Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e312e302f32342d3234203d3e2030.roa
File:                     3138352e3136392e312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          U8+1lf8UIOhCkoxeLXLtFHFwMhas+rRHoXrvOYnBKTY=
Subject key identifier:   AE:5C:9F:67:27:A3:C2:B6:1F:5C:54:56:2F:B2:97:A3:E5:17:76:9D
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       4EB2F717E69B1CBCE6EEEEDB8D08101163A5D5F6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e312e302f32342d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:27:37 +0000
ROA not before:           Mon 27 Mar 2023 08:22:37 +0000
ROA not after:            Mon 25 Mar 2024 08:27:37 +0000
asID:                     0
IP address blocks:        185.169.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b2:f7:17:e6:9b:1c:bc:e6:ee:ee:db:8d:08:10:11:63:a5:d5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Mar 27 08:22:37 2023 GMT
            Not After : Mar 25 08:27:37 2024 GMT
        Subject: CN=AE5C9F6727A3C2B61F5C54562FB297A3E517769D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:1e:b0:c5:0d:82:3d:fc:56:ec:23:3f:85:
                    ce:02:9f:3a:b6:be:22:c1:6e:0f:1b:02:9c:2a:79:
                    bc:16:f5:d4:28:9a:2b:e5:f2:12:01:8e:fa:a1:6f:
                    50:6b:af:17:fb:f5:7e:98:ed:48:9b:44:3f:8a:11:
                    98:4c:fb:34:c4:30:ce:2f:d5:37:c2:23:2c:b0:c8:
                    06:bb:e0:91:a2:45:d8:17:4e:f6:c2:8e:ce:f1:08:
                    7b:17:b8:08:f1:ad:e4:5f:a6:73:71:dc:4b:6f:ea:
                    e8:a7:dd:a5:3a:95:13:d9:7c:d4:04:71:94:f0:4e:
                    20:70:63:85:33:fa:ac:f8:01:44:43:b8:89:e4:10:
                    81:ac:27:44:ce:e3:e7:d0:df:2f:8f:85:9a:fe:3f:
                    08:31:d5:28:6a:01:a5:43:ad:28:f4:ac:3d:2f:9c:
                    6c:3b:63:29:f5:d2:47:17:82:b9:3d:d8:51:bc:ce:
                    01:01:9e:de:05:cd:ce:67:6f:9f:23:35:1e:49:70:
                    c4:52:91:85:c2:93:7d:dc:29:3a:54:cd:92:4e:3b:
                    fb:fc:0c:75:f1:34:5b:8d:0a:62:be:3c:09:89:89:
                    0f:9d:62:3a:bc:77:4d:3d:2d:d8:a1:8a:3a:84:34:
                    44:21:c3:78:20:cf:03:12:17:b4:76:dc:6b:49:ea:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5C:9F:67:27:A3:C2:B6:1F:5C:54:56:2F:B2:97:A3:E5:17:76:9D
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e312e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:69:02:c6:bb:f3:c2:0f:d4:fd:f3:a9:19:c3:01:1a:5f:4c:
         4d:4f:32:74:31:b7:d8:4f:db:73:78:e5:3e:74:17:63:92:cd:
         02:d9:c8:47:77:2a:af:09:dc:17:b5:46:6a:50:30:7b:52:6f:
         dd:ab:c2:0b:b2:60:94:ed:5e:96:96:10:3f:af:fb:bd:e7:05:
         8a:5b:ca:95:9f:47:01:03:db:8c:a0:57:be:d9:04:ad:4f:2c:
         de:54:a5:f0:bf:a1:16:25:68:75:da:a5:ae:91:c5:32:e7:5b:
         95:4f:2c:9d:4b:e6:72:22:02:eb:09:b0:21:ce:11:e7:ae:8f:
         2d:a9:5d:fb:1f:4f:67:15:98:36:eb:8f:43:3c:74:54:72:37:
         b3:31:d5:3c:d5:af:7e:9e:75:da:12:a1:41:96:5f:ea:a7:36:
         5f:36:a1:aa:b9:bc:d8:99:73:4f:e3:7b:82:fe:9f:63:84:62:
         fd:fd:4f:5f:98:ec:95:9e:6b:8e:2a:2a:12:83:68:33:39:df:
         ed:2b:c0:df:2b:b3:fc:b4:53:3a:d2:f9:72:fd:5e:f5:46:b4:
         99:0c:78:28:1d:36:a5:aa:7b:b3:9d:81:81:f2:05:22:f2:41:
         b1:90:2c:1c:75:32:26:80:59:53:84:68:96:7c:7a:ac:4a:e3:
         be:9e:a2:52
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUTrL3F+abHLzm7u7bjQgQEWOl1fYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yMzAzMjcwODIyMzdaFw0yNDAzMjUwODI3MzdaMDMxMTAvBgNV
BAMTKEFFNUM5RjY3MjdBM0MyQjYxRjVDNTQ1NjJGQjI5N0EzRTUxNzc2OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnB6wxQ2CPfxW7CM/hc4Cnzq2
viLBbg8bApwqebwW9dQomivl8hIBjvqhb1Brrxf79X6Y7UibRD+KEZhM+zTEMM4v
1TfCIyywyAa74JGiRdgXTvbCjs7xCHsXuAjxreRfpnNx3Etv6uin3aU6lRPZfNQE
cZTwTiBwY4Uz+qz4AURDuInkEIGsJ0TO4+fQ3y+PhZr+Pwgx1ShqAaVDrSj0rD0v
nGw7Yyn10kcXgrk92FG8zgEBnt4Fzc5nb58jNR5JcMRSkYXCk33cKTpUzZJOO/v8
DHXxNFuNCmK+PAmJiQ+dYjq8d009LdihijqENEQhw3ggzwMSF7R23GtJ6h69AgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUrlyfZyejwrYfXFRWL7KXo+UXdp0wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzYz
OTJlMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmpATAN
BgkqhkiG9w0BAQsFAAOCAQEAPGkCxrvzwg/U/fOpGcMBGl9MTU8ydDG32E/bc3jl
PnQXY5LNAtnIR3cqrwncF7VGalAwe1Jv3avCC7JglO1elpYQP6/7vecFilvKlZ9H
AQPbjKBXvtkErU8s3lSl8L+hFiVoddqlrpHFMudblU8snUvmciIC6wmwIc4R566P
Lald+x9PZxWYNuuPQzx0VHI3szHVPNWvfp512hKhQZZf6qc2Xzahqrm82JlzT+N7
gv6fY4Ri/f1PX5jslZ5rjioqEoNoMznf7SvA3yuz/LRTOtL5cv1e9Ua0mQx4KB02
pap7s52BgfIFIvJBsZAsHHUyJoBZU4Rolnx6rErjvp6iUg==
-----END CERTIFICATE-----