Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e36392e302f32342d3234203d3e2030.roa
File:                     3139332e34332e36392e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          /F75U84GYeKYuuGsWigXg1Om4Q9PxhxglGHKRfitdTI=
Subject key identifier:   DC:E6:BA:A7:14:27:35:07:AB:EF:17:8D:74:27:7D:49:67:11:42:FE
Certificate issuer:       /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial:       7E82DF3F609FF90FACDBC6CCA007FA5C28A92B8D
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e36392e302f32342d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:27:04 +0000
ROA not before:           Mon 27 Mar 2023 08:22:04 +0000
ROA not after:            Mon 25 Mar 2024 08:27:04 +0000
asID:                     0
IP address blocks:        193.43.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:82:df:3f:60:9f:f9:0f:ac:db:c6:cc:a0:07:fa:5c:28:a9:2b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
        Validity
            Not Before: Mar 27 08:22:04 2023 GMT
            Not After : Mar 25 08:27:04 2024 GMT
        Subject: CN=DCE6BAA714273507ABEF178D74277D49671142FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:81:26:f9:6c:7a:2a:71:e7:0a:01:f9:8d:
                    eb:5f:8f:2f:46:d6:94:c9:17:13:50:12:29:27:4d:
                    77:49:90:a6:5b:f5:59:18:df:69:92:c9:1b:d8:25:
                    69:cf:07:0c:a5:9d:ff:a1:7a:e1:5c:60:63:58:b8:
                    91:93:8d:23:92:a0:c2:64:d7:38:dd:77:6e:0a:58:
                    b6:e3:59:8b:bb:9e:b7:6e:84:c4:1e:0a:d5:09:9e:
                    cd:bf:47:fe:19:f6:23:98:28:6b:41:6d:87:a0:9d:
                    73:67:68:a8:92:62:0d:8e:65:0f:8b:4a:4b:04:ab:
                    7f:b7:f9:e4:04:20:20:6a:25:db:39:fc:c5:ed:ea:
                    93:a3:72:57:bc:a9:42:a6:8f:db:3c:37:22:4d:a6:
                    42:93:c4:88:fc:79:af:ed:86:05:39:41:ba:3d:64:
                    90:8d:ba:dd:bf:a7:f9:cf:65:fd:15:c8:75:b8:b0:
                    ac:9e:43:68:a8:d0:51:e0:80:81:1d:b1:42:5a:47:
                    c2:5a:a4:9f:0e:74:2a:9c:95:86:f4:de:1c:39:ab:
                    be:87:56:f5:6a:95:69:c5:1e:0a:26:30:b1:1b:d9:
                    fc:5c:e5:e8:59:a1:05:8a:77:ef:d2:8f:1b:a3:72:
                    06:07:a6:4a:08:39:dd:ec:6a:2e:69:de:6f:13:c7:
                    8b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E6:BA:A7:14:27:35:07:AB:EF:17:8D:74:27:7D:49:67:11:42:FE
            X509v3 Authority Key Identifier:
                keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e36392e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:9f:71:82:c3:01:91:fb:2a:b4:ac:dc:32:d5:eb:2d:28:75:
         4e:a7:83:10:ad:41:59:f5:b9:c0:df:b4:cc:b3:a0:b6:6c:a5:
         0a:cc:fa:ea:02:3e:c7:cb:14:82:c0:22:98:a1:5e:b0:1f:70:
         ca:ea:ad:22:06:83:88:1a:84:36:60:fd:f8:e5:d3:2d:ed:ec:
         3c:02:64:41:13:10:51:46:e8:26:69:ca:18:e9:56:1b:8c:74:
         12:cc:c1:a1:f7:46:0d:f1:d7:81:29:a3:38:c0:16:c3:15:cf:
         e2:a4:68:18:bc:ea:d7:c5:65:49:fb:89:3d:0f:ae:a1:fe:5f:
         6e:cd:dc:3d:81:92:de:e1:6c:c9:c5:6b:a8:b6:0d:5a:20:d7:
         dd:a6:db:c7:81:e4:c6:3f:37:34:87:6e:fe:eb:a7:99:bd:5b:
         b5:4e:2a:ba:53:3d:ad:98:5b:62:d3:b0:4f:a5:f0:17:28:60:
         0d:e8:3c:76:4b:8c:06:06:2d:52:c2:32:63:19:5d:22:67:bf:
         d8:0b:39:6d:59:ba:a6:89:e7:7f:ad:41:26:d0:da:11:89:b6:
         04:b1:f5:a4:09:42:7b:a7:52:d2:f3:dc:53:c2:43:99:de:8a:
         81:a6:93:a4:4c:06:aa:54:58:99:4f:8a:ac:af:ea:52:27:64:
         ce:e8:62:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----