Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3131392e38302e302f32322d3234203d3e2030.roa
File:                     39322e3131392e38302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          Ed4/b56MwjdbcvCvaiYLS0GL3dwosWIwe2mx39BUcV8=
Subject key identifier:   23:EF:5D:3B:E9:FA:8D:E7:6D:0E:2B:31:AB:CE:7A:48:8F:A1:04:D2
Certificate issuer:       /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial:       47B2074F05CB8336FD11BEFCDE9AA4DD5DA0A964
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3131392e38302e302f32322d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:27:59 +0000
ROA not before:           Mon 27 Mar 2023 08:22:59 +0000
ROA not after:            Mon 25 Mar 2024 08:27:59 +0000
asID:                     0
IP address blocks:        92.119.80.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b2:07:4f:05:cb:83:36:fd:11:be:fc:de:9a:a4:dd:5d:a0:a9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
        Validity
            Not Before: Mar 27 08:22:59 2023 GMT
            Not After : Mar 25 08:27:59 2024 GMT
        Subject: CN=23EF5D3BE9FA8DE76D0E2B31ABCE7A488FA104D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:a7:d4:4b:18:d1:89:06:3e:04:1e:c3:e2:
                    9b:9f:d9:0c:05:81:ec:53:23:13:b4:a0:b7:f2:8d:
                    91:c5:c3:4a:a4:f3:c7:08:bc:ff:d7:08:1f:e5:94:
                    cd:99:0e:12:40:f9:4a:c8:80:a3:6f:a6:26:c6:91:
                    0f:bf:70:0b:4e:c7:32:0f:d2:11:6f:d3:1b:e8:0c:
                    3a:d8:ab:d5:50:e8:a8:72:62:a0:5d:52:55:da:f4:
                    7b:e7:f0:38:4d:1b:e1:01:2a:5e:9d:2e:20:24:ef:
                    91:8a:bc:71:c7:73:cf:6d:f3:15:db:69:75:90:51:
                    38:29:4b:7e:8a:31:aa:5a:29:94:d8:46:cb:6a:e9:
                    47:c0:04:3d:18:86:4f:e3:22:63:fc:68:a7:ea:31:
                    3a:9c:ad:62:fa:f2:17:40:df:93:a6:64:58:da:4c:
                    2f:e7:f1:fa:88:1a:af:07:87:0c:e6:83:f2:b8:3c:
                    06:c9:5d:33:c8:41:d3:5d:a0:06:f4:f8:dd:82:6b:
                    0c:b6:95:93:36:e2:18:f0:c3:0b:1e:d2:6d:85:62:
                    ae:8f:aa:e2:b2:c4:8e:39:93:bc:9a:68:d2:d7:8d:
                    ed:9b:29:13:5b:3f:6c:57:99:1f:be:c5:a1:5e:5d:
                    d3:10:1b:5b:8c:c6:df:26:81:f9:ba:30:bb:10:76:
                    9e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EF:5D:3B:E9:FA:8D:E7:6D:0E:2B:31:AB:CE:7A:48:8F:A1:04:D2
            X509v3 Authority Key Identifier:
                keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3131392e38302e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:5f:5e:13:43:26:d5:0d:86:55:e2:9d:2c:21:0d:9a:0b:53:
         9b:cd:ba:79:de:66:7c:68:ca:08:dd:11:66:02:b2:42:8e:7b:
         24:17:d8:37:49:96:65:56:d2:2d:1a:b5:e5:f7:53:12:35:dd:
         e4:1b:74:63:54:44:4b:b2:20:b2:f5:d0:6a:6b:14:0d:04:c8:
         91:cd:ac:62:7e:d3:5e:a8:34:5e:e5:61:80:b8:a5:fe:6c:03:
         fb:ab:bb:76:23:79:51:82:5d:ac:a2:f5:c8:79:15:2d:d4:d4:
         04:8d:70:da:89:0c:b8:bd:59:2c:18:01:3e:e2:52:33:21:f0:
         b5:49:a9:30:a1:cc:2e:df:20:73:3c:23:e2:e9:ed:87:9b:bf:
         b6:67:d3:67:c7:ac:2c:34:1b:73:2c:ec:f1:0d:d5:96:9c:ca:
         85:7a:d1:c6:ec:5b:f2:16:62:32:4f:3f:df:a3:98:e8:1a:9f:
         88:39:d7:2b:5e:eb:aa:97:d8:9f:34:8e:3d:c5:15:12:67:bb:
         d9:83:c6:80:e2:93:16:af:61:c3:67:8f:aa:d2:ab:a9:e2:92:
         2d:e3:78:ec:c2:ea:ed:05:c1:41:0c:8e:93:2a:83:24:ad:ec:
         25:d6:25:dc:ef:8d:61:5f:03:53:f6:1f:d5:12:78:db:49:6d:
         df:19:a8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----