Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3132392e33352e302f32342d3234203d3e2030.roa
File:                     34352e3132392e33352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          HfRSlYfPg2wdRv83NUDkK7SXBl/VRXrcvGhrtMfWV7k=
Subject key identifier:   B8:9E:59:C6:FF:AD:26:3D:09:CA:56:7A:50:F5:5B:18:66:F6:B1:8D
Certificate issuer:       /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial:       2600FDDA4D8A615A779C24BA4892129A9F60A8AF
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3132392e33352e302f32342d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:28:10 +0000
ROA not before:           Mon 27 Mar 2023 08:23:10 +0000
ROA not after:            Mon 25 Mar 2024 08:28:10 +0000
asID:                     0
IP address blocks:        45.129.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:00:fd:da:4d:8a:61:5a:77:9c:24:ba:48:92:12:9a:9f:60:a8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
        Validity
            Not Before: Mar 27 08:23:10 2023 GMT
            Not After : Mar 25 08:28:10 2024 GMT
        Subject: CN=B89E59C6FFAD263D09CA567A50F55B1866F6B18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:72:a5:ba:45:79:50:26:28:32:19:fb:d7:
                    4d:97:a2:0c:3d:71:69:24:6d:5e:f4:75:c5:a4:df:
                    53:f0:03:b1:65:69:97:4b:c1:34:17:39:6b:01:c3:
                    2f:22:01:22:94:48:73:93:15:13:e9:a5:68:dd:3c:
                    5b:d5:f1:ab:78:00:a8:27:fa:13:fa:d5:62:a6:41:
                    d2:a4:2d:fc:ae:ab:7d:74:fa:4d:ae:de:b5:f1:03:
                    a2:26:dd:9b:93:ab:6b:39:3e:b0:6a:d7:2b:6e:66:
                    aa:31:39:29:fe:07:d5:1d:21:8a:36:a7:bb:44:40:
                    be:02:d4:1d:8c:3a:e6:fe:37:27:0f:68:f1:db:8e:
                    51:d8:b5:49:59:73:63:1f:2e:c5:28:f9:2f:0b:96:
                    80:3e:8c:c3:41:4c:3d:eb:d1:c5:97:20:59:d1:71:
                    04:5b:e2:e7:56:bb:29:10:8c:11:7c:f5:1e:11:59:
                    63:71:fd:6e:88:51:36:6d:8d:86:22:5e:74:b9:d0:
                    2e:da:61:08:d8:3f:b9:03:18:f6:3d:d6:30:eb:de:
                    43:aa:84:bc:b4:f2:1f:12:43:80:27:f2:2d:18:83:
                    f1:9d:2d:f6:28:f3:3f:7e:e5:f8:a5:c1:4a:b1:f8:
                    b7:e5:59:0f:83:2c:30:81:8d:e0:69:6a:28:e7:86:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9E:59:C6:FF:AD:26:3D:09:CA:56:7A:50:F5:5B:18:66:F6:B1:8D
            X509v3 Authority Key Identifier:
                keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3132392e33352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d3:52:dc:74:83:97:7c:8a:65:fc:db:dc:bd:32:cf:11:02:
         bb:0c:4f:6a:6c:5c:bb:72:00:84:86:08:8f:1b:e7:ab:90:4f:
         a2:49:35:39:88:56:d0:ae:7b:a1:46:49:69:f7:d2:53:e1:50:
         b3:22:ea:cd:f3:01:07:a1:95:87:65:bb:f0:d7:d1:78:d0:f9:
         9b:31:a5:20:ed:9e:82:99:16:57:10:14:66:50:d9:22:07:83:
         6a:63:02:eb:43:7a:8b:e2:55:44:7f:22:a0:99:59:20:8a:cc:
         a6:45:82:84:b3:e9:95:f5:29:02:d6:98:60:68:b3:b3:cb:b4:
         84:97:3d:47:4c:b5:5b:ca:d5:7c:ff:4b:84:05:68:68:a2:c2:
         24:08:b5:ae:d9:53:08:56:83:43:07:3c:84:04:1d:6a:42:2d:
         23:28:12:42:d8:e4:76:76:22:86:28:8b:ae:29:fc:5b:25:40:
         95:ba:cc:e8:26:85:11:2f:7f:f6:91:5f:69:fd:88:3f:9a:94:
         87:25:af:5a:c8:5c:c7:76:65:05:2a:f2:79:64:1b:a9:5c:ac:
         67:35:41:b2:39:03:2d:67:e7:5e:b7:07:89:1f:68:b4:79:54:
         09:ea:7b:40:fb:96:92:cc:98:e1:73:39:d6:6c:78:21:e8:85:
         2f:e0:d5:9e
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUJgD92k2KYVp3nCS6SJISmp9gqK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yMzAzMjcwODIzMTBaFw0yNDAzMjUwODI4MTBaMDMxMTAvBgNV
BAMTKEI4OUU1OUM2RkZBRDI2M0QwOUNBNTY3QTUwRjU1QjE4NjZGNkIxOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmXKlukV5UCYoMhn7102Xogw9
cWkkbV70dcWk31PwA7FlaZdLwTQXOWsBwy8iASKUSHOTFRPppWjdPFvV8at4AKgn
+hP61WKmQdKkLfyuq310+k2u3rXxA6Im3ZuTq2s5PrBq1ytuZqoxOSn+B9UdIYo2
p7tEQL4C1B2MOub+NycPaPHbjlHYtUlZc2MfLsUo+S8LloA+jMNBTD3r0cWXIFnR
cQRb4udWuykQjBF89R4RWWNx/W6IUTZtjYYiXnS50C7aYQjYP7kDGPY91jDr3kOq
hLy08h8SQ4An8i0Yg/GdLfYo8z9+5filwUqx+LflWQ+DLDCBjeBpaijnhp4rAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUuJ5Zxv+tJj0JylZ6UPVbGGb2sY0wHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzQzNTJlMzEzMjM5MmUzMzM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtgSMwDQYJKoZI
hvcNAQELBQADggEBAE/TUtx0g5d8imX829y9Ms8RArsMT2psXLtyAISGCI8b56uQ
T6JJNTmIVtCue6FGSWn30lPhULMi6s3zAQehlYdlu/DX0XjQ+ZsxpSDtnoKZFlcQ
FGZQ2SIHg2pjAutDeoviVUR/IqCZWSCKzKZFgoSz6ZX1KQLWmGBos7PLtISXPUdM
tVvK1Xz/S4QFaGiiwiQIta7ZUwhWg0MHPIQEHWpCLSMoEkLY5HZ2IoYoi64p/Fsl
QJW6zOgmhREvf/aRX2n9iD+alIclr1rIXMd2ZQUq8nlkG6lcrGc1QbI5Ay1n5163
B4kfaLR5VAnqe0D7lpLMmOFzOdZseCHohS/g1Z4=
-----END CERTIFICATE-----