Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3131392e302f32342d3234203d3e20323132323338.roa
File:                     3139332e34332e3131392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          GGzDJEutVxygdVC03C9TD4JEPZWgu+5uzBor2Osq0Lg=
Subject key identifier:   F3:CB:F3:4D:F8:E4:66:E0:EC:B4:1D:56:A5:E6:22:DF:24:A3:77:80
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       68B343AF3ED2A4831BB7BD03FFE9EAAE6B66AB6F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3131392e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 17 Jul 2023 12:22:13 +0000
ROA not before:           Mon 17 Jul 2023 12:17:13 +0000
ROA not after:            Mon 15 Jul 2024 12:22:13 +0000
asID:                     212238
IP address blocks:        193.43.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b3:43:af:3e:d2:a4:83:1b:b7:bd:03:ff:e9:ea:ae:6b:66:ab:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Jul 17 12:17:13 2023 GMT
            Not After : Jul 15 12:22:13 2024 GMT
        Subject: CN=F3CBF34DF8E466E0ECB41D56A5E622DF24A37780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:30:c6:db:ad:cd:b2:c0:46:20:76:c3:ad:
                    ba:0d:ee:cd:d5:53:09:07:00:cc:c6:d7:8e:55:87:
                    99:5a:bf:7a:4d:5d:9d:b2:d5:fa:b4:e7:1e:85:f9:
                    46:d2:e4:48:82:dc:2c:51:d5:c5:f9:79:04:b2:a3:
                    70:e6:bb:0d:0c:6e:fe:b1:f1:f2:99:2f:b5:c8:62:
                    15:ce:57:55:71:e6:f6:e9:bc:79:2a:9b:a3:f8:a3:
                    c1:51:f8:d1:f8:3f:58:be:0e:be:74:2b:07:bc:67:
                    81:ed:c1:f0:47:a8:c8:63:06:f1:fb:66:a6:cf:61:
                    96:a2:ac:3b:c7:2a:c2:e7:66:de:06:f6:b9:15:73:
                    41:e1:2f:e1:12:7e:51:2c:c8:87:77:65:8e:17:69:
                    6e:56:a3:1d:76:1b:43:de:82:09:27:62:08:78:a0:
                    06:39:52:be:ed:87:a7:9d:c5:6a:5a:40:0e:24:b3:
                    40:9f:07:f2:71:ab:2c:e7:5d:e9:4a:17:60:18:d3:
                    81:6c:e3:02:9b:b0:10:c8:38:4d:e9:6e:4e:1f:73:
                    de:d9:29:d5:fa:a2:86:2b:46:ee:c6:d0:32:aa:98:
                    6d:08:d7:fb:8a:73:45:eb:5a:cc:69:d7:63:da:24:
                    7a:e5:04:51:4b:93:38:a2:49:a4:7e:30:c4:75:ea:
                    96:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CB:F3:4D:F8:E4:66:E0:EC:B4:1D:56:A5:E6:22:DF:24:A3:77:80
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3131392e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e6:6c:3a:3a:94:b8:b0:65:0b:90:49:5b:45:30:a3:fe:83:
         ed:a4:aa:f1:bf:cc:81:61:28:f5:6b:11:09:ba:5c:92:c3:65:
         66:63:f8:d4:cb:53:38:0e:53:48:56:0a:f7:99:fa:a1:a7:da:
         4a:e6:f7:0b:39:8b:8f:54:70:b7:80:89:51:42:a2:fc:17:47:
         20:1b:00:50:7d:41:06:23:97:c8:c5:78:ac:83:37:af:eb:da:
         d2:c5:5d:7f:58:42:e5:d2:1e:16:99:09:ab:f4:9d:b0:42:ae:
         72:69:65:41:2e:43:5e:43:a5:92:c0:c5:e1:a9:90:cb:49:a5:
         1b:6d:c9:f7:92:90:a3:8c:64:d0:f0:83:a6:d9:d7:09:09:96:
         bb:d0:13:5f:ba:f6:50:b4:dc:12:d4:87:d4:51:f2:95:2b:80:
         24:07:5c:69:6c:ea:5c:79:6f:ef:84:da:75:15:25:e2:83:4b:
         d1:3c:2a:60:4f:b9:bf:14:c9:4e:46:bd:4e:f5:a7:6e:f4:70:
         0d:b3:a3:fc:e4:e9:71:70:4c:2c:6e:3f:2a:f0:16:e7:2e:55:
         81:d4:77:4f:86:2f:8f:f0:e6:50:3f:83:03:41:1b:87:06:80:
         05:e8:2d:3f:5e:f6:cb:e3:cd:e0:01:2c:ed:48:22:f0:19:88:
         b0:1d:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----