Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e37302e302f32342d3234203d3e2030.roa
File:                     3139332e34332e37302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          NYdn0Wv6lbDkNfA70DHg+ImxbihRrnHpoMJzbhc13po=
Subject key identifier:   61:22:9F:79:46:10:52:9D:84:06:CE:EC:DE:FC:DD:9B:9E:07:31:26
Certificate issuer:       /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial:       204746E1D32FA475FF09DC7EA49B08E224EAB62C
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e37302e302f32342d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:27:05 +0000
ROA not before:           Mon 27 Mar 2023 08:22:05 +0000
ROA not after:            Mon 25 Mar 2024 08:27:05 +0000
asID:                     0
IP address blocks:        193.43.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:47:46:e1:d3:2f:a4:75:ff:09:dc:7e:a4:9b:08:e2:24:ea:b6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
        Validity
            Not Before: Mar 27 08:22:05 2023 GMT
            Not After : Mar 25 08:27:05 2024 GMT
        Subject: CN=61229F794610529D8406CEECDEFCDD9B9E073126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:c3:d1:b6:b2:2c:34:8f:bd:24:37:09:dd:
                    5b:b4:96:e6:3e:ca:1b:ac:c1:2e:75:55:57:a4:e5:
                    1d:a9:0d:18:3a:cf:b0:6f:11:58:c8:83:d8:8e:6b:
                    b9:1b:06:e9:02:dc:1f:89:49:20:92:5c:1e:73:65:
                    ed:5e:35:d5:16:12:3d:a1:50:2c:c5:e2:36:af:30:
                    81:14:cf:d8:2b:dc:b9:b7:c9:21:f7:53:c4:64:27:
                    4c:a1:70:4b:f9:ae:d9:45:03:8d:29:16:fb:8a:3b:
                    e3:cd:81:76:e1:0d:51:09:39:a7:ce:68:1f:0a:82:
                    cd:e0:c9:94:fa:17:fd:45:a1:ac:d6:6e:c0:c0:76:
                    78:43:d6:e8:9a:8a:f5:64:7a:55:c8:62:d4:a7:54:
                    91:6e:ae:8b:a0:ad:66:81:36:3c:a4:b7:38:dc:5e:
                    ed:3b:75:b4:a4:fc:34:8c:c8:7b:3b:d8:ad:6f:2e:
                    c8:6e:46:b9:33:65:a4:d8:5f:cc:ff:b6:bb:df:1a:
                    d0:2e:18:ac:79:b1:e7:13:a0:95:dc:b5:56:28:97:
                    1d:1c:e3:e5:e0:c8:61:84:0c:60:5b:8b:fb:f3:f1:
                    69:21:e9:c4:4c:d6:48:7b:2c:de:a9:02:56:1a:5d:
                    df:49:5d:22:b0:f6:e8:3d:1a:1a:e6:32:50:5e:b8:
                    f5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:22:9F:79:46:10:52:9D:84:06:CE:EC:DE:FC:DD:9B:9E:07:31:26
            X509v3 Authority Key Identifier:
                keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e37302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:af:58:b6:a0:7b:05:e9:9b:fa:19:46:bb:5a:54:ac:32:21:
         8f:51:56:ef:7f:63:7f:a9:1d:62:43:a3:12:1a:ae:a6:bd:12:
         f0:30:d9:f9:b3:b1:11:bf:24:ff:01:cd:34:fb:95:46:33:e1:
         00:5e:63:73:ae:7c:a4:28:a1:26:e8:71:d9:36:ec:0a:c2:10:
         8b:7c:e0:41:d5:86:19:c7:38:81:ca:5f:76:35:aa:ea:90:c0:
         12:86:91:20:88:01:75:a8:47:1f:b2:99:44:4b:06:09:ad:24:
         76:af:34:37:1c:2e:a4:8d:fa:e4:60:2d:68:21:2a:b4:74:3a:
         8f:99:52:8b:0a:9e:24:cb:cf:34:71:0b:b9:ef:6e:c2:7b:86:
         bc:60:c9:11:26:cb:e2:61:f3:72:3c:55:2e:79:6c:3c:01:37:
         85:c4:ac:00:cf:36:a1:87:cc:77:75:9b:0e:d1:57:fc:b2:ab:
         0a:35:40:82:64:13:7b:1b:e2:e3:b6:7e:8b:9b:dd:d0:64:a7:
         82:6d:5e:d5:db:3a:6c:c3:5e:b6:67:e1:e2:a2:0f:e9:a6:83:
         12:82:b8:51:4a:a2:26:04:1f:34:a9:5b:31:32:ac:3f:3b:7d:
         a6:8a:bc:fd:9b:f9:d8:8c:0c:16:7c:44:88:33:cd:1c:4c:66:
         bf:22:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----