Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133372e3139332e302f32342d3234203d3e203631333137.roa
File:                     34352e3133372e3139332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          jzN3IamEXmOWEV6OfC/UDSZpjzM377SZdjRZpWOCpjQ=
Subject key identifier:   7C:A5:C0:1C:EF:05:CB:56:AA:97:DA:65:3B:AE:A4:AD:21:F5:3A:D1
Certificate issuer:       /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial:       0D4455005CA818CD298FA51E873CC5352D89AE47
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133372e3139332e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 27 Mar 2023 08:28:13 +0000
ROA not before:           Mon 27 Mar 2023 08:23:13 +0000
ROA not after:            Mon 25 Mar 2024 08:28:13 +0000
asID:                     61317
IP address blocks:        45.137.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:44:55:00:5c:a8:18:cd:29:8f:a5:1e:87:3c:c5:35:2d:89:ae:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
        Validity
            Not Before: Mar 27 08:23:13 2023 GMT
            Not After : Mar 25 08:28:13 2024 GMT
        Subject: CN=7CA5C01CEF05CB56AA97DA653BAEA4AD21F53AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:66:00:03:3c:4d:d0:f1:9a:37:64:4b:91:
                    41:8b:23:d9:50:46:79:ff:0f:14:fd:92:43:7e:3b:
                    98:9b:61:ff:fa:e6:75:91:dc:31:8a:c0:40:93:cd:
                    ab:f5:ba:fc:a1:60:e5:ad:08:95:5d:9d:4b:27:bd:
                    22:77:b6:4a:83:66:66:36:51:c7:0b:0e:a7:e8:05:
                    bc:f0:5f:b2:84:4c:d0:a2:5b:54:d6:64:49:75:ee:
                    9a:7b:88:f6:b0:e9:1c:08:9f:54:5d:e6:91:eb:ba:
                    4c:5b:76:3e:86:af:93:7f:8b:72:76:c8:46:44:d6:
                    09:c0:8e:44:fb:4c:ed:a1:90:40:47:80:e7:48:18:
                    fd:b2:22:98:e4:63:58:73:19:d4:8a:8e:c9:3a:c5:
                    23:79:ab:ad:e5:fa:61:e5:c6:aa:6b:0f:dd:49:c4:
                    0f:d6:ca:46:49:7d:1e:4c:c6:b1:c7:be:b8:50:fe:
                    94:cb:fa:e0:90:2e:8e:1c:07:97:b4:6f:e1:31:a7:
                    a5:d6:70:94:d3:b8:09:ca:47:c6:dd:59:22:58:e4:
                    e3:c9:ee:12:69:ee:7b:ad:d2:58:1d:5d:80:26:d8:
                    b7:7b:33:1e:c4:58:5a:de:03:00:85:4d:0c:cc:c0:
                    26:b2:71:5b:1b:55:d4:48:83:51:06:63:71:0b:91:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A5:C0:1C:EF:05:CB:56:AA:97:DA:65:3B:AE:A4:AD:21:F5:3A:D1
            X509v3 Authority Key Identifier:
                keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133372e3139332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:0a:07:ab:95:df:13:5c:51:a3:7f:62:96:82:2e:a3:59:33:
         de:c0:20:81:8a:a4:3c:f8:73:51:db:38:00:70:53:2f:85:84:
         20:a2:9b:ef:45:8d:a1:af:23:b3:96:ac:38:45:6f:f9:75:32:
         1a:ad:de:11:09:86:1c:a8:8b:21:03:d4:2c:a7:af:de:52:62:
         66:7f:59:ff:f6:15:b3:0d:7c:78:4c:fc:28:7b:f4:5a:30:6d:
         ec:f9:c3:63:67:81:92:ad:e8:8f:64:e8:ba:ab:42:f7:a3:ab:
         b7:35:33:27:f6:c6:44:0e:10:98:5a:1f:b3:2e:6c:58:48:29:
         31:21:2b:5b:70:e2:05:d8:65:a4:e9:b0:d9:7a:a4:a1:fe:43:
         ea:a9:b4:2f:ed:f9:46:29:c4:81:ea:0c:2a:e2:58:de:ed:85:
         4e:0a:65:38:cc:3b:d1:86:7a:b2:73:c5:95:8e:a6:d4:51:55:
         3f:f7:d9:1b:86:99:74:f9:81:ad:2a:62:7c:b3:a6:fb:75:5b:
         94:1e:68:9a:8b:76:de:57:86:68:7f:b8:38:17:a5:05:09:d6:
         9d:07:bd:f0:47:48:ab:b6:24:84:c0:18:99:d1:6b:ef:8b:f0:
         b7:5e:52:15:87:a0:db:9d:ec:87:ee:bc:2c:c2:a5:49:82:a6:
         ee:c3:33:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----