Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3138372e3133302e302f32342d3234203d3e203432333636.roa
File:                     3139332e3138372e3133302e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier:          NIEK0bG0VkPgRSSutxaovoNUnsCgueuAvZm/yULV91g=
Subject key identifier:   9C:E6:8A:43:D5:36:B4:32:A7:38:9C:04:CD:A0:6C:39:92:FE:44:1E
Certificate issuer:       /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial:       2B4E2E10724F60E7959B019F2AC63B05011125C2
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3138372e3133302e302f32342d3234203d3e203432333636.roa
Signing time:             Mon 17 Apr 2023 11:24:01 +0000
ROA not before:           Mon 17 Apr 2023 11:19:01 +0000
ROA not after:            Mon 15 Apr 2024 11:24:01 +0000
asID:                     42366
IP address blocks:        193.187.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4e:2e:10:72:4f:60:e7:95:9b:01:9f:2a:c6:3b:05:01:11:25:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
        Validity
            Not Before: Apr 17 11:19:01 2023 GMT
            Not After : Apr 15 11:24:01 2024 GMT
        Subject: CN=9CE68A43D536B432A7389C04CDA06C3992FE441E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:43:cc:3f:c6:a7:67:2f:a5:de:2e:30:2a:e1:
                    3d:05:7d:42:c9:dd:0e:95:da:94:e8:2d:5f:1d:e4:
                    da:02:a6:10:ab:e7:74:57:bc:3a:9f:53:71:14:82:
                    0f:45:b6:35:ae:c2:68:ca:b5:0b:f5:3f:2e:65:79:
                    ad:d9:eb:d1:a6:98:0a:cf:08:1e:46:9b:da:9e:bc:
                    4f:60:d4:4d:0f:3f:4c:86:f6:31:40:41:ad:e9:ee:
                    69:34:c7:b9:a3:49:eb:9c:ce:af:68:c4:4a:0f:a1:
                    f3:de:5c:41:31:cc:00:c7:0b:07:59:22:6f:4f:9a:
                    00:34:ed:bc:bd:09:d8:f4:84:1f:1e:c1:94:78:17:
                    8d:b4:76:2a:6d:51:e5:86:ce:b4:60:45:01:f1:b6:
                    6b:e8:01:3a:5e:8e:5a:33:7e:66:2f:72:b4:14:da:
                    eb:c3:3f:ae:0b:ce:d0:0d:bd:dc:98:d4:db:60:ed:
                    41:bc:30:7f:4d:06:8b:85:91:ca:82:2d:bd:94:ca:
                    85:b4:44:49:62:ae:4f:01:7e:61:fe:0e:1b:ad:8a:
                    bb:61:04:aa:49:62:00:18:40:1c:ac:0b:5d:77:fd:
                    52:5b:43:4b:be:6a:6d:c9:23:66:de:a3:1a:9a:01:
                    1e:49:11:0d:b6:c8:02:b8:d1:01:18:f4:fb:5c:8b:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E6:8A:43:D5:36:B4:32:A7:38:9C:04:CD:A0:6C:39:92:FE:44:1E
            X509v3 Authority Key Identifier:
                keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3138372e3133302e302f32342d3234203d3e203432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:04:31:de:e8:2b:0c:4c:77:f2:88:09:e9:ae:97:71:2a:0b:
         3a:30:4d:e4:c8:a1:b1:0c:6e:67:dc:7f:37:dc:2c:a3:fa:e9:
         0b:d1:dd:e0:f9:d4:45:61:69:ae:1e:3b:38:6e:8c:6c:38:c5:
         25:ad:ad:a1:d4:4c:8e:5f:4b:1f:23:a3:40:94:a4:cd:3f:70:
         0f:2e:b8:1c:66:6f:e3:f0:73:95:97:ed:03:6b:ee:43:6d:6f:
         0a:a4:db:70:b9:cd:32:01:ff:9d:90:22:5b:4d:9e:e1:32:43:
         c5:fd:6c:86:fe:11:5a:ea:bc:2f:60:d5:d0:b4:8a:4e:5b:ea:
         f4:1b:5e:77:3f:f1:59:01:fa:5d:1e:74:d3:25:78:d5:c2:4f:
         c0:b7:54:b3:9a:19:88:ee:17:a5:e6:91:15:70:83:66:e6:76:
         7f:c9:85:8e:62:ce:4f:b7:36:f9:26:55:25:63:85:26:f4:ea:
         f1:dc:be:2c:79:fa:26:7b:d3:62:9c:06:2e:28:46:e1:62:b0:
         d5:79:bc:af:7e:97:63:00:e9:86:92:95:1c:1a:0b:42:aa:7a:
         e6:46:fe:a9:01:13:68:95:41:53:9e:07:73:c0:cb:f6:7a:24:
         64:74:dc:14:69:d7:a1:35:2b:ce:87:3f:dc:aa:02:7a:e4:a0:
         fd:ea:a9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----