Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20343030353039.roa
File:                     3139332e39332e3135332e302f32342d3234203d3e20343030353039.roa (raw, json)
Hash identifier:          0ZW5aWAm6x6OQlCHzSk42zhfeEIYvuZfsvsHNh+dfv0=
Subject key identifier:   C1:A5:C4:9F:7C:2E:90:E5:78:4B:A7:4E:DB:84:B4:D0:7C:FF:C4:A5
Certificate issuer:       /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial:       4F28E47EB451D9FD7384D397349A0972A485287B
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20343030353039.roa
Signing time:             Tue 28 Feb 2023 14:45:22 +0000
ROA not before:           Tue 28 Feb 2023 14:40:22 +0000
ROA not after:            Tue 27 Feb 2024 14:45:22 +0000
asID:                     400509
IP address blocks:        193.93.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:28:e4:7e:b4:51:d9:fd:73:84:d3:97:34:9a:09:72:a4:85:28:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
        Validity
            Not Before: Feb 28 14:40:22 2023 GMT
            Not After : Feb 27 14:45:22 2024 GMT
        Subject: CN=C1A5C49F7C2E90E5784BA74EDB84B4D07CFFC4A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f1:b0:e0:3d:f2:20:67:7f:7e:b3:4f:a9:d2:
                    40:de:8f:ea:18:6c:59:ae:1c:73:6a:42:d9:1e:e3:
                    c1:60:d3:5b:44:50:be:0e:91:3a:60:4f:a0:46:2c:
                    4c:ae:a9:0b:67:55:8f:91:22:7c:4f:b5:9d:b4:35:
                    83:75:51:b0:79:66:92:7d:1c:e1:44:5a:30:27:cf:
                    95:17:4f:43:20:29:24:4c:0a:06:e4:ff:88:bc:1d:
                    bf:e1:5e:82:05:30:11:d3:31:59:06:a8:66:8a:7f:
                    24:a6:b5:d0:cb:ac:c7:84:5d:9b:c2:d4:ba:07:69:
                    a1:9f:62:87:34:96:00:00:2d:60:e3:3b:e9:3d:e9:
                    0c:77:23:f9:ce:c0:b1:dc:0a:61:3b:05:7b:40:55:
                    fb:04:1c:e8:7e:57:16:02:5c:2f:1c:e4:34:e9:23:
                    90:5f:1e:82:32:d3:3a:67:0f:e2:f7:f3:31:92:a1:
                    43:ba:ca:8b:5b:36:e9:45:77:c6:3c:95:94:d6:f2:
                    3e:56:dc:0b:d7:44:68:e3:1f:79:24:11:f0:f9:4b:
                    f9:16:7a:9e:25:b7:f5:f6:92:70:ba:ae:9d:7a:2c:
                    41:da:78:91:dc:fa:87:3b:c1:3c:75:f7:9e:fc:c8:
                    6a:71:b9:69:de:3d:0e:df:8b:d7:ce:8a:6c:90:fb:
                    4f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A5:C4:9F:7C:2E:90:E5:78:4B:A7:4E:DB:84:B4:D0:7C:FF:C4:A5
            X509v3 Authority Key Identifier:
                keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20343030353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:f0:88:53:19:e3:5d:bd:a8:05:39:54:53:b2:5c:c5:de:4f:
         50:16:f4:1a:ed:8c:69:8a:6d:53:64:17:04:7e:fe:15:2a:04:
         39:14:c3:d6:9c:33:5d:74:14:46:45:a2:cc:7b:ae:da:5a:31:
         a3:78:a1:84:e8:0f:b1:74:68:38:7e:37:71:36:0b:1b:ac:6d:
         c0:ca:48:29:4c:c1:da:15:a8:65:11:e6:c8:65:1c:b7:35:aa:
         98:20:e3:e1:ff:e4:63:6e:ab:2f:48:e3:81:e2:c4:b0:8b:54:
         e3:ba:8a:16:e9:65:08:fd:cb:00:22:d8:a7:7e:f5:c3:c4:ef:
         d0:0c:d1:49:bd:be:f6:c2:48:34:86:ae:60:2b:5a:dd:8b:26:
         c8:9e:91:1e:e5:93:c9:8f:82:61:0a:66:a6:96:7c:58:df:dd:
         0d:de:e5:13:ec:8b:a1:b2:d6:8f:92:e7:a7:c8:cf:ad:7a:12:
         ea:14:a7:62:cc:fb:a3:27:85:08:62:cb:7f:81:1a:d9:88:01:
         6d:d9:11:48:87:65:2f:bc:87:65:94:b6:bb:23:80:41:74:4c:
         fa:81:82:1d:d1:8a:ca:3f:14:58:7f:4f:61:44:ea:f0:22:f0:
         8e:b1:99:5a:b8:0e:88:7f:31:42:63:50:2e:39:06:74:4f:79:
         36:b2:1b:91
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTyjkfrRR2f1zhNOXNJoJcqSFKHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx
NjJlMWFhZDAeFw0yMzAyMjgxNDQwMjJaFw0yNDAyMjcxNDQ1MjJaMDMxMTAvBgNV
BAMTKEMxQTVDNDlGN0MyRTkwRTU3ODRCQTc0RURCODRCNEQwN0NGRkM0QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl8bDgPfIgZ39+s0+p0kDej+oY
bFmuHHNqQtke48Fg01tEUL4OkTpgT6BGLEyuqQtnVY+RInxPtZ20NYN1UbB5ZpJ9
HOFEWjAnz5UXT0MgKSRMCgbk/4i8Hb/hXoIFMBHTMVkGqGaKfySmtdDLrMeEXZvC
1LoHaaGfYoc0lgAALWDjO+k96Qx3I/nOwLHcCmE7BXtAVfsEHOh+VxYCXC8c5DTp
I5BfHoIy0zpnD+L38zGSoUO6yotbNulFd8Y8lZTW8j5W3AvXRGjjH3kkEfD5S/kW
ep4lt/X2knC6rp16LEHaeJHc+oc7wTx19578yGpxuWnePQ7fi9fOimyQ+09fAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUwaXEn3wukOV4S6dO24S00Hz/xKUwHwYDVR0j
BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0
OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ
dUdxMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQt
M2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0OTEyLzAvMzEzOTMzMmUzOTMzMmUzMTM1
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzAzNTMwMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBXZkwDQYJKoZIhvcNAQELBQADggEBAAXwiFMZ4129qAU5VFOyXMXeT1AW9Brt
jGmKbVNkFwR+/hUqBDkUw9acM110FEZFosx7rtpaMaN4oYToD7F0aDh+N3E2Cxus
bcDKSClMwdoVqGUR5shlHLc1qpgg4+H/5GNuqy9I44HixLCLVOO6ihbpZQj9ywAi
2Kd+9cPE79AM0Um9vvbCSDSGrmArWt2LJsiekR7lk8mPgmEKZqaWfFjf3Q3e5RPs
i6Gy1o+S56fIz616EuoUp2LM+6MnhQhiy3+BGtmIAW3ZEUiHZS+8h2WUtrsjgEF0
TPqBgh3Riso/FFh/T2FE6vAi8I6xmVq4Doh/MUJjUC45BnRPeTayG5E=
-----END CERTIFICATE-----