Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e362e302f32332d3233203d3e203434353437.roa
File:                     34352e3135342e362e302f32332d3233203d3e203434353437.roa (raw, json)
Hash identifier:          lYp5yAqjJ1XDzWMPKLDmNf22SP4PINOgEvVfNprVqk0=
Subject key identifier:   89:2D:B1:F7:69:D8:60:5E:97:5F:87:D6:CF:AC:4C:91:32:A5:B6:C1
Certificate issuer:       /CN=da90910c27e0a78d5f8a404e69c260275561c59b
Certificate serial:       47629736B6FA9C548BFA374653BB87473D35FE2B
Authority key identifier: DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e362e302f32332d3233203d3e203434353437.roa
Signing time:             Wed 03 May 2023 12:48:56 +0000
ROA not before:           Wed 03 May 2023 12:43:56 +0000
ROA not after:            Wed 01 May 2024 12:48:56 +0000
asID:                     44547
IP address blocks:        45.154.6.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:62:97:36:b6:fa:9c:54:8b:fa:37:46:53:bb:87:47:3d:35:fe:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da90910c27e0a78d5f8a404e69c260275561c59b
        Validity
            Not Before: May  3 12:43:56 2023 GMT
            Not After : May  1 12:48:56 2024 GMT
        Subject: CN=892DB1F769D8605E975F87D6CFAC4C9132A5B6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:3e:db:4d:47:a4:91:f9:58:e5:75:a9:3d:
                    ff:70:1c:97:ca:c4:6e:f9:6f:ae:1e:0e:1e:40:4d:
                    bb:62:69:f9:0d:12:cb:a8:48:89:ff:29:1a:33:c0:
                    58:8d:8f:c9:ca:6a:0c:c9:fa:31:09:97:ce:2a:45:
                    e9:db:58:49:e2:10:34:0c:bc:0f:93:d9:34:ca:81:
                    63:4d:49:3c:57:42:97:a0:b1:67:b3:89:f6:a6:cf:
                    98:e0:17:80:2b:10:d8:06:80:8b:25:60:e9:2c:b4:
                    54:63:12:db:5f:a7:de:9d:a1:cf:08:61:38:6a:78:
                    9f:60:13:94:0c:83:b0:4d:3f:16:91:70:ba:2b:44:
                    34:a5:1a:89:8f:43:1e:8a:ed:1c:7c:16:eb:61:85:
                    43:40:7f:e9:ab:90:ee:49:15:81:38:3b:a0:a5:b5:
                    78:4a:bb:77:78:af:71:57:1e:5a:b4:e6:6b:8a:86:
                    18:10:f8:33:21:2f:b2:6d:30:7a:12:b7:5a:3f:f7:
                    b0:d9:95:27:8e:4f:54:27:1e:3a:50:89:a2:12:17:
                    12:ce:4d:fa:76:7d:dc:64:24:3c:74:c4:01:2f:04:
                    9f:fb:62:6a:2a:68:ad:9e:53:66:9d:fb:80:7f:2f:
                    94:5e:84:8e:28:d4:0c:49:b0:66:12:3e:d4:6f:60:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2D:B1:F7:69:D8:60:5E:97:5F:87:D6:CF:AC:4C:91:32:A5:B6:C1
            X509v3 Authority Key Identifier:
                keyid:DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e362e302f32332d3233203d3e203434353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:93:96:af:cb:4f:63:12:c5:a0:30:5d:92:c6:28:0c:e0:ba:
         c3:90:31:e3:3f:43:bf:0e:c2:8e:5e:16:30:80:2b:57:76:62:
         c2:0c:20:40:8d:76:93:ba:62:8d:cd:7f:d4:d3:78:32:75:b5:
         4e:e3:a5:79:ce:cf:18:df:ab:8b:64:9a:a1:87:e0:dd:79:af:
         2f:80:55:33:1b:35:d1:dd:7c:b2:dd:9b:6a:a0:f1:76:27:a4:
         7c:d4:2b:af:f6:f2:43:fc:26:76:89:ad:02:e7:57:69:7f:ae:
         7c:3b:91:0e:e0:c3:d2:25:8d:64:60:93:32:8f:50:10:32:e1:
         65:e2:be:9d:bf:4d:45:8f:f1:cf:55:dc:08:e0:33:b7:26:ba:
         3a:27:44:b6:8f:46:90:98:40:34:33:d7:df:5e:ec:06:6b:6b:
         f5:d0:27:8e:b6:74:8f:61:e0:4c:6b:5d:9c:0c:c5:22:92:45:
         1d:32:03:3e:e5:a6:53:da:e8:de:fa:a7:f7:e9:a7:94:cc:35:
         f7:ae:f7:60:bb:02:05:00:f8:04:c7:e6:7c:08:4c:b9:60:c4:
         8a:0b:7e:4a:3a:8e:a2:aa:d2:0b:9c:1e:2c:57:d5:a4:58:60:
         07:f2:ce:5b:90:ff:a5:80:72:49:94:d6:09:e3:b3:0b:a4:11:
         59:cb:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----