Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830323a3a2f34382d3438203d3e203437323732.roa
File:                     326130373a353463313a333830323a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          xeiMDCeHHxBJM8BhIZBypgpbJsU3KEvgMdHEVYjq394=
Subject key identifier:   C4:E2:7C:E6:F8:3F:1E:7D:6F:4A:24:5C:1F:F4:E0:8A:97:46:F6:54
Certificate issuer:       /CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Certificate serial:       541861B3881DF5D755CB9EAD398955581292FE6B
Authority key identifier: CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830323a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 24 Sep 2023 09:54:28 +0000
ROA not before:           Sun 24 Sep 2023 09:49:28 +0000
ROA not after:            Sun 22 Sep 2024 09:54:28 +0000
asID:                     47272
IP address blocks:        2a07:54c1:3802::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:18:61:b3:88:1d:f5:d7:55:cb:9e:ad:39:89:55:58:12:92:fe:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
        Validity
            Not Before: Sep 24 09:49:28 2023 GMT
            Not After : Sep 22 09:54:28 2024 GMT
        Subject: CN=C4E27CE6F83F1E7D6F4A245C1FF4E08A9746F654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:45:4d:a4:b7:b9:d9:29:e9:b7:bd:6e:58:
                    68:88:89:df:76:55:a7:e4:90:e6:c3:dd:27:6a:e0:
                    7d:82:b3:4d:c8:f1:57:27:9c:fd:d7:f7:17:b7:bb:
                    a7:20:31:26:b0:5f:a8:af:86:c6:25:e8:67:32:e9:
                    67:56:2f:94:b3:c0:2a:fb:80:83:61:f6:b8:80:50:
                    5a:2f:e8:e8:ab:d4:02:1d:a8:95:b3:60:05:50:a4:
                    24:54:90:6c:81:eb:b5:96:7a:b7:fa:b4:24:7b:66:
                    a4:1f:06:7b:12:85:ed:93:72:c1:d9:8d:66:b2:2d:
                    89:e1:a8:76:3e:95:cd:d5:b2:51:52:16:5b:e7:bd:
                    45:a0:6f:9b:dd:65:83:0a:1b:3e:8c:15:88:8c:1f:
                    fb:b5:3d:32:aa:2a:51:e4:82:6a:79:41:73:8f:b0:
                    65:cf:05:46:88:bf:63:13:d8:d9:6f:7d:9d:d5:9c:
                    32:9a:14:34:a2:98:4f:5d:b2:2b:d1:ca:2c:a8:07:
                    52:5c:e4:2a:76:bb:2e:78:42:2e:52:fc:1f:61:87:
                    e9:be:c8:b5:f4:ec:75:37:65:21:b9:e8:c2:c0:44:
                    d3:61:3c:a3:11:bd:c5:c3:ef:a6:43:c9:8b:66:40:
                    82:04:d9:60:73:19:6a:ff:11:51:fb:22:77:9c:84:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E2:7C:E6:F8:3F:1E:7D:6F:4A:24:5C:1F:F4:E0:8A:97:46:F6:54
            X509v3 Authority Key Identifier:
                keyid:CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830323a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3802::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:0f:13:ae:c8:fd:91:e5:e2:40:1d:4e:5d:b7:c1:12:24:
         73:16:cb:ae:d1:4f:0f:1e:a0:94:73:ae:be:d6:99:a5:4e:c3:
         b7:b5:94:6e:03:73:03:6b:f3:ca:4b:d1:2e:b2:bf:2d:fd:9b:
         99:ab:14:6e:f7:3f:b6:56:4d:30:df:08:bf:3c:99:39:47:5e:
         62:09:e7:b5:8a:fd:d5:0e:b1:c4:0e:28:0b:d9:6a:14:33:b1:
         da:86:b8:34:27:f2:2f:df:76:10:63:c7:81:08:75:36:d2:88:
         05:3c:52:25:85:f2:b3:1b:b6:0f:72:dd:fc:fa:c2:11:4f:da:
         74:91:24:46:79:f3:f0:72:a0:59:ac:ec:3f:ac:02:f8:d2:d1:
         44:ae:c3:ed:96:12:28:a4:f6:96:86:6f:7b:ba:08:82:0d:e1:
         05:70:8c:9a:3d:00:4c:23:0b:22:72:e1:e9:b7:2f:df:d0:ac:
         d1:dd:71:bd:b1:17:16:bd:22:d4:af:d7:18:59:79:5e:8f:59:
         a5:08:57:ba:34:6c:1c:9f:3c:c6:73:1b:e4:c5:8b:f8:56:72:
         90:06:90:1f:1a:96:c2:75:e4:b4:3d:dd:59:00:08:9c:fa:c5:
         b2:06:68:37:15:40:74:8d:78:27:35:92:c4:d9:f7:f9:2f:27:
         36:04:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----