c7:d1:10:9f:fe:9d:
                    6d:be:7f:1b:e1:75:91:6d:8b:a8:e5:79:a0:b2:75:
                    13:c8:f0:8f:d0:ef:ac:0f:fd:b0:91:a7:bc:bf:a8:
                    e1:1f:e1:00:d3:96:11:84:f3:38:d4:58:3f:35:86:
                    71:fb:7d:14:99:1c:06:0e:cd:06:6e:5c:58:a5:cf:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BF:9F:D0:B2:66:44:B9:8C:31:97:98:81:D8:3A:B6:03:C8:E4:75
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/322e35382e38342e302f32342d3234203d3e203439353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:e6:97:9c:01:02:62:f5:55:98:ba:e7:b6:86:2b:9b:1c:f7:
         32:ad:92:ca:39:b0:a8:40:72:9b:b8:a1:5b:0b:c0:03:03:9b:
         38:f7:44:f3:ea:92:3f:27:58:c3:11:86:40:2d:f7:72:c0:dc:
         94:59:0e:51:f1:18:6e:68:fa:ae:6b:f1:f9:9e:3f:9a:74:ce:
         6b:ed:66:78:20:9d:5f:e2:7f:66:bb:a0:eb:26:d1:3c:8b:d1:
         2b:cb:35:c8:12:cf:59:7c:7f:a6:03:f1:9d:e0:ca:07:c3:ef:
         e8:92:a7:c6:d7:d3:f4:9f:1f:a0:d0:36:2e:a4:49:ae:1d:2f:
         e5:0e:18:dd:a9:41:d7:00:75:78:42:0b:c6:eb:f5:1b:5b:a0:
         f8:b3:af:89:79:1d:ad:f7:a9:43:6d:f2:64:be:9a:ed:1e:70:
         b2:35:1c:ae:26:16:31:53:2c:91:86:54:79:85:20:0c:75:10:
         f2:4b:34:db:3a:03:96:9f:ec:dc:72:ca:72:60:c4:6e:03:0b:
         ef:fa:cb:43:36:1a:93:0f:47:f5:7a:da:4b:7d:09:19:56:20:
         6c:25:e4:85:b7:f8:6b:56:62:52:3f:61:47:f2:ed:3a:53:44:
         59:35:96:a8:4e:08:7f:8b:bb:e3:1c:f3:88:4c:33:a2:cc:4e:
         30:c0:6a:31
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUNRcHnM6jbIhC6+c9Vgi2KPTebm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy
NjllYjNkNjAeFw0yMzAzMjMxNjQ5MzBaFw0yNDAzMjExNjU0MzBaMDMxMTAvBgNV
BAMTKDgyQkY5RkQwQjI2NjQ0Qjk4QzMxOTc5ODgxRDgzQUI2MDNDOEU0NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDddAkyqCxn/HYtg/5Ix66aCYj3
VA8D/UUOKeFF3vmvDexkGNs5JNk8f2WGFXwnYw0tBb+163FiFNNkhlDgiPgGI9tt
IPKUY9i/q9wWhapWzATedutZabUMTiorhlI8CHDOqtLPmiTWiV5lRVtZ06X2fykV
20grNHj4Ay2Sock2fChPNBzq9zzvY4AqwLJ2uB2VksXZ0GDb6i6JA6ARCAfRB0sd
LRgIxkOu9yN7upr/jbW9m4LPOP4B+aQR68fREJ/+nW2+fxvhdZFti6jleaCydRPI
8I/Q76wP/bCRp7y/qOEf4QDTlhGE8zjUWD81hnH7fRSZHAYOzQZuXFilz4xXAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUgr+f0LJmRLmMMZeYgdg6tgPI5HUwHwYDVR0j
BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0
MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh
ZXM5WS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt
NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzIyZTM1MzgyZTM4MzQyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM5MzUzODMxLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjpUMA0G
CSqGSIb3DQEBCwUAA4IBAQCR5pecAQJi9VWYuue2hiubHPcyrZLKObCoQHKbuKFb
C8ADA5s490Tz6pI/J1jDEYZALfdywNyUWQ5R8RhuaPqua/H5nj+adM5r7WZ4IJ1f
4n9mu6DrJtE8i9EryzXIEs9ZfH+mA/Gd4MoHw+/okqfG19P0nx+g0DYupEmuHS/l
DhjdqUHXAHV4QgvG6/UbW6D4s6+JeR2t96lDbfJkvprtHnCyNRyuJhYxUyyRhlR5
hSAMdRDySzTbOgOWn+zccspyYMRuAwvv+stDNhqTD0f1etpLfQkZViBsJeSFt/hr
VmJSP2FH8u06U0RZNZaoTgh/i7vjHPOITDOizE4wwGox
-----END CERTIFICATE-----