Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133382e302f32342d3234203d3e2033333536.roa
File:                     34352e39312e3133382e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          Vkn36auYooJPuK2kuUWkpAs3gDI7cUG/TOOT6jbvrMg=
Subject key identifier:   5B:E8:29:9F:C6:60:66:91:86:AF:4C:71:55:D1:56:BB:63:1E:F5:9B
Certificate issuer:       /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial:       576656220B27C86941663F36C8F02632FF7CA0D7
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133382e302f32342d3234203d3e2033333536.roa
Signing time:             Thu 14 Sep 2023 05:47:35 +0000
ROA not before:           Thu 14 Sep 2023 05:42:35 +0000
ROA not after:            Thu 12 Sep 2024 05:47:35 +0000
asID:                     3356
IP address blocks:        45.91.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:66:56:22:0b:27:c8:69:41:66:3f:36:c8:f0:26:32:ff:7c:a0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
        Validity
            Not Before: Sep 14 05:42:35 2023 GMT
            Not After : Sep 12 05:47:35 2024 GMT
        Subject: CN=5BE8299FC660669186AF4C7155D156BB631EF59B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:8a:62:84:83:f6:69:e4:c9:50:62:9b:03:
                    8d:db:f1:98:51:4d:1f:88:cb:06:4f:e4:b3:70:db:
                    a1:02:dd:80:18:26:a9:e1:36:ad:8b:db:f7:3f:2a:
                    ec:aa:fb:d7:e2:bd:f8:d5:2e:25:e7:12:72:c5:df:
                    90:65:fd:38:8b:4b:51:a1:80:cf:53:fa:80:8d:8d:
                    23:2a:f7:6d:f5:7c:d6:b8:1e:a0:da:89:00:14:bb:
                    46:63:20:18:f2:77:80:4b:0a:e5:82:28:04:58:b2:
                    91:1e:11:76:ef:de:18:7a:6f:9c:bc:d2:a3:a9:d5:
                    c8:a0:bd:0b:02:9e:a2:a4:54:69:bd:69:b6:0b:a2:
                    f4:8d:8e:99:f5:83:28:99:30:01:e7:ca:e7:32:d8:
                    af:34:b5:5a:25:04:84:10:a4:00:42:63:f4:0d:6d:
                    4f:80:10:42:07:05:c8:75:52:61:66:81:83:33:10:
                    d1:75:e6:9c:66:a6:c2:97:fe:f1:e0:18:6e:d8:e4:
                    a9:26:86:ae:7e:be:13:3a:d5:d5:2b:b5:1f:12:4f:
                    ef:91:51:45:70:88:b0:88:e6:a2:fb:27:c4:78:23:
                    7d:51:f0:d5:bf:cf:cd:d4:8b:37:11:bf:9d:bf:d4:
                    0d:59:2c:08:b0:0b:7f:f8:b0:4b:7d:22:52:75:9e:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E8:29:9F:C6:60:66:91:86:AF:4C:71:55:D1:56:BB:63:1E:F5:9B
            X509v3 Authority Key Identifier:
                keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133382e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:21:78:55:1e:02:77:47:4b:b3:a6:cf:f4:8e:52:49:e5:f6:
         15:7d:a5:08:2c:34:89:c6:fd:79:60:19:6f:21:9c:8f:47:34:
         63:9f:db:25:12:0e:4c:88:f9:4b:7a:18:cf:08:26:10:2f:ea:
         41:50:97:16:08:e7:22:2c:43:bd:88:d9:42:77:c0:91:8a:df:
         0e:7e:f3:52:06:97:45:fa:b5:b2:94:ae:62:4e:4c:cf:59:4c:
         43:3b:9a:cb:29:bb:3c:78:fc:ed:79:ad:67:f3:f3:40:49:7a:
         f5:a9:dc:b1:7b:23:4d:e3:b3:3b:f4:26:db:3f:83:8a:e9:64:
         30:e1:78:7e:f9:1d:82:8e:f7:8f:9b:ec:2f:c4:a9:fd:af:89:
         0b:22:58:53:23:fb:c2:43:cd:92:59:7b:10:1e:03:6d:d6:38:
         90:c7:f8:7e:63:27:4d:11:a8:42:35:10:58:44:32:77:4c:85:
         19:55:0a:81:fb:57:5a:a6:6c:dd:56:57:e2:40:81:0e:8e:aa:
         25:87:0b:b9:11:fa:90:47:c3:66:db:24:ec:ca:45:cc:0d:75:
         b8:b8:8d:6c:0a:a9:37:61:02:77:7a:69:86:1c:62:79:cf:d6:
         c9:bc:82:82:50:66:aa:d6:92:3c:c8:1b:74:4f:cf:8e:ed:11:
         1e:a9:78:6d
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUV2ZWIgsnyGlBZj82yPAmMv98oNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yMzA5MTQwNTQyMzVaFw0yNDA5MTIwNTQ3MzVaMDMxMTAvBgNV
BAMTKDVCRTgyOTlGQzY2MDY2OTE4NkFGNEM3MTU1RDE1NkJCNjMxRUY1OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYjYpihIP2aeTJUGKbA43b8ZhR
TR+IywZP5LNw26EC3YAYJqnhNq2L2/c/Kuyq+9fivfjVLiXnEnLF35Bl/TiLS1Gh
gM9T+oCNjSMq9231fNa4HqDaiQAUu0ZjIBjyd4BLCuWCKARYspEeEXbv3hh6b5y8
0qOp1cigvQsCnqKkVGm9abYLovSNjpn1gyiZMAHnyucy2K80tVolBIQQpABCY/QN
bU+AEEIHBch1UmFmgYMzENF15pxmpsKX/vHgGG7Y5Kkmhq5+vhM61dUrtR8ST++R
UUVwiLCI5qL7J8R4I31R8NW/z83UizcRv52/1A1ZLAiwC3/4sEt9IlJ1nnTpAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUW+gpn8ZgZpGGr0xxVdFWu2Me9ZswHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzQzNTJlMzkzMTJlMzEzMzM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMzM1MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtW4ow
DQYJKoZIhvcNAQELBQADggEBAGcheFUeAndHS7Omz/SOUknl9hV9pQgsNInG/Xlg
GW8hnI9HNGOf2yUSDkyI+Ut6GM8IJhAv6kFQlxYI5yIsQ72I2UJ3wJGK3w5+81IG
l0X6tbKUrmJOTM9ZTEM7msspuzx4/O15rWfz80BJevWp3LF7I03jszv0Jts/g4rp
ZDDheH75HYKO94+b7C/Eqf2viQsiWFMj+8JDzZJZexAeA23WOJDH+H5jJ00RqEI1
EFhEMndMhRlVCoH7V1qmbN1WV+JAgQ6OqiWHC7kR+pBHw2bbJOzKRcwNdbi4jWwK
qTdhAnd6aYYcYnnP1sm8goJQZqrWkjzIG3RPz47tER6peG0=
-----END CERTIFICATE-----