Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
File:                     3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          gIz9Id7cteHx3kAGgi75RLh+By+4x2gFqlxobp+8CFk=
Subject key identifier:   B3:58:56:4C:9A:0F:4C:5D:6A:D1:B1:3C:D2:BF:76:26:AE:8F:90:C7
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       0D994F6AFB2765FD238A06919887CCFD675AAA0C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 20 Oct 2023 13:41:49 +0000
ROA not before:           Fri 20 Oct 2023 13:36:49 +0000
ROA not after:            Fri 18 Oct 2024 13:41:49 +0000
asID:                     61317
IP address blocks:        185.187.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:99:4f:6a:fb:27:65:fd:23:8a:06:91:98:87:cc:fd:67:5a:aa:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Oct 20 13:36:49 2023 GMT
            Not After : Oct 18 13:41:49 2024 GMT
        Subject: CN=B358564C9A0F4C5D6AD1B13CD2BF7626AE8F90C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:b5:ca:38:fc:53:ea:04:40:29:df:d8:70:
                    98:76:68:e4:61:e2:57:13:e8:12:e1:d4:7e:d5:a7:
                    55:40:f9:d6:2e:58:87:37:d5:77:51:f2:c4:6e:af:
                    20:93:b9:62:e2:ff:b6:f0:e7:62:91:97:0d:29:77:
                    56:43:4b:92:45:56:8c:14:66:21:5b:5f:06:1f:fa:
                    76:e0:d7:9d:59:16:17:a2:b0:8a:ea:b7:3d:d8:19:
                    95:04:78:8c:db:56:63:51:c4:9a:28:ec:5c:67:c0:
                    0d:16:07:f8:c2:34:79:84:43:7e:0a:18:c2:d9:a1:
                    31:51:6a:9b:cd:56:da:f2:9c:d7:64:d9:9d:9d:a1:
                    91:44:ca:dc:23:8b:80:4b:22:ee:8a:47:6e:73:2e:
                    7b:55:fe:7a:a4:22:85:3c:8d:84:2a:9a:46:5c:bf:
                    ce:d9:5c:64:a9:13:39:74:ee:3d:1c:b1:33:97:7d:
                    07:e9:f3:fb:26:81:9b:ba:db:ec:cf:0d:8d:2c:8b:
                    41:d7:27:dc:4c:fe:54:eb:2e:00:0d:08:5d:03:33:
                    e7:bc:98:5b:ff:45:1d:f2:c8:51:29:3d:0e:d8:f7:
                    5c:3c:9a:87:c2:fd:c7:09:a5:0d:d3:fd:3b:ad:c1:
                    60:cb:94:b3:4c:96:e2:e1:41:93:34:84:07:60:3a:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:58:56:4C:9A:0F:4C:5D:6A:D1:B1:3C:D2:BF:76:26:AE:8F:90:C7
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:45:23:77:65:4c:53:8e:73:97:9b:57:b2:a6:6e:84:a6:a5:
         d7:f4:bd:05:a6:78:55:3b:23:bf:b8:d9:db:c8:5f:97:73:19:
         e0:9b:ca:8d:44:11:ff:9f:42:51:28:86:f4:7e:8b:92:a1:10:
         97:43:c2:94:99:a8:f0:90:7f:38:55:9d:9f:76:11:d0:c0:92:
         a2:41:5a:c7:ac:42:69:a1:da:49:55:42:22:f5:d8:33:18:a0:
         e9:7b:3f:7f:80:a6:1e:1c:15:5e:76:10:a8:59:ab:67:a6:08:
         c0:16:e8:ff:35:8a:9e:69:5b:57:60:37:28:cb:38:93:e4:1e:
         75:87:94:86:0b:2e:b8:29:81:5b:f4:21:16:81:c3:21:fc:d6:
         c7:7b:19:e0:1b:f1:be:fc:90:01:a4:86:9a:07:1c:38:fd:58:
         92:dd:99:f0:4a:c7:7f:ad:a4:d6:d2:e3:fb:8a:af:d4:48:f2:
         e3:00:db:c5:e5:a8:34:e3:02:27:5b:cf:da:a9:99:91:cb:51:
         d3:d3:30:67:3c:66:0c:8d:41:4c:e5:ad:06:90:2f:28:e6:7b:
         c5:f0:ce:7c:5d:a6:37:97:9b:f1:9d:82:9e:92:e3:d8:d7:9c:
         8b:f3:43:3a:70:ec:26:44:3b:42:7b:61:90:6c:05:6e:08:c9:
         aa:3a:f1:ac
-----BEGIN CERTIFICATE-----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