Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e362e302f32332d3233203d3e20323131393735.roa
File:                     34352e3135342e362e302f32332d3233203d3e20323131393735.roa (raw, json)
Hash identifier:          e/GfLg17M9WXI1JEwQJWmXhvGA7ddMCNZe4A+98A590=
Subject key identifier:   D2:46:65:22:AC:72:E5:CF:EA:4B:BE:E3:DC:62:98:5D:D0:AC:4B:EE
Certificate issuer:       /CN=da90910c27e0a78d5f8a404e69c260275561c59b
Certificate serial:       49CDEDF04A8B36C765D54B6A169CACA874D1FD61
Authority key identifier: DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e362e302f32332d3233203d3e20323131393735.roa
Signing time:             Thu 22 Dec 2022 14:58:44 +0000
ROA not before:           Thu 22 Dec 2022 14:53:44 +0000
ROA not after:            Thu 21 Dec 2023 14:58:44 +0000
asID:                     211975
IP address blocks:        45.154.6.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cd:ed:f0:4a:8b:36:c7:65:d5:4b:6a:16:9c:ac:a8:74:d1:fd:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da90910c27e0a78d5f8a404e69c260275561c59b
        Validity
            Not Before: Dec 22 14:53:44 2022 GMT
            Not After : Dec 21 14:58:44 2023 GMT
        Subject: CN=D2466522AC72E5CFEA4BBEE3DC62985DD0AC4BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:29:7c:da:88:7f:b6:fc:37:c9:56:9c:0d:
                    6c:21:37:7a:db:fb:71:de:e1:ab:7f:3f:0e:67:f8:
                    05:de:74:3c:c2:20:b8:82:54:22:12:2c:f7:0b:1f:
                    c4:99:61:27:d5:bd:c5:1c:1a:93:ac:d0:02:e4:bd:
                    06:d8:6a:53:09:e9:66:be:a5:09:4f:b6:d7:67:5d:
                    ef:be:2b:3a:dc:b8:63:14:20:1b:54:ad:4a:e3:ae:
                    45:39:88:2f:30:de:ec:0a:0b:97:59:2f:b9:12:3f:
                    f7:1a:09:3c:a3:a7:6e:21:85:e1:94:60:ed:ef:08:
                    54:4b:8b:bd:ef:07:4a:50:2a:ea:1a:1a:03:c8:a7:
                    da:7e:ec:f4:6a:ce:33:d3:dd:af:28:61:f9:21:a5:
                    ad:80:55:2e:e7:53:31:1f:5c:22:73:4e:34:59:01:
                    c4:9e:ff:8b:a7:8b:d1:b4:6c:77:2d:65:bd:57:6a:
                    80:8c:9e:a5:81:2e:e9:73:58:21:79:e4:57:58:86:
                    49:e2:c8:6d:98:6e:cf:d6:20:9b:e1:1d:25:ae:c7:
                    7a:29:9f:d8:9a:02:18:2d:98:e1:06:21:c3:7e:99:
                    6e:12:6e:10:2d:ec:ca:c7:ea:d0:49:38:64:a3:f0:
                    81:74:56:07:68:90:13:f8:ae:5a:be:5b:be:d8:a8:
                    00:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:46:65:22:AC:72:E5:CF:EA:4B:BE:E3:DC:62:98:5D:D0:AC:4B:EE
            X509v3 Authority Key Identifier:
                keyid:DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e362e302f32332d3233203d3e20323131393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:bf:e1:17:3e:8a:c8:f1:24:44:f4:f4:ba:99:78:fd:75:e4:
         2f:8a:b1:3c:27:74:3b:e8:f8:57:d4:28:56:39:ff:e1:c2:77:
         a4:0f:60:ec:1c:8f:2e:6c:ff:96:6e:88:57:c3:44:a8:99:c9:
         b9:30:ba:d3:b2:98:6b:f2:fb:b1:a9:12:93:8d:5d:51:8b:ff:
         d6:80:56:5e:13:1c:5e:04:00:7a:52:d1:d6:86:58:f2:ef:94:
         08:76:8c:bd:3e:77:0e:ff:17:25:a4:0c:68:08:ee:6e:20:a8:
         b9:3e:f4:3d:ef:9c:22:e0:69:c0:ac:c8:a3:cb:4d:c3:e3:f6:
         2b:da:62:22:ac:68:47:7e:c4:49:e8:4e:d6:a9:b0:22:f9:04:
         d2:38:b6:4b:9f:e4:c3:d0:67:c2:10:ea:d5:83:ff:b3:4a:ef:
         41:c6:ad:55:28:91:2f:4f:04:cb:95:87:d6:6d:57:f1:72:67:
         66:c6:7b:8d:0b:12:36:ea:b5:df:51:07:d8:9e:61:09:ee:a4:
         56:b3:0d:e4:49:6a:2c:1e:e5:9f:e2:1d:e5:65:55:1d:e0:5f:
         9b:6d:0c:95:98:24:c9:60:cb:9b:9a:9b:de:61:5a:20:7d:51:
         38:b8:db:61:16:2c:3f:a5:ea:ba:c6:3e:bc:ae:16:70:94:00:
         53:73:34:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----