Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33352e31352e302f32342d3234203d3e2030.roa
File:                     3139342e33352e31352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          DdEYarYchAqrSM+/tpj15+SLx2jhHt53i941Pco3LaQ=
Subject key identifier:   89:BB:82:6B:DB:2D:0E:D3:E9:56:A2:98:23:E2:72:FF:F2:93:1F:F3
Certificate issuer:       /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial:       71473475D133B87A9043B65CBA5CB4EF6947ADBD
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33352e31352e302f32342d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:28:04 +0000
ROA not before:           Mon 27 Mar 2023 08:23:04 +0000
ROA not after:            Mon 25 Mar 2024 08:28:04 +0000
asID:                     0
IP address blocks:        194.35.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:47:34:75:d1:33:b8:7a:90:43:b6:5c:ba:5c:b4:ef:69:47:ad:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
        Validity
            Not Before: Mar 27 08:23:04 2023 GMT
            Not After : Mar 25 08:28:04 2024 GMT
        Subject: CN=89BB826BDB2D0ED3E956A29823E272FFF2931FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:a3:db:5b:e6:3d:71:ea:fe:6f:8d:7f:ee:
                    c6:94:26:a3:fc:ee:74:b1:7a:ab:ac:ce:84:1e:5a:
                    28:dc:7b:23:dd:f1:bc:4a:53:31:2b:5b:6a:f7:f9:
                    70:01:96:cf:c3:fa:ca:a5:4a:81:f7:1d:54:ee:f7:
                    b1:86:95:83:3c:38:03:93:e5:42:67:7e:79:70:14:
                    29:87:4a:1a:6a:47:34:75:2f:b3:87:16:d6:0c:4d:
                    d7:3b:81:8f:0d:fc:c8:90:dc:c2:d6:b5:fd:f6:50:
                    f6:da:97:13:1f:9e:8c:0b:7d:e8:1e:fa:cc:dd:4b:
                    81:94:e9:1c:a1:b0:07:89:ae:00:d0:74:54:33:dd:
                    01:2c:57:19:2e:9b:82:dc:e0:d8:d7:63:f4:95:58:
                    9f:9b:bc:fc:97:32:e2:a7:d6:a0:36:97:f4:7d:0f:
                    fd:ea:e7:c4:04:c4:16:60:da:4f:1b:73:0e:fe:a6:
                    1f:13:f5:ff:17:84:1a:28:d6:08:3c:cc:a9:ca:a1:
                    66:2f:0a:c9:6b:2b:28:3f:36:3f:b2:ec:aa:5e:ca:
                    f1:73:83:e1:0a:29:d6:d8:52:04:90:7d:48:72:e1:
                    ba:27:6f:b2:c8:2d:04:eb:bd:8a:91:e3:6f:d3:9c:
                    67:f8:b9:3f:3e:b3:ef:30:15:f7:61:30:fa:84:e2:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BB:82:6B:DB:2D:0E:D3:E9:56:A2:98:23:E2:72:FF:F2:93:1F:F3
            X509v3 Authority Key Identifier:
                keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33352e31352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.35.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:43:c4:34:75:4f:a0:de:71:01:df:a5:d0:16:a4:cf:b4:3d:
         ee:cd:dc:ca:de:70:95:8b:72:e2:af:c8:1d:63:24:f6:96:3f:
         48:83:2b:9e:bf:25:aa:15:ae:dd:3b:ad:b5:09:33:bc:31:56:
         45:f9:22:99:9c:93:64:d3:b5:ea:cb:62:5c:67:12:18:a2:06:
         f0:4b:25:8d:16:d5:bc:78:30:dd:19:0c:93:6c:1a:64:41:13:
         e1:3a:54:f4:71:b9:8d:06:9f:34:40:d9:35:8e:b0:77:06:65:
         f1:0b:ed:7e:b1:89:cf:0e:0f:6a:87:43:55:14:d9:4e:1b:35:
         ba:12:96:35:3b:6f:78:78:2a:1a:3e:50:ed:38:88:8b:b4:4e:
         5a:d5:db:e4:ff:83:54:f5:1d:29:a3:83:77:0e:dc:4d:bc:9d:
         ee:3e:58:3c:86:62:cc:23:85:10:47:b3:c4:8f:01:1f:2b:52:
         41:67:d2:f4:b9:40:75:26:95:56:cc:d8:6e:b8:e1:36:9b:58:
         8b:5b:3b:d4:52:7a:71:83:23:57:6f:75:e2:65:26:91:13:c1:
         0c:68:ac:f2:81:36:9c:ef:44:c3:fd:41:99:08:bd:62:c7:aa:
         c4:15:4c:27:64:87:df:2d:72:4d:ae:e7:2b:d2:3a:1d:3e:d2:
         a9:1d:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----