Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3235302e3231352e302f32342d3234203d3e2030.roa
File:                     3138352e3235302e3231352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          gKo+WW1bDuptmkqHrGE+zjngkuSD4cGccjdGkE75Znc=
Subject key identifier:   78:C8:2D:C4:7E:F8:D4:AD:80:B3:6B:70:86:A2:12:49:77:C7:F9:90
Certificate issuer:       /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial:       15DF84901BA18AD84706C2B40C0BA1B48FA39714
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3235302e3231352e302f32342d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:28:10 +0000
ROA not before:           Mon 27 Mar 2023 08:23:10 +0000
ROA not after:            Mon 25 Mar 2024 08:28:10 +0000
asID:                     0
IP address blocks:        185.250.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:df:84:90:1b:a1:8a:d8:47:06:c2:b4:0c:0b:a1:b4:8f:a3:97:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
        Validity
            Not Before: Mar 27 08:23:10 2023 GMT
            Not After : Mar 25 08:28:10 2024 GMT
        Subject: CN=78C82DC47EF8D4AD80B36B7086A2124977C7F990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:96:04:86:de:eb:69:39:75:59:4d:24:21:b7:
                    dd:7f:ee:82:87:da:cc:13:d3:64:7a:fc:96:bc:aa:
                    6a:05:da:aa:04:d7:0b:10:01:fc:61:11:2e:a4:8a:
                    f0:47:6f:b9:a0:a6:06:57:54:ec:6b:eb:eb:7a:30:
                    a8:cc:ea:7b:60:6c:ab:f4:d0:2b:7b:27:d8:95:3d:
                    2a:94:44:3d:15:5b:ef:53:a7:a1:04:57:00:ab:75:
                    1d:b8:68:27:03:1f:d7:4e:57:36:da:c3:b7:b5:48:
                    23:07:b0:c8:be:f8:f3:1a:16:16:68:1e:aa:01:52:
                    88:7e:86:3a:e2:f8:6c:cb:40:32:f2:ab:26:99:99:
                    94:1a:bd:87:be:b1:56:0f:db:6a:db:2a:fc:fa:76:
                    53:d1:09:ce:14:57:f6:f2:fb:97:a5:bf:64:70:03:
                    09:dd:8d:32:b1:5d:1e:88:b1:1c:91:da:c3:77:74:
                    d0:cc:46:6b:d7:a9:5b:60:85:7a:1e:30:05:64:6b:
                    93:74:ac:87:59:14:f1:97:d7:53:3e:23:e5:13:d8:
                    f4:0a:9c:f8:9e:f7:dc:05:38:7f:1b:1e:25:d8:81:
                    fd:4c:72:74:9a:2f:a0:69:ba:9f:61:00:4c:19:53:
                    5e:c2:e5:82:56:c3:63:be:4a:71:8a:e6:62:9e:75:
                    2e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C8:2D:C4:7E:F8:D4:AD:80:B3:6B:70:86:A2:12:49:77:C7:F9:90
            X509v3 Authority Key Identifier:
                keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3235302e3231352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:78:15:59:41:44:e9:2f:7d:05:ea:f6:4e:63:60:28:a1:63:
         4b:13:f4:9d:42:c1:8d:b8:fc:5d:8e:09:cb:f1:49:d9:c2:1e:
         81:f5:4a:5e:85:8c:36:53:0b:c3:ec:9f:18:14:87:dd:0e:2a:
         5f:fe:9c:66:1f:22:46:6e:97:db:0d:03:2b:e5:63:07:a1:7f:
         93:17:16:7d:e3:3c:b1:3c:a4:91:b1:33:07:b5:25:45:81:16:
         36:fe:6f:fc:a6:45:65:84:33:c2:d2:0a:fe:c6:19:2e:76:63:
         b4:00:1f:17:3d:5b:aa:74:6f:4c:51:1a:5f:45:a7:aa:07:84:
         81:e2:dd:14:16:7c:6a:99:1b:81:29:9c:80:f1:f6:73:74:75:
         d2:d6:81:47:b7:eb:27:3f:12:68:e7:83:8d:e1:a0:0d:ec:88:
         74:fc:08:19:06:ea:6d:b3:bd:c8:81:1a:08:7c:d4:d8:0b:9f:
         7a:4a:55:12:45:49:24:64:62:9d:cc:f6:04:a4:4c:8d:b8:e4:
         2a:7d:59:61:55:d8:d0:2d:4c:9e:9c:ba:a1:8a:87:66:5b:65:
         fc:bd:78:b8:72:25:db:ed:c9:13:df:e5:13:a1:b4:c4:44:08:
         b9:e3:64:df:08:2d:9d:2f:7a:c8:de:bb:2a:46:c2:2a:1b:34:
         77:51:c2:d5
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUFd+EkBuhithHBsK0DAuhtI+jlxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yMzAzMjcwODIzMTBaFw0yNDAzMjUwODI4MTBaMDMxMTAvBgNV
BAMTKDc4QzgyREM0N0VGOEQ0QUQ4MEIzNkI3MDg2QTIxMjQ5NzdDN0Y5OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCelgSG3utpOXVZTSQht91/7oKH
2swT02R6/Ja8qmoF2qoE1wsQAfxhES6kivBHb7mgpgZXVOxr6+t6MKjM6ntgbKv0
0Ct7J9iVPSqURD0VW+9Tp6EEVwCrdR24aCcDH9dOVzbaw7e1SCMHsMi++PMaFhZo
HqoBUoh+hjri+GzLQDLyqyaZmZQavYe+sVYP22rbKvz6dlPRCc4UV/by+5elv2Rw
AwndjTKxXR6IsRyR2sN3dNDMRmvXqVtghXoeMAVka5N0rIdZFPGX11M+I+UT2PQK
nPie99wFOH8bHiXYgf1McnSaL6Bpup9hAEwZU17C5YJWw2O+SnGK5mKedS6LAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUeMgtxH741K2As2twhqISSXfH+ZAwHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzEzODM1MmUzMjM1MzAyZTMy
MzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufrXMA0G
CSqGSIb3DQEBCwUAA4IBAQA3eBVZQUTpL30F6vZOY2AooWNLE/SdQsGNuPxdjgnL
8UnZwh6B9UpehYw2UwvD7J8YFIfdDipf/pxmHyJGbpfbDQMr5WMHoX+TFxZ94zyx
PKSRsTMHtSVFgRY2/m/8pkVlhDPC0gr+xhkudmO0AB8XPVuqdG9MURpfRaeqB4SB
4t0UFnxqmRuBKZyA8fZzdHXS1oFHt+snPxJo54ON4aAN7Ih0/AgZBupts73IgRoI
fNTYC596SlUSRUkkZGKdzPYEpEyNuOQqfVlhVdjQLUyenLqhiodmW2X8vXi4ciXb
7ckT3+UTobTERAi542TfCC2dL3rI3rsqRsIqGzR3UcLV
-----END CERTIFICATE-----