Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830313a3a2f34382d3438203d3e203437323732.roa
File:                     326130373a353463313a333830313a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          DruwouoHRUgc47bY2W1ODW+stvVnbA4bKLGSHXPKvus=
Subject key identifier:   40:C7:71:52:3A:90:0A:18:67:75:FE:15:09:48:85:8D:3C:4D:5E:A2
Certificate issuer:       /CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Certificate serial:       0419733D914108CA61E9886BD160ADF63F736275
Authority key identifier: CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830313a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 24 Sep 2023 09:54:59 +0000
ROA not before:           Sun 24 Sep 2023 09:49:59 +0000
ROA not after:            Sun 22 Sep 2024 09:54:59 +0000
asID:                     47272
IP address blocks:        2a07:54c1:3801::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:19:73:3d:91:41:08:ca:61:e9:88:6b:d1:60:ad:f6:3f:73:62:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
        Validity
            Not Before: Sep 24 09:49:59 2023 GMT
            Not After : Sep 22 09:54:59 2024 GMT
        Subject: CN=40C771523A900A186775FE150948858D3C4D5EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:4b:d3:a7:39:7e:0e:42:11:c5:de:94:8b:
                    49:33:0a:04:18:0b:15:84:bb:c2:f6:54:19:a0:25:
                    22:91:3a:8e:55:aa:d0:7a:4e:82:ab:7a:5d:d3:c9:
                    2a:e7:bf:4d:d0:13:8b:ec:f7:a6:1a:34:25:0c:1a:
                    08:64:41:aa:72:6e:b4:9b:7c:7b:d4:9a:20:0a:68:
                    43:b6:70:f1:8f:7f:7f:7f:f0:78:56:88:75:79:56:
                    74:e8:7d:da:5b:4b:41:14:54:78:d9:87:28:99:97:
                    6b:53:ff:51:67:1c:d7:ca:ed:30:53:3f:4e:ef:7d:
                    e0:d5:74:ba:d6:8b:cc:80:d0:62:ce:37:5c:55:e5:
                    d4:8c:c0:9e:43:a8:8f:c4:e2:d5:e3:38:1a:4c:23:
                    aa:12:9b:bd:05:be:52:d4:d2:d3:90:07:2e:13:61:
                    ed:45:52:7e:0c:d1:88:bd:b2:fc:aa:93:a6:35:01:
                    c2:aa:a7:09:7d:ab:b0:df:80:46:59:e6:f4:ac:97:
                    23:db:cc:04:6d:8c:2d:5b:67:83:1f:9a:d6:2c:ac:
                    f3:82:7f:48:10:aa:d3:e6:9d:de:d4:51:0d:6c:94:
                    7e:ae:be:57:1c:e7:e7:10:f7:8c:ff:d2:89:4a:b0:
                    ad:9b:45:2c:c5:8c:78:b5:97:e8:50:87:51:2a:66:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C7:71:52:3A:90:0A:18:67:75:FE:15:09:48:85:8D:3C:4D:5E:A2
            X509v3 Authority Key Identifier:
                keyid:CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830313a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3801::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:e1:29:fc:a6:32:c6:fa:fa:3b:57:b7:5c:35:9c:66:07:d7:
         d5:5f:2f:ca:eb:2c:29:cb:ff:6f:37:ce:ca:c9:a2:97:73:1d:
         59:b5:72:61:01:49:ad:fc:86:1c:b9:b9:06:11:f7:7a:eb:b0:
         8c:86:16:75:11:ec:26:57:44:f7:b5:b1:fe:ac:43:19:e8:f6:
         31:3e:68:ba:85:fc:f5:bc:18:63:72:84:09:1e:94:1e:6f:cc:
         67:5f:de:ee:d3:5d:ea:d1:58:1d:0a:e0:7f:79:f1:6e:50:82:
         5b:e2:08:49:69:7a:6f:ce:bf:cd:a2:c4:82:55:df:3f:ce:5c:
         a4:14:fc:40:6a:1d:a9:64:79:ac:9a:31:c3:a9:d5:33:32:86:
         d4:0a:4c:cd:4b:1c:ba:07:0f:eb:87:55:c0:3b:54:9c:1c:dc:
         21:68:90:74:07:31:40:0d:70:c8:2f:16:48:6e:59:8f:db:ba:
         eb:a3:15:2f:1b:8f:bb:dd:5d:96:8a:a2:dd:3a:f3:da:2d:72:
         f1:02:39:18:1c:e2:5e:9a:32:92:ed:90:ac:00:d1:fc:37:0e:
         77:73:b3:f2:87:c9:f6:9d:fe:0c:13:53:5e:d8:5b:c7:c7:3b:
         e1:b4:4e:9a:03:13:ba:35:2b:34:5e:65:89:ae:fd:ad:2a:eb:
         c7:1c:58:a9
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUBBlzPZFBCMph6Yhr0WCt9j9zYnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VFNTBGODY1NDQyNkI1QTYwRUU4QzUyQTlBRTk1OEY4
RDc3Qjg0ODAeFw0yMzA5MjQwOTQ5NTlaFw0yNDA5MjIwOTU0NTlaMDMxMTAvBgNV
BAMTKDQwQzc3MTUyM0E5MDBBMTg2Nzc1RkUxNTA5NDg4NThEM0M0RDVFQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc0EvTpzl+DkIRxd6Ui0kzCgQY
CxWEu8L2VBmgJSKROo5VqtB6ToKrel3TySrnv03QE4vs96YaNCUMGghkQapybrSb
fHvUmiAKaEO2cPGPf39/8HhWiHV5VnTofdpbS0EUVHjZhyiZl2tT/1FnHNfK7TBT
P07vfeDVdLrWi8yA0GLON1xV5dSMwJ5DqI/E4tXjOBpMI6oSm70FvlLU0tOQBy4T
Ye1FUn4M0Yi9svyqk6Y1AcKqpwl9q7DfgEZZ5vSslyPbzARtjC1bZ4MfmtYsrPOC
f0gQqtPmnd7UUQ1slH6uvlcc5+cQ94z/0olKsK2bRSzFjHi1l+hQh1EqZr5DAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUQMdxUjqQChhndf4VCUiFjTxNXqIwHwYDVR0j
BBgwFoAUzuUPhlRCa1pg7oxSqa6Vj413uEgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzEvQ0VFNTBGODY1NDQyNkI1QTYwRUU4QzUyQTlBRTk1OEY4RDc3Qjg0OC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9DRUU1MEY4NjU0NDI2QjVBNjBFRThDNTJB
OUFFOTU4RjhENzdCODQ4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9iYzkwZjRmNi1mMmM0LTQ4ODItOTFjZi05YjhmMGIzOGQ3ZGEvMS8zMjYxMzAz
NzNhMzUzNDYzMzEzYTMzMzgzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz
NzMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoHVME4ATANBgkqhkiG9w0BAQsFAAOCAQEAXeEp
/KYyxvr6O1e3XDWcZgfX1V8vyussKcv/bzfOysmil3MdWbVyYQFJrfyGHLm5BhH3
euuwjIYWdRHsJldE97Wx/qxDGej2MT5ouoX89bwYY3KECR6UHm/MZ1/e7tNd6tFY
HQrgf3nxblCCW+IISWl6b86/zaLEglXfP85cpBT8QGodqWR5rJoxw6nVMzKG1ApM
zUscugcP64dVwDtUnBzcIWiQdAcxQA1wyC8WSG5Zj9u666MVLxuPu91dloqi3Trz
2i1y8QI5GBziXpoyku2QrADR/DcOd3Oz8ofJ9p3+DBNTXthbx8c74bROmgMTujUr
NF5lia79rSrrxxxYqQ==
-----END CERTIFICATE-----