Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830343a3a2f34382d3438203d3e203437323732.roa
File:                     326130373a353463313a333830343a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          k++CqWZD6/M+zRcwQp0+rWgmTrjaV4AESCREO6iHuWI=
Subject key identifier:   9E:02:14:9D:6A:12:F9:52:95:51:64:F1:E3:52:5B:DE:C0:F5:3B:AF
Certificate issuer:       /CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Certificate serial:       532B8FE28A160DA4602BE0C5A2759C14E073EB21
Authority key identifier: CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830343a3a2f34382d3438203d3e203437323732.roa
Signing time:             Sun 24 Sep 2023 09:53:35 +0000
ROA not before:           Sun 24 Sep 2023 09:48:35 +0000
ROA not after:            Sun 22 Sep 2024 09:53:35 +0000
asID:                     47272
IP address blocks:        2a07:54c1:3804::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2b:8f:e2:8a:16:0d:a4:60:2b:e0:c5:a2:75:9c:14:e0:73:eb:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
        Validity
            Not Before: Sep 24 09:48:35 2023 GMT
            Not After : Sep 22 09:53:35 2024 GMT
        Subject: CN=9E02149D6A12F952955164F1E3525BDEC0F53BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:c3:39:9b:b3:6b:05:2f:7d:fb:cb:2c:99:
                    d2:20:e4:42:f0:e3:b5:2c:45:b9:36:13:00:6a:cd:
                    85:7b:e0:7c:e9:69:51:56:8e:00:d9:9e:50:86:13:
                    32:71:b5:c5:7b:3a:d4:ee:29:fc:90:f4:8c:32:a2:
                    b5:7e:7c:64:a8:0e:72:48:fb:05:46:34:d2:2a:5f:
                    ec:a9:29:a1:b1:d5:6c:f3:ce:6d:c1:5d:ae:84:a2:
                    cc:e6:a3:70:1a:e4:e5:e5:67:ae:8d:d3:2b:25:d5:
                    f5:96:29:07:ad:fb:9d:bc:5a:23:16:17:94:fa:01:
                    08:09:bd:c5:c2:3a:15:4d:ae:b2:91:8b:1f:d3:bd:
                    c6:98:2b:1a:d4:77:9d:6d:27:e8:c1:5e:a1:ad:77:
                    34:80:68:8d:93:c6:6d:dd:88:26:46:fb:25:09:74:
                    6d:c7:48:b5:3f:93:63:34:a3:59:40:bb:d5:7d:ba:
                    e0:93:8b:15:0a:6e:55:a8:42:2f:3b:04:ac:3d:f6:
                    c7:83:15:99:af:8a:1c:74:48:1d:c2:75:20:b0:48:
                    aa:de:4e:35:34:f0:ca:11:6c:d7:61:3b:e7:d8:e9:
                    9f:cd:8e:52:81:ef:5b:07:4e:1c:70:b2:e7:d3:46:
                    49:3c:62:66:bd:ae:a9:5d:cc:c7:11:c8:f9:62:c8:
                    0a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:02:14:9D:6A:12:F9:52:95:51:64:F1:E3:52:5B:DE:C0:F5:3B:AF
            X509v3 Authority Key Identifier:
                keyid:CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830343a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3804::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:62:91:1d:00:57:19:02:d4:94:4c:73:8b:5b:42:9c:8c:3e:
         92:e9:d4:46:5f:cc:ec:94:fb:8f:b0:9d:7a:b0:8c:eb:9a:e2:
         00:f7:e6:61:9a:3e:d0:e8:59:09:e8:06:c8:61:7b:05:7f:d4:
         1e:0e:f9:91:50:d4:62:37:61:60:41:a4:6a:19:7b:b7:07:c1:
         60:df:dc:b6:b8:70:56:1a:69:c0:cc:e8:d6:33:15:f7:e8:5a:
         ec:4c:e5:ed:ed:34:e2:82:60:a4:90:fd:a1:c8:41:53:50:7a:
         fd:1d:02:da:69:8a:f4:56:7c:62:36:b8:a5:fb:c4:9b:2a:d7:
         49:0b:1d:cd:37:60:e5:61:f6:e8:88:18:75:90:54:3c:0b:df:
         de:78:38:60:6d:2d:5e:5d:5c:2d:0d:10:82:79:a2:c3:70:30:
         4f:73:b8:f3:1e:97:54:d7:e5:6e:c3:25:70:5a:95:2d:e0:6d:
         0f:63:71:aa:7d:d6:89:b5:18:a5:dc:86:44:4e:73:3b:2d:f0:
         58:ec:6d:61:a2:c0:e8:a3:07:be:65:c8:62:99:29:c4:ef:17:
         79:07:37:c1:85:ce:3f:aa:1e:bc:4b:71:5d:4f:87:6a:a6:96:
         6c:20:d0:7a:04:31:03:c8:ae:76:ec:97:f6:3f:0c:1e:ef:c4:
         1a:fe:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----