Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31372e302f32342d3234203d3e20323732303237.roa
File:                     38352e3230392e31372e302f32342d3234203d3e20323732303237.roa (raw, json)
Hash identifier:          xJGbuVTNBs9tD+8Pzeb+AXnGn0HKrnHAW5as5hX78oU=
Subject key identifier:   2C:56:C7:3A:E1:BD:C3:36:B9:19:7B:35:CD:BC:0C:6A:16:B7:EF:5A
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       36AF1A8452D0DC4E35274A3A4DEA874CC86A8DD8
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31372e302f32342d3234203d3e20323732303237.roa
Signing time:             Thu 23 Mar 2023 17:05:32 +0000
ROA not before:           Thu 23 Mar 2023 17:00:32 +0000
ROA not after:            Thu 21 Mar 2024 17:05:32 +0000
asID:                     272027
IP address blocks:        85.209.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:af:1a:84:52:d0:dc:4e:35:27:4a:3a:4d:ea:87:4c:c8:6a:8d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Mar 23 17:00:32 2023 GMT
            Not After : Mar 21 17:05:32 2024 GMT
        Subject: CN=2C56C73AE1BDC336B9197B35CDBC0C6A16B7EF5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:87:29:22:3c:bb:b0:8b:1a:81:a0:13:d1:0e:
                    9e:8c:a8:51:9a:e5:e1:a5:b6:3a:0b:b8:4a:06:82:
                    44:56:9f:68:53:f6:da:64:d8:3f:8f:28:88:f4:f6:
                    5a:ca:6f:c9:a2:b0:b1:34:db:43:1a:b4:30:28:11:
                    ed:5b:86:b2:ac:5a:70:14:28:60:49:0e:fe:92:af:
                    42:ee:51:23:1b:51:7e:b4:15:5f:42:fc:d4:c9:75:
                    2f:db:9b:cc:74:85:cd:7b:0f:a2:32:fc:50:d0:11:
                    14:66:d7:c9:03:26:bf:58:e3:36:cb:93:02:e1:17:
                    ee:91:79:17:2f:67:31:ba:a8:34:26:8b:ac:b1:b6:
                    32:f2:0b:9c:ab:e8:3d:50:c0:8b:34:84:1d:92:a8:
                    65:4d:1a:59:90:ad:fe:24:b8:36:6e:b6:6a:68:3d:
                    f4:7f:1b:49:7c:70:a6:2c:84:25:db:7c:6d:ab:33:
                    0d:8a:fd:12:a6:7d:c3:d8:63:df:46:f4:24:68:be:
                    81:85:42:38:e9:dd:f0:64:03:ee:7f:6a:42:da:c2:
                    d1:83:0d:2d:11:06:63:7c:94:38:ff:6b:f9:5d:56:
                    db:20:ad:c2:e4:4f:6d:11:0f:29:da:06:5d:44:12:
                    fe:a0:ee:60:0e:08:e6:90:24:a2:a7:62:08:9a:4a:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:56:C7:3A:E1:BD:C3:36:B9:19:7B:35:CD:BC:0C:6A:16:B7:EF:5A
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31372e302f32342d3234203d3e20323732303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:5b:39:1b:fb:b3:af:df:0f:9a:18:90:7a:ac:52:95:7a:a2:
         98:76:0e:76:19:59:cc:93:f9:bb:04:82:e3:73:31:36:08:d6:
         23:29:e1:ea:93:37:26:82:b3:10:44:8e:6a:d4:24:fe:81:e6:
         47:54:ff:46:d2:c1:61:da:92:6e:37:3b:8d:e7:d0:03:86:cc:
         c6:62:dd:53:30:57:66:df:4b:ba:7d:c8:1c:e8:b7:cc:fc:f6:
         c3:b2:4f:a4:5b:78:4b:84:7d:6a:72:9d:a0:5c:58:b5:b7:2e:
         7f:aa:c5:5f:bc:12:83:19:29:d0:56:c5:da:d4:01:fa:30:a1:
         4f:c1:16:66:a5:db:d5:c9:b5:e4:49:9b:72:eb:d7:4f:79:e5:
         b6:03:d7:33:cf:cc:36:3d:07:23:39:5b:64:89:c8:a6:d9:71:
         d8:79:c0:05:b3:c9:c1:15:41:5a:bc:23:5f:06:b5:76:af:38:
         cd:0b:46:79:12:60:63:40:04:2b:52:ce:e4:17:9e:33:96:78:
         cd:30:29:c6:58:cf:05:25:eb:83:5a:a6:e2:e0:a0:13:21:73:
         18:44:00:2c:1b:38:e9:fa:b1:a6:16:af:7c:4b:ab:b6:30:c2:
         1b:37:0f:9a:f2:8a:f8:24:24:54:dc:9b:fa:d4:44:33:c5:7c:
         25:12:ca:8c
-----BEGIN CERTIFICATE-----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