Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130362e302f32332d3233203d3e2031323339.roa
File:                     3138352e3231362e3130362e302f32332d3233203d3e2031323339.roa (raw, json)
Hash identifier:          OqAb9E6/YeEgQ0fCmfnJQMDmT23NqFXxNgkX+FWTomY=
Subject key identifier:   EC:BA:BB:60:7D:6F:26:7C:DC:18:18:3A:E8:4F:CB:68:79:C2:28:A9
Certificate issuer:       /CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
Certificate serial:       228A2188B009E08E95F96D3B5FB1679EE8040539
Authority key identifier: BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130362e302f32332d3233203d3e2031323339.roa
Signing time:             Wed 07 Jun 2023 06:45:35 +0000
ROA not before:           Wed 07 Jun 2023 06:40:35 +0000
ROA not after:            Wed 05 Jun 2024 06:45:35 +0000
asID:                     1239
IP address blocks:        185.216.106.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8a:21:88:b0:09:e0:8e:95:f9:6d:3b:5f:b1:67:9e:e8:04:05:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bad36cdaf43498a668b553f581ccd281ac1a8cd7
        Validity
            Not Before: Jun  7 06:40:35 2023 GMT
            Not After : Jun  5 06:45:35 2024 GMT
        Subject: CN=ECBABB607D6F267CDC18183AE84FCB6879C228A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e5:c7:79:86:42:92:6d:21:c7:30:09:36:71:
                    bd:73:8d:2d:6b:1e:0d:ae:13:82:f4:fe:3d:94:c2:
                    93:04:e1:15:dd:1d:38:47:9c:36:f0:45:2e:ac:e4:
                    18:37:16:ea:e5:7a:3f:51:71:51:e1:6d:9e:d7:4e:
                    d4:11:91:00:19:83:8a:c7:34:72:f0:6a:7a:78:32:
                    32:5e:a4:50:35:12:38:d4:32:dd:c7:0f:1a:bb:0e:
                    e6:dd:8b:78:a8:e4:e1:f8:40:7a:f7:45:57:30:8e:
                    dc:18:ea:12:8f:ba:b8:f4:ea:6c:e3:2f:08:6e:2a:
                    d7:1b:d5:9c:f3:0d:b5:0c:50:47:5f:ef:02:78:aa:
                    80:4d:66:b1:c4:90:00:8f:6b:b3:ae:02:12:74:5c:
                    1f:a4:b8:13:58:24:86:c4:c9:9f:41:75:82:1a:78:
                    e4:9e:7f:32:63:7e:b8:72:1d:5d:b6:64:c1:9d:9c:
                    ae:6e:55:12:a9:40:05:f6:ad:e7:94:c9:05:81:fc:
                    21:9c:87:aa:67:cd:ad:46:e2:85:9d:bd:18:b8:e3:
                    8c:d4:4e:44:68:17:cf:9d:43:53:9f:91:fd:93:a7:
                    c2:22:a1:08:bc:7d:19:ab:06:8d:d2:e0:5e:ea:8d:
                    64:d1:04:9f:42:91:51:1d:be:80:a3:e4:46:09:f3:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BA:BB:60:7D:6F:26:7C:DC:18:18:3A:E8:4F:CB:68:79:C2:28:A9
            X509v3 Authority Key Identifier:
                keyid:BA:D3:6C:DA:F4:34:98:A6:68:B5:53:F5:81:CC:D2:81:AC:1A:8C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/BAD36CDAF43498A668B553F581CCD281AC1A8CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/utNs2vQ0mKZotVP1gczSgawajNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b17479d1-95d8-4a14-8ee2-de100c66774c/0/3138352e3231362e3130362e302f32332d3233203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:8f:23:14:f8:40:81:c8:85:13:c0:ee:ba:dd:f1:87:56:4e:
         8e:34:47:37:49:53:55:42:3d:9c:c3:33:9b:1f:23:39:f4:c5:
         87:97:6d:0c:e2:57:9c:d7:73:67:6a:d9:30:19:86:6c:99:9b:
         0d:fd:e8:75:7c:81:ea:c8:10:94:b8:7a:22:c7:cf:06:a9:a3:
         db:1d:52:0c:d1:34:dd:39:c1:ff:62:50:41:a6:3b:3b:58:44:
         46:fb:41:68:c6:ad:56:ff:b1:9e:75:49:20:94:73:6b:76:2b:
         74:58:65:c5:04:da:b8:40:ea:6e:e6:26:9a:6b:f1:89:be:2a:
         36:86:06:c9:13:7d:60:8e:8c:93:31:9c:e7:b4:09:1d:df:21:
         28:6d:ba:0b:f7:52:88:f7:51:ce:f6:59:60:56:4b:bc:8c:e8:
         7b:09:02:8a:f2:b0:bb:95:f9:98:ff:66:fb:3c:53:86:c5:2f:
         84:44:b8:a5:d0:ed:1a:5b:4f:b7:ab:92:ef:00:70:7c:8c:12:
         26:78:ba:d6:43:d8:af:d9:15:dc:93:7d:37:08:d4:74:8b:2b:
         69:d6:c3:ee:b9:de:4b:7d:41:f7:a9:55:83:b5:25:f0:76:1a:
         de:38:e9:c4:ea:3c:32:09:21:4f:45:38:0d:b1:7d:a7:a3:39:
         26:5b:f6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----