Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e203537303433.roa
File:                     37372e38312e3133382e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier:          ltJ1z8hB9A/7LMWgUzP0lSVYRNwFrC01UTXD+YAp3lQ=
Subject key identifier:   67:38:74:FC:D9:02:E7:51:FD:F8:BC:A3:02:8D:23:50:C6:2F:58:23
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       57114834B73B9A17557043FFFFE48397D20D0A92
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e203537303433.roa
Signing time:             Wed 20 Sep 2023 06:41:50 +0000
ROA not before:           Wed 20 Sep 2023 06:36:50 +0000
ROA not after:            Wed 18 Sep 2024 06:41:50 +0000
asID:                     57043
IP address blocks:        77.81.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:11:48:34:b7:3b:9a:17:55:70:43:ff:ff:e4:83:97:d2:0d:0a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Sep 20 06:36:50 2023 GMT
            Not After : Sep 18 06:41:50 2024 GMT
        Subject: CN=673874FCD902E751FDF8BCA3028D2350C62F5823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:4b:8b:c9:9b:83:11:10:b6:ba:af:b4:3f:
                    e1:2c:d1:21:83:47:c2:5c:e8:7c:56:af:e2:b2:6c:
                    21:3d:5e:60:fb:dc:c8:4f:cf:3b:7c:c4:fd:71:71:
                    3c:d0:df:2f:7c:f7:e7:b3:29:3e:e0:8f:16:24:3b:
                    29:63:74:43:23:d5:cb:a0:d1:5c:dd:a4:28:3b:15:
                    0d:75:5f:7b:c0:f4:db:03:a3:18:87:8f:ac:9f:2f:
                    c6:9b:ff:b7:94:31:e7:ed:ad:97:24:d6:e6:62:d2:
                    86:0f:96:1f:7d:97:84:16:29:1d:76:b3:2f:18:e3:
                    ff:e8:cb:c9:b9:05:b1:b7:e3:48:c2:e0:59:7b:73:
                    a5:1b:cf:bd:0a:1e:c8:8a:40:cb:e8:ec:6d:0c:43:
                    37:5e:d5:c5:7f:17:68:5f:cb:d1:8c:25:85:03:a2:
                    1a:cf:2a:d7:3f:31:2e:fc:94:b9:e9:c1:27:06:fe:
                    2b:f8:ad:2d:72:45:57:f0:73:82:72:8f:71:32:8b:
                    6e:82:ed:77:e7:7f:a9:26:3d:41:27:a2:5c:ea:9a:
                    05:85:ac:51:e9:75:cd:cb:12:5b:30:0e:34:91:91:
                    a4:5d:6e:6c:1d:cc:b6:5e:85:e0:b0:a2:89:70:03:
                    ea:50:8b:d3:d8:f6:71:e5:7b:57:9a:73:e9:cd:85:
                    8d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:38:74:FC:D9:02:E7:51:FD:F8:BC:A3:02:8D:23:50:C6:2F:58:23
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e203537303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:53:48:e4:51:7d:92:f0:ae:c1:bf:dd:dc:fa:dc:44:9b:5e:
         58:58:21:ea:34:26:88:cd:c1:e3:6f:d9:c6:37:e0:ed:52:42:
         4e:64:dd:10:23:47:0c:a3:2b:a5:36:8e:38:7a:5b:9a:73:62:
         cb:4e:11:91:57:9b:12:79:d4:33:f1:35:30:35:a2:e4:e8:dc:
         1a:8f:3f:fe:1c:5f:42:76:77:4c:08:6b:5b:c4:a4:22:73:4a:
         40:1f:9a:1d:79:e0:cb:0d:22:c6:92:53:1d:43:40:87:74:3f:
         b6:ba:28:dc:17:66:cc:f0:69:b7:36:8d:1b:4b:2e:17:b8:05:
         74:0a:af:e8:34:bb:11:bc:71:5f:73:aa:52:f1:05:a2:d9:14:
         de:ba:8e:84:7d:ee:bf:b3:59:17:1d:cf:67:2c:ec:2b:fe:e4:
         cf:ee:d7:61:69:a6:5f:d3:0c:1c:7c:c2:9d:be:ce:2c:9e:a1:
         92:56:67:d0:9e:7f:a2:0e:c8:8f:8f:8f:79:12:0d:ff:7e:35:
         cd:7b:fb:a3:55:8a:43:2f:7c:44:af:ae:11:bc:bf:6a:4f:34:
         d6:f3:49:a8:c8:f8:d2:39:f2:24:ad:15:72:f1:9a:0f:1e:bb:
         01:15:14:14:32:04:ce:d0:5f:84:e7:6e:92:e8:86:3d:64:3c:
         c9:0f:d2:45
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 2 16:44:12 2023 by rpki-client on console-ams.rpki-client.org