Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130362e302f32332d3234203d3e2030.roa
File:                     39312e3230352e3130362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          NQdBXXC13XvmG0JJiFZ75YZKIZFMXT3YjI3OX2jUHO0=
Subject key identifier:   25:C0:9B:71:E2:79:58:92:9B:28:51:27:09:21:35:A9:66:81:83:54
Certificate issuer:       /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial:       6E0C58923BF29616CB2350986647B8E93C040C64
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130362e302f32332d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:27:03 +0000
ROA not before:           Mon 27 Mar 2023 08:22:03 +0000
ROA not after:            Mon 25 Mar 2024 08:27:03 +0000
asID:                     0
IP address blocks:        91.205.106.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0c:58:92:3b:f2:96:16:cb:23:50:98:66:47:b8:e9:3c:04:0c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
        Validity
            Not Before: Mar 27 08:22:03 2023 GMT
            Not After : Mar 25 08:27:03 2024 GMT
        Subject: CN=25C09B71E27958929B285127092135A966818354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:62:0e:a1:1f:7a:f4:be:7a:3f:9a:44:5f:d7:
                    95:2d:5f:49:94:43:3b:57:d4:d4:ad:62:d8:99:b9:
                    32:32:c5:f7:f8:2a:9d:c6:1b:f6:4e:93:1d:95:e3:
                    1e:3e:b8:da:6d:6b:a2:61:f7:d4:ff:f6:2f:2e:6c:
                    92:26:4f:b8:0c:d8:5b:bb:dd:53:0d:8f:99:3b:fe:
                    3a:f5:26:72:99:bd:43:f8:18:b4:8c:b8:5b:18:ea:
                    96:13:30:dc:97:57:24:09:17:af:4d:99:09:7e:3f:
                    82:3e:05:56:e0:fd:01:37:b1:0f:f2:2b:23:f5:ca:
                    93:78:43:6c:d9:cc:43:d1:83:83:84:56:8c:ee:8b:
                    ea:4e:d8:45:81:53:13:ba:d8:ed:cf:98:02:34:a3:
                    e3:95:e5:c8:91:41:df:a1:b5:45:a6:d4:43:d0:a8:
                    7b:a0:c6:08:f6:8b:c7:bf:2e:5c:de:a0:4e:06:fb:
                    93:5f:82:85:60:6f:f8:b9:b6:08:12:5d:3c:f5:2f:
                    a0:38:80:b0:07:ed:86:94:30:0b:30:10:8e:54:44:
                    1c:19:bf:84:16:89:1d:4f:8a:01:20:f1:ea:05:28:
                    c1:2c:64:57:5f:13:0b:a8:37:89:b4:09:b2:08:85:
                    ba:f4:16:d6:d0:fe:c0:47:db:bf:3e:d4:df:11:0b:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C0:9B:71:E2:79:58:92:9B:28:51:27:09:21:35:A9:66:81:83:54
            X509v3 Authority Key Identifier:
                keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130362e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:60:58:37:af:7d:bb:1b:39:10:4c:0a:04:6b:ef:72:7b:2c:
         5f:a3:5f:ee:be:dd:f8:df:15:aa:ed:e2:7d:11:59:80:9f:69:
         1c:cf:ae:65:2c:bf:f4:55:11:6c:ae:bf:e5:e4:16:05:23:af:
         1f:18:2c:5d:8f:2c:57:ad:ef:5d:67:0c:d2:9a:7e:73:84:38:
         6f:f2:b2:03:16:f1:35:ea:04:9e:e1:01:62:fb:e2:0e:ee:2a:
         1a:3e:4a:cb:f5:c6:8f:5d:1c:e9:50:9e:c9:1b:28:fa:0b:dc:
         bb:c0:70:2c:a4:d8:4e:99:ab:3f:1e:b5:db:e9:ac:2e:99:75:
         0b:06:04:4c:8e:e4:b0:de:b1:a5:bf:aa:46:f4:99:6f:e3:fc:
         db:95:c5:91:49:40:47:0b:72:72:05:3c:54:2c:9d:d4:13:56:
         df:63:96:9a:28:6c:e3:02:7e:f2:f6:aa:e1:a8:6c:40:2c:bc:
         87:ce:d1:e1:0f:30:b3:45:c1:fe:51:aa:72:d1:38:68:bf:da:
         ca:7b:5a:4e:f3:74:67:7c:56:d3:d6:d1:d3:91:6b:63:e6:4b:
         4e:68:34:b7:92:da:34:5f:4d:0a:f4:f5:94:40:bc:cd:df:8c:
         94:bd:a5:43:4f:d5:e9:1f:81:24:62:37:22:26:20:a7:a8:ed:
         88:77:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----