Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e203239383032.roa
File:                     3139332e3234362e3136342e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          d20LzkVfxjHO//ReGf+qlBnikxwPbPFa6ibO8m9dRio=
Subject key identifier:   56:B3:D0:C8:DE:CC:2F:93:6D:E2:4A:57:9D:75:09:27:81:40:39:B3
Certificate issuer:       /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial:       2D22D505F7C50B4F4459709B293A917FD0BDA9C1
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e203239383032.roa
Signing time:             Thu 12 Oct 2023 07:48:29 +0000
ROA not before:           Thu 12 Oct 2023 07:43:29 +0000
ROA not after:            Thu 10 Oct 2024 07:48:29 +0000
asID:                     29802
IP address blocks:        193.246.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:22:d5:05:f7:c5:0b:4f:44:59:70:9b:29:3a:91:7f:d0:bd:a9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
        Validity
            Not Before: Oct 12 07:43:29 2023 GMT
            Not After : Oct 10 07:48:29 2024 GMT
        Subject: CN=56B3D0C8DECC2F936DE24A579D750927814039B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:6d:b2:01:b3:74:fb:7f:5c:39:c6:86:7f:
                    d0:7e:25:a1:eb:c0:92:75:15:a4:48:76:79:5c:cf:
                    9c:78:9b:98:17:d1:c6:7d:85:50:b5:d1:3a:07:e5:
                    3c:95:8c:ee:74:12:53:ba:d4:67:ed:25:52:34:8a:
                    e3:6f:3c:8c:9f:42:c9:31:96:8a:5d:0e:8b:ab:4c:
                    b4:e6:33:1b:3a:b9:14:26:a5:2c:4e:9e:da:1a:61:
                    1b:af:04:fb:4d:85:3b:34:c0:79:50:a1:7d:f4:d1:
                    8c:27:f3:7b:dd:4d:50:34:93:6b:09:50:ba:9e:7b:
                    36:d6:86:a0:7e:aa:a7:68:95:90:58:58:2e:b3:07:
                    b7:de:a6:0d:8c:8b:92:72:05:36:fe:a9:45:2b:7b:
                    41:5a:a5:cc:6f:08:4d:c4:f0:33:f4:ec:c0:74:af:
                    38:0e:c0:32:1b:8e:bb:f6:48:2c:f7:e8:34:12:c7:
                    ba:8e:1d:b8:74:d1:68:ec:68:9f:5b:8a:43:59:b8:
                    48:6f:3e:d6:aa:6d:a8:1b:37:00:0a:40:44:06:7d:
                    f6:8e:4d:5c:a2:fd:b8:31:f6:96:69:e4:1b:0a:a5:
                    bc:3e:80:e1:df:13:52:8a:c7:dc:6c:07:83:ce:58:
                    bb:69:2e:8f:5f:52:4e:40:dd:41:ee:34:0b:b7:c1:
                    fd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B3:D0:C8:DE:CC:2F:93:6D:E2:4A:57:9D:75:09:27:81:40:39:B3
            X509v3 Authority Key Identifier:
                keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136342e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a4:d1:1c:53:6f:ef:0e:80:d2:40:b4:e0:d2:d4:5c:74:dc:
         47:7a:11:e6:24:2f:1a:b6:cb:dc:7e:8e:0f:bc:f0:cc:52:cb:
         de:84:f8:a0:01:d1:22:10:42:09:cc:11:5e:f9:cc:4f:a3:9d:
         8c:b4:86:41:3c:04:d2:3f:93:46:ad:17:c5:21:db:ce:31:9a:
         c9:6a:18:a0:e5:9f:fb:86:7f:a5:1e:1d:10:80:dd:53:df:9e:
         cf:ad:f1:a7:d2:3c:22:b4:81:e0:de:55:3b:9a:6c:5b:bd:85:
         81:c4:87:f3:e9:30:37:af:93:71:8d:b1:f3:1d:96:bf:dd:d0:
         2e:24:df:fa:28:75:ae:d9:c9:6d:0b:12:c2:8a:9c:f0:0c:a8:
         e8:1f:76:7f:5c:1d:c3:6c:3a:d3:22:37:fd:fb:e8:d7:19:65:
         45:41:d3:13:bf:bb:03:59:ea:92:16:05:0d:f6:bf:62:61:24:
         9c:d0:38:fa:af:93:2a:a9:da:f7:e2:e5:fb:25:80:2d:f3:68:
         02:56:7e:d7:d3:27:80:92:7d:63:fd:9a:51:32:70:69:66:f0:
         d1:be:be:c6:54:40:ee:fc:63:d9:03:f2:78:f8:22:b3:e1:8b:
         a8:ee:aa:c7:63:4c:fb:8b:af:0e:aa:8a:e8:a8:25:a1:0b:41:
         e4:c4:18:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----