Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36372e302f32342d3234203d3e2030.roa
File:                     39312e3231342e36372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          q2Vfw9UX01UzYMlIOYIKcCNjNor0vfi+M4qaZVNQ4qU=
Subject key identifier:   E0:D6:72:D8:24:6D:B5:68:9B:F1:5A:86:D1:E7:9A:EE:98:B2:D2:1E
Certificate issuer:       /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial:       74D010A98C063600ABD3D41FA940E858A54DAFF6
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36372e302f32342d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:28:10 +0000
ROA not before:           Mon 27 Mar 2023 08:23:10 +0000
ROA not after:            Mon 25 Mar 2024 08:28:10 +0000
asID:                     0
IP address blocks:        91.214.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d0:10:a9:8c:06:36:00:ab:d3:d4:1f:a9:40:e8:58:a5:4d:af:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
        Validity
            Not Before: Mar 27 08:23:10 2023 GMT
            Not After : Mar 25 08:28:10 2024 GMT
        Subject: CN=E0D672D8246DB5689BF15A86D1E79AEE98B2D21E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a9:93:ad:0d:ee:37:0e:a1:d8:a5:6c:44:15:
                    6a:df:e6:96:5d:9c:3d:5a:84:1d:c5:85:0f:6d:c9:
                    72:2e:80:b5:e5:f7:59:84:b8:8c:59:52:2d:e1:51:
                    7e:35:68:7f:fc:1b:d2:48:01:54:ac:24:59:e5:48:
                    e7:bb:78:d2:79:82:56:9a:20:3a:8a:bc:8c:0e:f2:
                    88:8e:05:2d:30:66:ed:7a:2a:1b:3e:26:02:37:8b:
                    3f:cb:8d:ad:46:d7:7e:38:2c:62:8a:1b:7b:5e:e5:
                    3b:2e:88:09:52:44:d8:24:84:42:14:0b:ba:a0:c3:
                    1f:c4:67:e1:cc:09:8e:cc:91:88:63:5e:16:0c:5d:
                    e5:e8:97:64:6c:53:f6:4c:d7:ae:6a:9e:7b:48:a0:
                    ba:a1:19:08:76:62:c6:9e:cd:36:80:b9:4e:0d:5d:
                    88:27:46:f5:a7:b9:89:90:4b:43:5b:0b:91:65:cf:
                    f2:b8:db:82:fe:e9:0c:ef:97:c1:57:86:f8:e7:27:
                    bc:e5:29:f1:e3:20:a4:d7:10:83:81:d0:d2:aa:4e:
                    0b:61:56:76:8c:a6:2f:c0:b6:0b:cd:89:af:9a:57:
                    f1:21:57:b1:6c:a0:22:89:58:6a:b2:34:48:06:01:
                    c3:a8:02:94:06:36:5e:9a:96:48:fb:4c:56:3a:ca:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D6:72:D8:24:6D:B5:68:9B:F1:5A:86:D1:E7:9A:EE:98:B2:D2:1E
            X509v3 Authority Key Identifier:
                keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36372e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.214.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:fd:7d:1b:34:ca:b8:bf:81:cd:82:be:f2:0f:01:3d:de:23:
         90:e6:c6:95:37:2c:08:76:a1:c8:d4:c4:c3:db:18:c5:62:0b:
         39:93:73:f7:8d:d7:4f:f6:69:c0:6f:1e:2f:bf:71:f8:74:f2:
         95:8b:11:63:ca:a5:e8:cf:a5:92:f4:3f:78:bb:3b:a6:59:c4:
         d4:d8:63:55:70:d0:39:b0:39:d1:1f:e1:c5:0f:0e:ea:14:73:
         6f:cb:a0:48:55:2a:b2:84:ef:50:a2:31:4a:60:73:72:ae:bb:
         56:12:40:49:ba:5c:65:93:56:08:3f:51:a1:6f:7e:85:3f:19:
         74:67:9e:01:b2:cc:01:25:58:ff:1e:7f:11:46:6b:d8:e5:4f:
         71:cb:ae:fd:a3:a1:8f:ef:31:3e:20:7b:49:4d:dc:fc:bb:c4:
         e8:11:ad:24:c4:e4:04:73:27:4c:df:86:9c:c6:1d:64:0d:94:
         8d:31:1b:a6:0a:6c:ae:02:01:89:c8:e0:8d:ca:7e:90:3a:67:
         63:cc:82:1c:13:e2:48:7b:df:e9:9b:e9:8d:b1:b3:26:0e:d3:
         9a:3b:df:bc:1b:c1:15:06:c3:04:14:70:a6:8a:64:71:b8:21:
         86:7d:20:b3:9b:55:b0:51:54:cf:df:3f:08:a9:a2:f5:6d:ba:
         e5:c0:5d:be
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUdNAQqYwGNgCr09QfqUDoWKVNr/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yMzAzMjcwODIzMTBaFw0yNDAzMjUwODI4MTBaMDMxMTAvBgNV
BAMTKEUwRDY3MkQ4MjQ2REI1Njg5QkYxNUE4NkQxRTc5QUVFOThCMkQyMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwqZOtDe43DqHYpWxEFWrf5pZd
nD1ahB3FhQ9tyXIugLXl91mEuIxZUi3hUX41aH/8G9JIAVSsJFnlSOe7eNJ5glaa
IDqKvIwO8oiOBS0wZu16Khs+JgI3iz/Lja1G1344LGKKG3te5TsuiAlSRNgkhEIU
C7qgwx/EZ+HMCY7MkYhjXhYMXeXol2RsU/ZM165qnntIoLqhGQh2YsaezTaAuU4N
XYgnRvWnuYmQS0NbC5Flz/K424L+6Qzvl8FXhvjnJ7zlKfHjIKTXEIOB0NKqTgth
VnaMpi/AtgvNia+aV/EhV7FsoCKJWGqyNEgGAcOoApQGNl6alkj7TFY6yiFzAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQU4NZy2CRttWib8VqG0eea7piy0h4wHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzkzMTJlMzIzMTM0MmUzNjM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb1kMwDQYJKoZI
hvcNAQELBQADggEBAHz9fRs0yri/gc2CvvIPAT3eI5DmxpU3LAh2ocjUxMPbGMVi
CzmTc/eN10/2acBvHi+/cfh08pWLEWPKpejPpZL0P3i7O6ZZxNTYY1Vw0DmwOdEf
4cUPDuoUc2/LoEhVKrKE71CiMUpgc3Kuu1YSQEm6XGWTVgg/UaFvfoU/GXRnngGy
zAElWP8efxFGa9jlT3HLrv2joY/vMT4ge0lN3Py7xOgRrSTE5ARzJ0zfhpzGHWQN
lI0xG6YKbK4CAYnI4I3KfpA6Z2PMghwT4kh73+mb6Y2xsyYO05o737wbwRUGwwQU
cKaKZHG4IYZ9ILObVbBRVM/fPwipovVtuuXAXb4=
-----END CERTIFICATE-----