Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20383334.roa
File:                     3139332e33372e3233392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          TV9Ir8/3v1yAep2+2TsAq7vVI8VVbns0zUw4EdXAYig=
Subject key identifier:   73:57:07:1D:A1:01:AC:9D:D5:17:34:70:B0:8F:F5:C2:5E:B5:20:72
Certificate issuer:       /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial:       44FD8B3A3A9276D460F630AFD7F87FE1AE3B5610
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20383334.roa
Signing time:             Fri 30 Jun 2023 00:00:41 +0000
ROA not before:           Thu 29 Jun 2023 23:55:41 +0000
ROA not after:            Fri 28 Jun 2024 00:00:41 +0000
asID:                     834
IP address blocks:        193.37.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fd:8b:3a:3a:92:76:d4:60:f6:30:af:d7:f8:7f:e1:ae:3b:56:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
        Validity
            Not Before: Jun 29 23:55:41 2023 GMT
            Not After : Jun 28 00:00:41 2024 GMT
        Subject: CN=7357071DA101AC9DD5173470B08FF5C25EB52072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:8b:94:0f:08:8c:71:99:ca:7a:0a:99:73:
                    ef:d5:7f:09:5e:1e:b9:69:32:e6:d1:a3:b9:1d:a3:
                    a2:a6:f0:35:a8:2c:50:cc:dd:ff:3d:48:18:7a:39:
                    6d:e4:c0:59:a7:00:32:ca:cb:eb:cd:77:9f:e4:91:
                    9f:c8:e0:bd:9d:63:4d:c9:16:24:90:ed:64:14:6c:
                    74:ac:c8:8e:71:32:7b:41:e7:93:42:06:0e:eb:79:
                    0c:42:e6:b1:52:d5:6e:21:0d:d4:ff:dc:04:e3:f6:
                    94:2a:41:ca:e1:8a:c2:54:d9:10:0b:7d:52:21:40:
                    48:c9:0a:fd:52:37:fb:89:73:05:f4:72:ea:d6:18:
                    bc:ef:2b:12:35:b5:24:c7:7c:74:c5:ec:16:f3:8f:
                    09:1b:32:dc:a9:7f:65:f1:36:67:c3:0d:82:5e:84:
                    cf:b2:62:49:50:6b:a0:5c:a2:3f:97:6d:8e:b8:af:
                    72:11:51:30:2d:a1:e8:dd:c6:05:81:72:b8:2f:f9:
                    69:41:8f:4c:60:ac:88:59:38:8d:99:9f:08:f7:aa:
                    d5:1e:f3:e7:e2:5a:ec:f2:27:9d:1f:81:9c:0d:7a:
                    fc:55:af:19:21:f2:49:d5:8b:76:1a:3e:14:ae:c0:
                    47:af:ad:85:75:f3:b3:0f:77:30:aa:ae:2b:33:fd:
                    e7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:57:07:1D:A1:01:AC:9D:D5:17:34:70:B0:8F:F5:C2:5E:B5:20:72
            X509v3 Authority Key Identifier:
                keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:e0:87:b5:26:0e:68:10:4e:c3:33:d4:a2:e1:a8:aa:ad:2d:
         f0:2e:a5:69:f4:ee:5e:91:fc:04:af:0a:46:0b:d3:e6:1c:44:
         9b:91:40:95:26:0b:9f:e8:62:48:69:19:88:6f:69:e8:85:b8:
         df:b8:55:ed:5c:50:3b:68:03:b9:22:5d:e8:6f:48:cd:5b:ca:
         4a:a8:20:25:bc:d1:d5:56:2d:7f:dd:ad:45:0b:6c:38:89:71:
         52:f3:62:24:f4:8d:16:39:6e:6f:4a:ce:ad:34:e7:7e:7d:79:
         97:34:30:99:9d:32:3a:ae:8f:d6:a8:cd:2d:53:e9:22:96:19:
         4b:4a:90:07:fe:ca:7f:64:44:79:b2:cd:cb:6e:15:68:7e:fb:
         0d:3d:3b:06:b3:04:a3:19:7d:ff:30:06:3e:4f:e7:5d:90:78:
         36:51:e7:33:17:be:02:b3:fd:4a:a9:d7:ac:3d:5d:da:fc:9b:
         e0:e8:29:5f:e2:d7:ea:4e:75:5c:04:35:a8:ea:e7:dd:e9:96:
         8f:51:23:c4:66:54:9b:a0:85:fe:56:30:b9:0f:14:60:93:f3:
         99:20:25:a4:79:5a:c9:dd:d8:65:01:c3:54:d3:7c:eb:cd:d4:
         3d:0c:d7:f3:17:07:06:1e:a6:53:f3:f6:5b:74:4a:c3:85:7e:
         a2:81:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----