Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39372e302f32342d3234203d3e20323131383330.roa
File:                     3139332e34322e39372e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier:          rTe0plveSNWiIlVjFQC4oYlVGr5tqsIDYI3m+a+29HA=
Subject key identifier:   9B:75:C0:7F:20:44:6E:16:F6:11:BD:D1:10:9C:39:E0:7E:19:20:51
Certificate issuer:       /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial:       548E1152E323932FB1978DAF4F29BACF78CBD8B2
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39372e302f32342d3234203d3e20323131383330.roa
Signing time:             Mon 27 Mar 2023 08:28:17 +0000
ROA not before:           Mon 27 Mar 2023 08:23:17 +0000
ROA not after:            Mon 25 Mar 2024 08:28:17 +0000
asID:                     211830
IP address blocks:        193.42.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8e:11:52:e3:23:93:2f:b1:97:8d:af:4f:29:ba:cf:78:cb:d8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
        Validity
            Not Before: Mar 27 08:23:17 2023 GMT
            Not After : Mar 25 08:28:17 2024 GMT
        Subject: CN=9B75C07F20446E16F611BDD1109C39E07E192051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:c0:f0:1a:ff:3a:c6:f2:70:11:af:c0:e3:
                    3a:d9:39:bf:50:32:67:f9:a9:56:3f:9e:ee:1b:b8:
                    bb:a5:3a:cf:ab:15:25:37:a7:60:fb:d8:8f:81:25:
                    22:0e:ce:e7:61:d4:40:18:ae:94:ca:36:4e:c3:58:
                    44:b9:cf:3a:39:5c:4c:5f:28:06:67:d6:71:d7:a5:
                    79:d9:18:37:6b:aa:1a:5d:a0:79:99:5c:50:8d:c3:
                    ba:9d:b5:8f:3f:34:62:0f:65:99:85:00:b1:53:b7:
                    4e:c5:2f:72:b1:ba:55:f8:6a:97:dc:f6:03:72:e5:
                    cf:c8:2b:14:8e:aa:04:eb:e6:d0:9c:ff:b6:7e:96:
                    c2:fc:6f:83:3a:3a:fd:53:8c:f3:06:f6:77:20:52:
                    ae:11:7d:9a:ad:69:ea:aa:3d:ae:eb:c2:bb:e8:e1:
                    9d:f3:0f:75:2f:5d:b1:95:91:80:fe:0e:b2:fc:2a:
                    1f:77:45:ae:0f:27:fe:fa:71:99:58:0f:f7:d4:0f:
                    56:85:25:3c:de:77:73:1d:1d:78:1b:88:eb:66:d5:
                    8f:0f:a4:03:f8:af:19:5e:67:14:27:2b:21:2c:fd:
                    1a:f1:db:64:3f:98:92:39:39:a8:26:12:0a:9e:a9:
                    e7:92:0f:f2:06:83:9e:91:77:f4:56:66:dd:4e:c1:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:75:C0:7F:20:44:6E:16:F6:11:BD:D1:10:9C:39:E0:7E:19:20:51
            X509v3 Authority Key Identifier:
                keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39372e302f32342d3234203d3e20323131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:8c:a9:fe:c5:91:48:22:c8:82:93:da:e8:11:8e:22:1c:40:
         02:97:ed:bf:d1:b4:36:0b:07:8f:5f:ee:fe:a4:f1:87:40:0b:
         b1:00:2c:54:0c:21:45:f6:bd:e8:92:5e:87:25:40:f6:c1:f5:
         92:d9:0d:4d:77:8c:22:34:e9:7b:1f:41:82:e0:0e:de:3a:fd:
         17:a3:56:8e:16:f2:d0:ec:fa:17:82:fb:af:b5:01:9f:38:5a:
         fe:23:e3:8b:be:60:02:48:68:11:71:84:c7:18:8f:69:62:69:
         76:09:25:4c:43:72:09:9a:70:32:1f:d6:93:8a:1f:fc:1d:74:
         aa:84:c5:86:64:77:d5:99:57:ed:9f:e7:75:fa:25:62:d5:a1:
         db:c8:d4:10:25:fb:8d:88:d0:5a:1d:5c:ed:f3:13:9a:5b:30:
         65:b2:88:7a:59:c5:a4:2c:74:e5:af:d5:ee:43:c8:3b:3e:9d:
         17:e7:e6:5e:04:af:fb:70:54:49:93:06:af:25:61:a1:26:12:
         91:3b:52:63:cb:fd:1b:e0:1e:d3:e8:78:fa:2c:6f:23:15:b0:
         bf:67:d4:82:4c:18:42:3b:5f:df:a8:55:cf:69:8e:48:a6:fa:
         5b:29:32:33:cb:89:1e:f2:46:d3:5f:59:83:b6:3c:62:92:5b:
         c9:97:ca:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----