Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138362e302f32332d3234203d3e203631333137.roa
File:                     34352e3134302e3138362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Qdjg7YgQFHmQGJQCH0FD5VA4OiebUE/+GeJbtSFnGXw=
Subject key identifier:   7B:1B:16:05:76:97:93:5C:79:56:7E:10:F8:0B:56:EE:34:1A:A5:A8
Certificate issuer:       /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial:       09BE3E0DA8EF5C7711D8436DF18B562784D7D79D
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138362e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 27 Mar 2023 08:28:01 +0000
ROA not before:           Mon 27 Mar 2023 08:23:01 +0000
ROA not after:            Mon 25 Mar 2024 08:28:01 +0000
asID:                     61317
IP address blocks:        45.140.186.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:be:3e:0d:a8:ef:5c:77:11:d8:43:6d:f1:8b:56:27:84:d7:d7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
        Validity
            Not Before: Mar 27 08:23:01 2023 GMT
            Not After : Mar 25 08:28:01 2024 GMT
        Subject: CN=7B1B16057697935C79567E10F80B56EE341AA5A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:83:30:43:e7:5b:62:83:7f:43:27:cf:d1:7e:
                    65:66:39:94:33:7f:0e:3d:15:d5:3f:6e:1e:3a:01:
                    06:8b:17:8f:05:50:73:41:a8:d5:45:fd:82:d3:ac:
                    9a:4d:cc:d2:f1:fd:52:7b:f4:ee:1e:a6:05:b2:92:
                    5a:ff:ea:87:15:0b:73:6c:e4:30:e6:93:0a:00:9f:
                    25:21:36:91:33:58:aa:67:a9:27:c2:f0:2d:23:b3:
                    48:2e:72:49:c7:4a:ad:97:74:16:6b:3f:ca:6a:ff:
                    1f:c1:5e:04:47:34:ca:80:49:dc:a4:bc:8a:4a:30:
                    ee:f5:1a:19:15:1a:d8:60:4c:7c:59:9c:e1:c0:4e:
                    55:19:77:5f:e3:51:99:b3:66:5b:2c:b6:8b:6a:17:
                    71:88:2c:53:8a:82:69:7e:23:a0:c3:cf:57:3f:0b:
                    e1:33:a7:bb:86:ca:66:53:20:4f:09:2b:f1:6d:06:
                    b8:4f:70:45:6e:44:a9:18:62:df:a6:a5:f0:8f:a5:
                    76:4b:fd:de:00:79:4a:39:b5:83:c0:bc:97:59:e7:
                    31:d4:6d:91:c0:e2:a6:ae:5e:f8:b0:b2:f8:11:d0:
                    dc:0a:aa:b9:2b:ec:07:18:91:7d:34:35:bb:ce:2c:
                    08:57:3a:e9:23:78:fd:b3:73:c6:c4:36:cb:0d:22:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1B:16:05:76:97:93:5C:79:56:7E:10:F8:0B:56:EE:34:1A:A5:A8
            X509v3 Authority Key Identifier:
                keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:60:19:50:8a:b5:10:07:ec:4e:9b:71:46:c7:21:23:64:aa:
         68:d8:1c:20:4b:2b:fe:e8:c2:e5:3f:6e:db:de:4a:d3:5c:86:
         48:9f:2d:fa:ff:cb:39:e6:b8:86:7e:48:3f:6f:c8:55:5b:fd:
         e2:60:69:d4:a3:66:94:de:8e:b0:b4:ae:37:df:f8:e9:88:67:
         56:b8:e3:a2:2a:d3:d7:9d:12:8a:74:86:d3:45:44:72:dc:41:
         9d:48:cd:4c:17:0b:b1:b0:27:c0:4e:a5:74:2d:a0:3c:25:02:
         f5:e6:7f:76:fd:44:f0:2c:78:4a:42:9b:f9:3c:cb:f6:92:8f:
         f8:0f:6c:1d:2b:6d:24:98:7d:7a:c1:f3:6f:e9:32:45:5f:53:
         0f:74:18:6a:99:db:59:bb:02:df:0a:6b:7a:7a:9a:f4:75:54:
         4c:a5:d3:dd:00:47:99:d3:45:5a:ad:08:92:cb:8f:21:be:27:
         7a:09:19:e7:df:09:0c:99:c6:e5:dc:43:01:b0:3a:82:8b:81:
         c6:a8:fe:4d:1a:88:6d:66:17:8e:04:f6:f6:53:06:a1:60:70:
         fe:69:aa:12:e1:bb:2b:f0:81:6b:6a:06:41:2e:d7:48:08:42:
         32:6c:ff:13:7a:27:8d:3c:b1:16:10:b5:08:e9:07:c4:84:44:
         b4:76:63:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----