Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3232342e302f32302d3234203d3e20383334.roa
File:                     34362e3235302e3232342e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier:          hUy5a2TS205EwIlcMtW7ZqT1YDhxv3RV078MQVCQ/9s=
Subject key identifier:   D4:18:C0:42:BD:17:DB:B9:A8:8E:66:08:9C:99:81:1F:74:D4:1B:23
Certificate issuer:       /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial:       2E934E6FD918E235964453104CF8AE13F6EE220D
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3232342e302f32302d3234203d3e20383334.roa
Signing time:             Tue 13 Jun 2023 00:00:07 +0000
ROA not before:           Mon 12 Jun 2023 23:55:07 +0000
ROA not after:            Tue 11 Jun 2024 00:00:07 +0000
asID:                     834
IP address blocks:        46.250.224.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:93:4e:6f:d9:18:e2:35:96:44:53:10:4c:f8:ae:13:f6:ee:22:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
        Validity
            Not Before: Jun 12 23:55:07 2023 GMT
            Not After : Jun 11 00:00:07 2024 GMT
        Subject: CN=D418C042BD17DBB9A88E66089C99811F74D41B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0c:13:54:cb:37:55:3e:84:49:cb:32:12:f0:
                    c3:b3:1d:98:b0:97:c8:cd:a6:f8:17:40:2e:d0:d5:
                    a4:be:1a:c2:7a:0f:8e:b8:9e:76:a9:69:61:f9:7c:
                    c6:19:65:a5:e2:30:44:ee:32:86:f8:a9:ed:cf:a6:
                    ec:a5:75:ad:8e:dc:79:5f:0c:1e:eb:90:94:9f:aa:
                    94:11:6d:e6:f9:4c:48:1b:c2:0d:c5:e9:48:38:fc:
                    fb:32:0f:bf:ea:42:aa:81:44:e3:d1:ee:e4:f3:36:
                    f8:16:1f:e3:fe:66:22:98:8e:74:c6:d0:e5:00:01:
                    78:1e:3d:16:25:27:31:f0:f8:f5:ac:7d:5c:3f:2b:
                    c0:dc:03:2f:f8:b1:3e:56:91:59:85:1a:db:aa:8e:
                    1d:93:bc:25:cf:8d:e2:2c:7f:95:ba:c8:31:43:8e:
                    2e:59:eb:73:ca:99:28:51:bf:cc:19:78:92:ac:e6:
                    1f:67:d2:55:dc:47:57:25:f5:0f:19:46:e4:25:15:
                    5f:1f:0e:af:f7:9d:a3:5c:af:49:8c:67:94:a0:97:
                    0f:b4:0a:1e:b1:4c:75:c6:83:cb:f8:65:84:c4:02:
                    92:07:6a:37:5f:d4:61:8c:0d:d5:cd:3d:e6:fc:64:
                    3d:89:d2:e0:d9:93:0d:f7:b5:3d:9d:a9:5a:69:22:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:18:C0:42:BD:17:DB:B9:A8:8E:66:08:9C:99:81:1F:74:D4:1B:23
            X509v3 Authority Key Identifier:
                keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3232342e302f32302d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.250.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:ef:e2:29:a0:9c:18:b3:4d:58:9c:fa:98:1a:4f:26:f9:e1:
         33:fd:72:b1:ca:ce:40:e2:bc:e0:ce:d1:d9:d5:8f:0a:10:46:
         2b:12:92:7c:70:8c:3d:5d:e8:c4:ad:93:e0:61:3b:f7:78:40:
         50:12:cc:e4:6a:01:8a:00:20:29:d2:0d:71:28:05:45:b6:4b:
         60:79:e1:9f:0a:40:31:8d:4e:7a:ac:53:66:a3:28:0b:bd:07:
         e4:26:3a:a3:39:33:3c:08:b2:c4:15:ff:2b:c5:e0:04:41:88:
         cb:f1:61:37:e6:0d:36:51:63:b0:52:56:42:47:c4:e1:34:23:
         1f:09:27:74:1d:47:25:d2:93:12:e6:aa:2c:4c:f3:64:71:50:
         07:55:a1:9c:a7:b8:d1:79:bc:ff:ba:23:ff:5d:c9:a8:92:59:
         03:36:5c:a4:85:ef:56:a3:82:78:7d:59:ff:ed:e1:03:43:fc:
         55:9e:36:a6:19:04:b3:46:0f:83:4a:55:4a:5e:a2:a8:4a:a4:
         bc:88:e2:5e:a5:92:b6:c4:f6:f5:f3:9f:51:82:b3:a9:42:60:
         4b:f4:80:8a:ca:9a:d5:9c:dc:97:10:f9:97:8b:92:75:71:2f:
         85:83:7b:05:ac:2f:fc:e0:cf:d5:7d:5e:80:5d:2d:85:8d:bd:
         93:9e:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----