Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830383a3a2f34382d3438203d3e203437323732.roa
File:                     326130373a353463313a333830383a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          GnUT2auXEIC/laIuQKhn8eszpYVf1jJ1BTa8ZnCBQZc=
Subject key identifier:   A2:74:19:5D:98:CF:AB:AA:06:18:2C:39:18:61:13:F8:3D:42:8D:F8
Certificate issuer:       /CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
Certificate serial:       0F5562F200904386FD551DFC5C4CA1A79B9892BC
Authority key identifier: CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830383a3a2f34382d3438203d3e203437323732.roa
Signing time:             Mon 02 Oct 2023 16:37:50 +0000
ROA not before:           Mon 02 Oct 2023 16:32:50 +0000
ROA not after:            Mon 30 Sep 2024 16:37:50 +0000
asID:                     47272
IP address blocks:        2a07:54c1:3808::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:55:62:f2:00:90:43:86:fd:55:1d:fc:5c:4c:a1:a7:9b:98:92:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE50F8654426B5A60EE8C52A9AE958F8D77B848
        Validity
            Not Before: Oct  2 16:32:50 2023 GMT
            Not After : Sep 30 16:37:50 2024 GMT
        Subject: CN=A274195D98CFABAA06182C39186113F83D428DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:7f:e2:61:3a:52:a6:6d:0f:28:56:29:ab:
                    9c:8c:b9:c6:25:9e:60:df:1b:58:64:2e:bf:c5:18:
                    2b:91:7e:d0:73:02:53:0a:52:11:d4:4b:67:c5:37:
                    02:6d:aa:89:f1:78:fc:37:bd:bb:f6:df:0c:06:3d:
                    94:c9:1f:23:67:c5:d6:00:25:1c:bf:50:e1:d3:a5:
                    c0:39:93:95:b6:1a:62:6e:00:f3:bb:75:ed:89:dd:
                    5b:29:10:3c:02:0f:a4:e0:d7:de:a7:83:4f:83:74:
                    81:b3:20:2c:ca:23:f4:d7:eb:7d:5c:e5:c0:d6:5a:
                    97:59:67:be:20:f3:d6:0e:9b:78:b7:f5:48:96:02:
                    29:bd:78:f9:60:b6:3e:42:db:9e:1e:78:9b:7a:8b:
                    80:ba:d0:51:8f:9a:ef:e4:87:53:f7:f7:c7:5c:be:
                    58:45:7c:2a:d3:d5:5a:8c:b2:45:56:ff:af:3e:4e:
                    5f:45:7b:56:75:e7:2f:e2:d1:07:27:ab:58:0e:c1:
                    31:28:ec:08:c2:a2:8c:84:f5:6f:be:3d:d3:3d:3d:
                    5f:b1:49:f6:61:8c:a3:0a:9c:0a:d2:91:fc:0f:c1:
                    7a:da:97:3a:d1:43:d5:9b:38:30:dd:71:1b:27:06:
                    0d:e8:4c:bb:45:ea:02:34:78:ba:23:a8:9b:40:75:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:19:5D:98:CF:AB:AA:06:18:2C:39:18:61:13:F8:3D:42:8D:F8
            X509v3 Authority Key Identifier:
                keyid:CE:E5:0F:86:54:42:6B:5A:60:EE:8C:52:A9:AE:95:8F:8D:77:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/CEE50F8654426B5A60EE8C52A9AE958F8D77B848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bc90f4f6-f2c4-4882-91cf-9b8f0b38d7da/1/326130373a353463313a333830383a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3808::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:20:16:63:64:bb:d7:e5:03:8a:3f:9d:02:53:51:5e:e0:8a:
         36:e6:98:13:d8:ab:18:f0:e7:46:cb:96:84:7c:7d:b1:22:18:
         1e:be:d3:c3:bf:ad:a3:4b:fb:10:be:06:60:2f:d1:56:59:a0:
         f9:b7:c4:8b:f5:8b:3b:86:8e:36:bf:1e:67:f2:0d:8b:e9:1e:
         29:25:10:7b:65:fb:c8:de:27:1d:c1:81:2e:ab:6c:82:bb:5b:
         49:d2:d7:bc:03:40:a3:e1:63:73:b8:41:eb:5d:49:09:ea:86:
         4b:5b:dd:9e:46:31:dc:68:01:22:61:b0:ee:ee:80:ca:a4:69:
         82:a7:37:6c:a1:a2:1b:1c:e0:f0:0a:f4:83:ed:ca:67:71:e8:
         8c:26:52:08:88:be:0c:c7:7f:dc:f2:84:3d:4c:f2:2b:a4:b7:
         46:1d:c8:29:74:58:fb:09:53:61:ae:6a:c6:0b:76:a2:2a:77:
         ff:e2:28:9c:4d:99:25:c5:3f:07:80:76:ad:1a:1d:18:24:38:
         21:84:e6:fa:7f:d1:d3:d3:0b:c2:fb:d5:79:6b:ac:4a:06:74:
         db:3b:87:42:dd:1d:eb:18:26:d0:01:ed:7a:00:fb:8b:c8:eb:
         1a:c5:98:6b:da:35:56:6d:62:6d:48:6a:95:db:5d:02:8d:60:
         c6:43:e7:06
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUD1Vi8gCQQ4b9VR38XEyhp5uYkrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VFNTBGODY1NDQyNkI1QTYwRUU4QzUyQTlBRTk1OEY4
RDc3Qjg0ODAeFw0yMzEwMDIxNjMyNTBaFw0yNDA5MzAxNjM3NTBaMDMxMTAvBgNV
BAMTKEEyNzQxOTVEOThDRkFCQUEwNjE4MkMzOTE4NjExM0Y4M0Q0MjhERjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3H/iYTpSpm0PKFYpq5yMucYl
nmDfG1hkLr/FGCuRftBzAlMKUhHUS2fFNwJtqonxePw3vbv23wwGPZTJHyNnxdYA
JRy/UOHTpcA5k5W2GmJuAPO7de2J3VspEDwCD6Tg196ng0+DdIGzICzKI/TX631c
5cDWWpdZZ74g89YOm3i39UiWAim9ePlgtj5C254eeJt6i4C60FGPmu/kh1P398dc
vlhFfCrT1VqMskVW/68+Tl9Fe1Z15y/i0Qcnq1gOwTEo7AjCooyE9W++PdM9PV+x
SfZhjKMKnArSkfwPwXralzrRQ9WbODDdcRsnBg3oTLtF6gI0eLojqJtAdYZJAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUonQZXZjPq6oGGCw5GGET+D1CjfgwHwYDVR0j
BBgwFoAUzuUPhlRCa1pg7oxSqa6Vj413uEgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmM5MGY0ZjYtZjJjNC00ODgyLTkxY2YtOWI4ZjBiMzhk
N2RhLzEvQ0VFNTBGODY1NDQyNkI1QTYwRUU4QzUyQTlBRTk1OEY4RDc3Qjg0OC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9DRUU1MEY4NjU0NDI2QjVBNjBFRThDNTJB
OUFFOTU4RjhENzdCODQ4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9iYzkwZjRmNi1mMmM0LTQ4ODItOTFjZi05YjhmMGIzOGQ3ZGEvMS8zMjYxMzAz
NzNhMzUzNDYzMzEzYTMzMzgzMDM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz
NzMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoHVME4CDANBgkqhkiG9w0BAQsFAAOCAQEASyAW
Y2S71+UDij+dAlNRXuCKNuaYE9irGPDnRsuWhHx9sSIYHr7Tw7+to0v7EL4GYC/R
Vlmg+bfEi/WLO4aONr8eZ/INi+keKSUQe2X7yN4nHcGBLqtsgrtbSdLXvANAo+Fj
c7hB611JCeqGS1vdnkYx3GgBImGw7u6AyqRpgqc3bKGiGxzg8Ar0g+3KZ3HojCZS
CIi+DMd/3PKEPUzyK6S3Rh3IKXRY+wlTYa5qxgt2oip3/+IonE2ZJcU/B4B2rRod
GCQ4IYTm+n/R09MLwvvVeWusSgZ02zuHQt0d6xgm0AHtegD7i8jrGsWYa9o1Vm1i
bUhqldtdAo1gxkPnBg==
-----END CERTIFICATE-----