Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38322e302f32342d3234203d3e203631333137.roa
File:                     3139322e3134352e38322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          b4czCCXWeJLzLTD0xJre75gFPsw9qSc4no5ip1WKbMU=
Subject key identifier:   E7:19:87:92:73:75:A1:78:2F:0A:4F:5D:5F:C5:33:76:9E:41:F4:CA
Certificate issuer:       /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial:       5E2987A76A8EC6768C003EC2C396113DD9222689
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38322e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 31 May 2023 19:56:25 +0000
ROA not before:           Wed 31 May 2023 19:51:25 +0000
ROA not after:            Wed 29 May 2024 19:56:25 +0000
asID:                     61317
IP address blocks:        192.145.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:29:87:a7:6a:8e:c6:76:8c:00:3e:c2:c3:96:11:3d:d9:22:26:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
        Validity
            Not Before: May 31 19:51:25 2023 GMT
            Not After : May 29 19:56:25 2024 GMT
        Subject: CN=E71987927375A1782F0A4F5D5FC533769E41F4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:40:a8:dd:a9:8f:45:28:d8:92:48:e1:c0:
                    5d:70:b7:d5:a1:38:fc:4f:35:5a:3d:f1:45:fb:17:
                    cf:02:99:ff:66:fd:3d:ac:d1:92:3e:63:1e:77:23:
                    c7:fd:80:3f:d0:6d:ce:4e:7b:ca:3e:3e:a3:c9:52:
                    19:35:00:08:4d:cd:fa:ab:35:88:de:bc:fa:89:ad:
                    a3:da:50:bb:f4:5e:0d:98:b5:ba:c6:97:28:0e:bb:
                    37:44:3a:29:61:26:e5:86:aa:52:95:86:86:cf:c8:
                    ec:ae:d8:1d:a3:b2:09:e5:c2:5d:8a:13:33:0f:3a:
                    ad:3c:46:45:b4:2f:ec:3c:cd:e7:7f:67:c4:37:a2:
                    2b:7b:66:be:e1:13:98:c8:9b:94:b8:50:44:9e:39:
                    d3:57:e7:72:09:51:5f:7d:c4:e9:84:99:8a:d3:a8:
                    04:49:31:ee:0a:69:da:69:7c:66:8b:19:68:ca:6d:
                    42:cb:67:b4:07:ef:63:71:00:a4:0c:45:af:88:a0:
                    38:d4:94:e6:14:bc:ad:79:4f:0f:33:e5:1f:47:a8:
                    af:55:da:d1:38:b0:26:4a:87:3e:c7:ff:43:30:e7:
                    2c:2f:b4:22:4b:c0:83:36:03:d2:10:95:fc:56:82:
                    11:08:11:e4:a2:67:62:b2:72:6e:42:ba:cc:7d:7d:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:19:87:92:73:75:A1:78:2F:0A:4F:5D:5F:C5:33:76:9E:41:F4:CA
            X509v3 Authority Key Identifier:
                keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/3139322e3134352e38322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:92:ff:95:52:47:f4:d3:75:9f:7c:b2:86:df:e4:2b:43:3f:
         8e:5e:22:1a:db:0f:93:15:a8:84:20:8b:02:4b:cb:ff:a1:09:
         65:c5:e2:c5:e6:39:68:2e:4f:d0:75:21:a9:72:23:80:ed:49:
         9b:cb:82:b2:8e:29:7d:b5:65:f4:87:e2:7e:2b:0f:0f:9a:a0:
         3c:01:05:a1:52:94:34:8f:7d:04:37:fe:90:95:af:1c:d7:38:
         37:46:3a:47:86:67:e9:ee:5d:06:18:b1:c2:e7:a4:d2:80:24:
         c1:43:3e:57:a1:19:ce:70:9a:fa:7b:ec:71:8d:bd:20:41:f5:
         57:a9:43:33:c8:79:3e:7b:e0:56:8c:6e:e7:f1:53:7c:e8:9d:
         6c:77:e5:3b:05:19:c1:38:0a:42:0e:8e:d7:d7:94:81:4b:d9:
         64:18:77:75:47:37:a5:c5:f8:79:b5:ff:63:b3:ad:70:7e:6b:
         78:85:26:6b:52:ef:55:a7:e8:4f:17:23:3d:0f:92:73:b5:4b:
         02:1a:84:0a:0f:03:58:06:9e:7b:bb:04:1b:94:68:64:d6:79:
         ef:a7:43:ae:4a:3d:04:c7:b1:de:ca:f3:d9:08:25:5f:7c:b8:
         d8:42:27:7c:14:a8:27:bc:f4:ca:e7:cb:ea:40:e9:09:96:88:
         e1:0b:34:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----