Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234382e302f32332d3233203d3e203535313534.roa
File:                     322e35362e3234382e302f32332d3233203d3e203535313534.roa (raw, json)
Hash identifier:          AJgLGpyPcyKekPm7Fsd8yVrS1CAr9A5TagXYjmLUpnY=
Subject key identifier:   92:0B:E6:E2:37:DA:3A:A4:73:99:39:EF:8F:BD:EE:C1:26:F4:35:15
Certificate issuer:       /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial:       42294DEA74C51AD33CB0272E37D80B1BF73B7263
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234382e302f32332d3233203d3e203535313534.roa
Signing time:             Tue 13 Jun 2023 11:58:02 +0000
ROA not before:           Tue 13 Jun 2023 11:53:02 +0000
ROA not after:            Tue 11 Jun 2024 11:58:02 +0000
asID:                     55154
IP address blocks:        2.56.248.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:29:4d:ea:74:c5:1a:d3:3c:b0:27:2e:37:d8:0b:1b:f7:3b:72:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
        Validity
            Not Before: Jun 13 11:53:02 2023 GMT
            Not After : Jun 11 11:58:02 2024 GMT
        Subject: CN=920BE6E237DA3AA4739939EF8FBDEEC126F43515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:85:26:33:be:79:f7:5a:18:cb:e9:90:68:
                    40:a9:6c:5f:71:8b:e7:af:5e:81:9b:4f:c9:46:87:
                    f3:8b:21:fd:e1:3b:44:c9:e2:df:8c:f3:0b:03:9d:
                    d6:95:e5:21:ce:6b:5f:be:c6:6f:b2:33:e2:45:7d:
                    48:b9:51:88:fc:fe:fa:25:ba:33:59:b2:3b:08:67:
                    87:38:ff:46:aa:f9:0d:29:37:1a:34:e9:68:c5:57:
                    39:81:54:e8:36:15:42:b8:21:f3:b5:e4:91:8f:f9:
                    c7:4b:78:e7:7a:4e:ae:1b:0e:12:5b:4a:b8:55:a0:
                    77:25:98:8b:73:85:ff:d5:ad:a9:4b:19:f1:94:cb:
                    b4:ba:3b:b4:2e:17:4c:43:11:83:18:75:38:3e:ac:
                    00:c4:c8:d4:d6:21:ed:e6:8f:d5:a3:67:87:10:cf:
                    1e:16:c3:6c:94:02:aa:ad:03:c4:92:7c:1a:bb:50:
                    d9:9f:99:ee:13:a3:1b:92:e5:48:bf:39:66:ef:43:
                    d9:12:67:37:e6:e3:52:28:dd:52:21:2f:27:c4:55:
                    74:5c:c1:11:e3:f2:83:e1:81:40:f9:4b:ba:f5:b0:
                    0f:61:c5:3e:84:c6:ee:c3:87:cc:8f:8a:00:c0:e1:
                    aa:e9:60:5a:e4:8f:a6:43:5c:6a:a2:06:92:1b:6f:
                    d1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0B:E6:E2:37:DA:3A:A4:73:99:39:EF:8F:BD:EE:C1:26:F4:35:15
            X509v3 Authority Key Identifier:
                keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234382e302f32332d3233203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:14:9e:45:37:98:d8:05:56:4f:9e:c3:15:6d:4a:0b:6d:50:
         5f:18:1a:cb:b9:13:70:b1:70:62:ca:a4:9c:b1:b1:63:36:ca:
         d3:09:8e:75:94:f9:13:a4:32:8e:7a:d3:3f:60:7f:dd:ac:0c:
         be:d0:1b:db:b8:3d:1c:df:b6:ab:d0:d3:db:69:b5:bb:e5:0e:
         13:cd:96:fd:ec:98:dc:ae:12:8f:c7:1e:7f:74:b0:cd:2d:a8:
         d4:c6:b6:7d:f0:52:4d:4e:07:01:41:ac:62:57:b7:b0:a4:e8:
         fa:53:8b:f2:b6:26:f1:87:72:a6:13:fa:b7:10:de:4b:d5:2c:
         b4:78:db:ca:f3:ac:80:81:9d:54:d2:ff:de:b3:30:bc:c5:54:
         5c:18:f8:88:bc:83:59:37:40:bf:0f:c2:f6:7f:14:d2:c9:84:
         d1:a1:83:cb:42:0f:f9:e0:9a:bb:24:af:0c:6f:d2:c2:ce:78:
         27:49:2b:d6:d5:28:8e:ad:22:d7:9f:08:f9:02:34:05:4e:d1:
         41:60:e4:20:76:ef:10:92:ed:85:bc:2b:a4:e5:7b:2c:77:61:
         fa:de:36:39:a0:55:be:c0:64:31:97:fd:c5:36:91:61:97:ab:
         80:1a:8d:89:78:04:74:ec:39:c1:9d:9b:10:5f:55:d4:c5:60:
         5e:af:d3:e4
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUQilN6nTFGtM8sCcuN9gLG/c7cmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yMzA2MTMxMTUzMDJaFw0yNDA2MTExMTU4MDJaMDMxMTAvBgNV
BAMTKDkyMEJFNkUyMzdEQTNBQTQ3Mzk5MzlFRjhGQkRFRUMxMjZGNDM1MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/YUmM75591oYy+mQaECpbF9x
i+evXoGbT8lGh/OLIf3hO0TJ4t+M8wsDndaV5SHOa1++xm+yM+JFfUi5UYj8/vol
ujNZsjsIZ4c4/0aq+Q0pNxo06WjFVzmBVOg2FUK4IfO15JGP+cdLeOd6Tq4bDhJb
SrhVoHclmItzhf/VralLGfGUy7S6O7QuF0xDEYMYdTg+rADEyNTWIe3mj9WjZ4cQ
zx4Ww2yUAqqtA8SSfBq7UNmfme4ToxuS5Ui/OWbvQ9kSZzfm41Io3VIhLyfEVXRc
wRHj8oPhgUD5S7r1sA9hxT6Exu7Dh8yPigDA4arpYFrkj6ZDXGqiBpIbb9GxAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUkgvm4jfaOqRzmTnvj73uwSb0NRUwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzIyZTM1MzYyZTMyMzQzODJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1MzUzMTM1MzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAECOPgw
DQYJKoZIhvcNAQELBQADggEBAFsUnkU3mNgFVk+ewxVtSgttUF8YGsu5E3CxcGLK
pJyxsWM2ytMJjnWU+ROkMo560z9gf92sDL7QG9u4PRzftqvQ09tptbvlDhPNlv3s
mNyuEo/HHn90sM0tqNTGtn3wUk1OBwFBrGJXt7Ck6PpTi/K2JvGHcqYT+rcQ3kvV
LLR428rzrICBnVTS/96zMLzFVFwY+Ii8g1k3QL8PwvZ/FNLJhNGhg8tCD/ngmrsk
rwxv0sLOeCdJK9bVKI6tItefCPkCNAVO0UFg5CB27xCS7YW8K6Tleyx3YfreNjmg
Vb7AZDGX/cU2kWGXq4AajYl4BHTsOcGdmxBfVdTFYF6v0+Q=