Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38312e342e302f32322d3234203d3e2030.roa
File:                     34352e38312e342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          2ZgXcFITAZDrCe59sQFjxwIEjtX5l2jExrnfT87fIvY=
Subject key identifier:   FA:22:FE:66:0E:68:2E:24:97:CF:C4:7C:8A:8E:14:BD:D4:DE:D7:32
Certificate issuer:       /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial:       5EE9198BDCCBAEEB62C4B7FF755BAF3C240A3C46
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38312e342e302f32322d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:28:04 +0000
ROA not before:           Mon 27 Mar 2023 08:23:04 +0000
ROA not after:            Mon 25 Mar 2024 08:28:04 +0000
asID:                     0
IP address blocks:        45.81.4.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e9:19:8b:dc:cb:ae:eb:62:c4:b7:ff:75:5b:af:3c:24:0a:3c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
        Validity
            Not Before: Mar 27 08:23:04 2023 GMT
            Not After : Mar 25 08:28:04 2024 GMT
        Subject: CN=FA22FE660E682E2497CFC47C8A8E14BDD4DED732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:4d:a8:73:81:36:7b:bd:8f:4c:88:9b:4e:
                    6e:96:2f:8b:28:58:f9:8f:81:7b:8e:d5:ee:14:a5:
                    54:55:fd:c4:62:d9:92:02:8e:83:7b:d0:72:c6:c5:
                    a7:ab:c1:5f:99:97:5d:a2:e3:9d:bd:d3:a9:49:00:
                    90:ca:62:95:d5:5d:36:4d:a8:1d:fd:11:34:83:07:
                    eb:51:88:28:3a:b9:26:4a:01:be:b8:da:4d:43:b4:
                    3a:c6:19:e5:bc:72:0c:34:18:ac:f6:05:35:5e:f9:
                    e9:47:22:35:6b:f7:1b:48:e8:85:0e:09:d7:67:2f:
                    b0:70:ed:65:af:d2:07:d0:fb:93:f9:2e:10:05:89:
                    c6:77:6a:f7:1f:b2:85:7b:6c:1c:5e:ac:13:61:63:
                    54:ea:ee:56:63:50:94:fe:49:c2:de:e2:aa:2b:16:
                    b7:2d:58:85:5c:f9:b6:97:4f:35:db:01:8f:eb:7e:
                    47:b7:c7:35:09:10:ca:53:84:a7:25:25:7f:7e:08:
                    25:9e:04:8f:72:9b:39:3f:5a:2a:f8:60:e9:36:4a:
                    b3:af:91:ba:ff:61:60:01:3f:16:af:93:66:ea:6d:
                    64:d2:71:c6:c6:d5:53:6b:ae:3e:46:4c:8b:5a:32:
                    7d:31:dd:96:24:89:7d:c8:fe:3c:f3:b0:30:cf:63:
                    80:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:22:FE:66:0E:68:2E:24:97:CF:C4:7C:8A:8E:14:BD:D4:DE:D7:32
            X509v3 Authority Key Identifier:
                keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38312e342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:01:c5:96:16:e3:16:e2:b0:8f:90:91:ec:78:c3:6a:4d:c2:
         dd:b7:11:3e:24:39:8f:ce:3f:1a:42:d1:6a:bd:20:33:80:0f:
         36:59:15:d1:c0:ed:36:35:de:0b:31:f7:80:0f:e6:69:95:8c:
         08:51:0d:0b:7e:4d:bd:52:7b:18:d4:31:4d:b3:65:de:5c:9a:
         5f:ed:d3:2b:09:5c:c7:03:ea:f1:ba:70:5d:02:52:29:3f:c5:
         8a:2d:af:1b:ed:f9:f7:e5:78:5e:be:55:0f:6d:df:f2:d5:6d:
         03:25:0b:0e:e0:f5:3c:81:f4:65:36:87:ac:65:d0:71:c5:85:
         fa:77:10:65:2c:fc:64:0a:45:86:f6:68:d3:36:bb:ea:5b:3b:
         29:c7:56:0c:98:5d:09:2a:20:d2:d8:3c:13:14:d8:8e:40:3c:
         a9:f9:84:95:22:91:07:6c:72:48:3f:e9:0b:bb:7a:5b:0e:a1:
         82:2a:91:0c:2e:09:a8:2c:17:21:d3:17:80:86:8d:63:c7:75:
         26:e2:73:4f:2e:af:18:b1:a2:7d:3e:03:41:aa:96:2e:1a:24:
         9c:a4:2a:7d:4a:23:da:b1:99:fa:d9:13:b1:ba:f7:5f:6d:17:
         6a:ef:75:d3:75:04:87:f6:ea:d6:2b:cb:99:ec:47:5c:ab:f2:
         72:35:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----