Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33352e31342e302f32342d3234203d3e2030.roa
File:                     3139342e33352e31342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          jgi+BDYwCtlkYnorNJDXwuckWU+tJvaHHz2c/J3RNs8=
Subject key identifier:   A7:EB:A6:40:E0:CB:DD:53:DC:CB:93:32:01:2A:6E:06:D1:1D:75:C3
Certificate issuer:       /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial:       576FFA4433BC6DCBC3EB533AA0DCC99D081F7428
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33352e31342e302f32342d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:28:08 +0000
ROA not before:           Mon 27 Mar 2023 08:23:08 +0000
ROA not after:            Mon 25 Mar 2024 08:28:08 +0000
asID:                     0
IP address blocks:        194.35.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6f:fa:44:33:bc:6d:cb:c3:eb:53:3a:a0:dc:c9:9d:08:1f:74:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
        Validity
            Not Before: Mar 27 08:23:08 2023 GMT
            Not After : Mar 25 08:28:08 2024 GMT
        Subject: CN=A7EBA640E0CBDD53DCCB9332012A6E06D11D75C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:6d:42:be:25:bf:13:89:e5:29:c1:58:a4:
                    a9:82:33:b1:6f:bf:82:87:ea:ac:c9:15:79:37:cf:
                    f2:95:d9:3d:89:c6:d1:81:a6:21:aa:0d:92:1e:82:
                    0a:e5:fb:27:0d:b6:1d:27:74:48:6e:6b:7b:b4:25:
                    a2:e2:ba:79:a4:9a:3c:96:26:3a:3f:9e:df:90:f1:
                    f2:60:85:94:54:08:ce:1b:e3:34:3f:d8:33:ec:e2:
                    51:2d:99:40:a5:42:42:9e:6b:19:34:bb:ef:e6:bd:
                    5a:b9:5d:92:83:5d:86:62:20:f3:17:12:0e:b7:a1:
                    48:5c:02:47:76:f3:fb:4d:a9:97:23:aa:ce:53:03:
                    2b:42:ef:db:bb:55:a2:5f:b5:9f:fd:6e:82:cf:a5:
                    a3:ab:29:a7:b3:d6:6e:cd:64:3c:38:df:58:c3:4f:
                    0e:0e:a9:f3:d0:d8:2c:97:38:46:b3:45:1b:3d:92:
                    62:80:2f:b5:97:90:09:10:02:da:63:54:36:a6:b6:
                    af:9b:c1:f2:ae:12:ec:da:20:06:db:b5:d4:b9:1e:
                    72:01:93:bb:17:3e:d3:4b:56:73:7b:41:6c:fe:bc:
                    17:59:1b:04:af:03:54:9f:49:aa:1c:a1:cf:1e:ce:
                    a6:ac:8a:e0:f7:5a:83:9f:01:d2:17:f1:e4:aa:62:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EB:A6:40:E0:CB:DD:53:DC:CB:93:32:01:2A:6E:06:D1:1D:75:C3
            X509v3 Authority Key Identifier:
                keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33352e31342e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.35.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:3f:da:3b:44:c3:27:d8:11:6c:e9:23:87:f7:ca:68:0a:45:
         b1:b9:c7:a6:e4:73:e8:2a:a1:b0:b2:1d:d8:13:47:40:b1:62:
         78:14:de:8e:36:da:87:ec:2b:9b:68:ab:cd:4c:9f:bf:12:92:
         b5:af:9c:5f:56:e5:f3:bd:3f:76:96:22:10:e0:3b:f1:cd:7a:
         af:32:d6:6f:cc:7e:58:18:97:94:34:ba:b1:ab:03:26:c7:85:
         14:d1:63:66:07:ee:83:6d:d9:96:98:e9:ad:94:68:8b:8b:0e:
         d2:86:59:40:7d:2d:1c:d3:2d:5c:7e:c6:a6:bb:9d:42:64:4b:
         b2:7b:ad:f1:7d:73:9e:8a:f0:8e:6f:cc:d0:48:8e:35:ed:4f:
         64:80:0c:fa:88:bf:95:74:26:6f:48:eb:88:86:05:9b:92:ee:
         23:04:a4:ec:c2:d1:90:ee:1d:66:5d:43:04:4e:d5:ce:8f:91:
         50:b5:2e:fe:82:1c:a0:64:ba:42:d3:3d:d3:af:8b:30:46:c8:
         bd:7d:b9:8d:a9:8d:de:33:b9:fc:d6:38:f9:97:b5:41:1f:07:
         c1:4f:c0:83:7d:22:98:27:ad:d6:d1:17:3e:88:bc:7f:e3:72:
         e9:59:da:ab:2f:1a:db:fd:43:30:37:ec:b9:78:97:a6:ef:1a:
         af:da:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----