Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3139302e302f32332d3233203d3e203439373033.roa
File:                     34352e3135322e3139302e302f32332d3233203d3e203439373033.roa (raw, json)
Hash identifier:          ls7Jj7nhwPcFHqnqknPMPujx0kVJmpVa9qYuW/KzDsw=
Subject key identifier:   23:BC:C6:14:2F:0D:D2:60:26:84:FC:54:FC:93:C7:09:80:97:1C:F6
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       5F512D286DFF46D6C716547E675F4D486781F33C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3139302e302f32332d3233203d3e203439373033.roa
Signing time:             Mon 27 Mar 2023 08:28:28 +0000
ROA not before:           Mon 27 Mar 2023 08:23:28 +0000
ROA not after:            Mon 25 Mar 2024 08:28:28 +0000
asID:                     49703
IP address blocks:        45.152.190.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:51:2d:28:6d:ff:46:d6:c7:16:54:7e:67:5f:4d:48:67:81:f3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Mar 27 08:23:28 2023 GMT
            Not After : Mar 25 08:28:28 2024 GMT
        Subject: CN=23BCC6142F0DD2602684FC54FC93C70980971CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:ec:1f:ca:63:2d:eb:e0:27:94:3f:99:37:
                    11:22:7a:7d:20:e1:dc:61:fc:1a:e7:f7:44:03:65:
                    89:cb:c8:41:83:42:0f:1c:35:20:db:8d:79:16:db:
                    23:ed:9e:f7:25:44:2a:cb:19:f8:e2:95:97:f0:0b:
                    f4:73:f3:4f:7e:8b:69:53:60:8b:b1:46:fc:c0:48:
                    30:74:ce:bf:93:eb:40:3c:42:a5:80:bf:d9:5a:f0:
                    a2:c2:7a:2c:2b:14:a9:91:cd:cb:fd:55:1a:c9:13:
                    31:de:4f:8a:2f:28:df:a7:94:43:50:3c:46:f1:92:
                    16:3c:70:3c:4b:d5:16:db:1f:64:37:89:f5:cd:a7:
                    a0:c8:b4:c1:8d:35:69:39:fd:19:eb:f7:2b:84:52:
                    dc:0f:b5:c9:97:d1:be:95:97:99:a5:cf:ae:ed:89:
                    d8:a5:da:48:26:d0:25:5c:fb:64:7d:ae:16:1f:83:
                    04:bd:fd:0e:af:38:3e:da:c8:ae:38:db:d9:60:d2:
                    7a:a0:3e:07:b0:e1:85:82:2d:2f:e5:9b:b9:6e:5d:
                    a3:8a:10:36:af:5b:08:d1:82:f3:b7:44:3e:94:5f:
                    14:61:b7:b1:ef:ac:b6:b3:32:cb:a6:3e:dd:1f:b6:
                    0f:e1:52:36:d8:f4:00:bb:e3:49:a6:81:94:67:e1:
                    3d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BC:C6:14:2F:0D:D2:60:26:84:FC:54:FC:93:C7:09:80:97:1C:F6
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3139302e302f32332d3233203d3e203439373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:95:ad:76:96:c4:d2:9e:b8:e1:6e:5d:40:ae:e2:a1:b9:35:
         f1:8c:c7:b5:0b:85:eb:c7:9b:23:95:c8:fb:b5:d1:86:4e:99:
         4a:37:ed:01:51:0a:89:38:a2:12:64:43:b1:a6:ff:40:89:40:
         61:06:73:f4:7d:22:90:d8:9e:4f:c0:cb:f8:96:df:f9:bc:e0:
         bf:e1:ab:9f:7e:fc:12:50:7d:85:90:39:10:eb:c0:e4:16:16:
         a1:a2:a0:8a:65:f0:45:1f:1d:ea:8a:73:38:46:cb:b8:27:ec:
         83:9a:d6:11:c2:d4:94:f6:5e:24:17:ae:76:c7:53:31:7e:05:
         e6:db:8c:cf:7f:76:02:9e:39:04:e4:06:d5:2e:13:e3:6c:19:
         2b:46:20:54:8d:e5:48:7d:7e:bc:55:cc:b7:73:d5:5e:9b:16:
         1f:7b:25:67:b9:11:0f:7c:1a:83:df:1d:fb:15:cf:a1:1f:47:
         d6:bf:ff:f0:c3:fd:94:3e:53:b0:89:71:b5:14:b1:d3:88:52:
         d3:93:14:2e:85:52:90:00:22:b9:77:24:70:e2:dc:99:ea:47:
         9d:91:dc:3d:3f:92:cf:db:01:a0:3b:1b:13:f1:7d:61:41:d6:
         0f:63:38:cf:79:62:70:d7:62:5e:b3:4b:d0:29:f4:f2:a8:29:
         56:27:4c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----