Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233382e302f32332d3234203d3e2030.roa
File:                     3139332e33362e3233382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          MUyeXLis2HAdlB7l5tSyAZWAzXr2VsUULU1Ib7+Pt5s=
Subject key identifier:   35:89:0F:DD:61:8E:BD:CF:1E:DE:C6:27:07:0B:F4:E6:36:31:5D:05
Certificate issuer:       /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial:       47B28796F2FB8B0DCC15BD517980E8C8898DDD58
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233382e302f32332d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:27:26 +0000
ROA not before:           Mon 27 Mar 2023 08:22:26 +0000
ROA not after:            Mon 25 Mar 2024 08:27:26 +0000
asID:                     0
IP address blocks:        193.36.238.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b2:87:96:f2:fb:8b:0d:cc:15:bd:51:79:80:e8:c8:89:8d:dd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
        Validity
            Not Before: Mar 27 08:22:26 2023 GMT
            Not After : Mar 25 08:27:26 2024 GMT
        Subject: CN=35890FDD618EBDCF1EDEC627070BF4E636315D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:42:b2:16:84:72:da:63:ee:7b:40:df:22:
                    7a:e2:a9:69:8e:94:7a:4e:93:9b:ba:ee:51:dd:62:
                    16:db:84:03:9b:70:38:50:ca:11:89:df:6d:ce:13:
                    de:d5:98:84:46:b5:32:02:e8:5e:20:44:30:c6:02:
                    f2:f8:15:9a:16:4e:ca:91:05:80:67:b3:16:c4:53:
                    89:b6:ba:1e:a4:39:40:93:71:be:4f:11:bc:b2:4e:
                    e2:ff:2f:4a:33:b8:b9:6c:56:c1:28:65:19:64:36:
                    9a:a4:93:0e:13:c4:10:d8:15:93:76:d6:b8:e5:34:
                    76:ba:22:36:00:4a:52:7e:4b:2a:88:f3:df:cc:ab:
                    bb:8c:c5:39:38:54:21:49:50:0f:52:ee:af:58:9c:
                    36:2c:5f:85:cb:8f:77:17:28:86:6f:f6:4f:cb:ec:
                    fa:7d:6c:6b:3e:a6:fa:bc:d0:79:65:4f:e2:35:56:
                    05:d7:f9:69:e0:2e:23:de:3c:7c:20:e4:25:8d:e8:
                    ca:0b:95:43:e7:84:17:27:cf:b3:ca:9d:80:2f:f4:
                    20:0a:16:42:06:b5:b0:73:2f:b3:91:2e:3d:20:03:
                    a8:d1:7c:39:b2:41:70:b7:48:3f:bd:02:7b:36:2f:
                    7f:ac:75:b0:8c:64:b9:8a:59:1b:46:40:96:28:9b:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:0F:DD:61:8E:BD:CF:1E:DE:C6:27:07:0B:F4:E6:36:31:5D:05
            X509v3 Authority Key Identifier:
                keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233382e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:cd:12:52:a5:75:a9:7a:62:e2:c9:22:6d:cb:54:52:71:f2:
         c5:26:6c:7d:1e:fa:65:7c:71:46:8b:95:7e:14:d0:90:01:34:
         fe:1e:3a:36:80:8b:52:c0:03:cf:83:fa:0b:2a:05:c1:67:35:
         16:cc:66:9f:6d:c5:9f:e7:98:d7:9d:92:64:9d:3c:15:de:05:
         75:1f:ac:8c:6e:4d:10:0c:50:0b:7c:88:63:47:57:bf:b8:d3:
         be:86:db:ce:42:29:c7:88:36:c8:fe:14:c4:79:f2:a8:16:4f:
         7b:01:a8:d9:67:c9:bd:db:25:86:d5:43:33:62:84:12:9d:95:
         33:08:1e:f0:51:31:5c:0a:b9:1b:39:44:ac:97:64:ed:84:4b:
         25:b5:80:57:bc:ed:7d:5f:81:45:e2:4e:4d:22:85:98:50:91:
         98:06:bf:65:fb:45:06:45:96:70:1b:c7:75:00:79:78:d7:34:
         45:4c:95:8a:3d:ce:4e:c8:40:6d:a3:a1:17:59:4a:b9:fb:c7:
         9d:ab:d8:bd:e8:96:18:40:cb:7b:16:dc:78:97:46:50:f1:5d:
         89:1e:7b:72:0e:7c:8d:a7:63:73:b5:76:99:d1:eb:81:3d:a9:
         45:da:18:62:0d:e2:70:1e:c0:5c:fc:7c:a1:f3:b7:88:b3:14:
         1f:1f:e0:94
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUR7KHlvL7iw3MFb1ReYDoyImN3VgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJjMmE4MzU0Njg5YWVjMmE3NGZjYTE0OTQ0OTI3NjIx
YmEyN2M5NDAeFw0yMzAzMjcwODIyMjZaFw0yNDAzMjUwODI3MjZaMDMxMTAvBgNV
BAMTKDM1ODkwRkRENjE4RUJEQ0YxRURFQzYyNzA3MEJGNEU2MzYzMTVEMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSBkKyFoRy2mPue0DfInriqWmO
lHpOk5u67lHdYhbbhAObcDhQyhGJ323OE97VmIRGtTIC6F4gRDDGAvL4FZoWTsqR
BYBnsxbEU4m2uh6kOUCTcb5PEbyyTuL/L0ozuLlsVsEoZRlkNpqkkw4TxBDYFZN2
1rjlNHa6IjYASlJ+SyqI89/Mq7uMxTk4VCFJUA9S7q9YnDYsX4XLj3cXKIZv9k/L
7Pp9bGs+pvq80HllT+I1VgXX+WngLiPePHwg5CWN6MoLlUPnhBcnz7PKnYAv9CAK
FkIGtbBzL7ORLj0gA6jRfDmyQXC3SD+9Ans2L3+sdbCMZLmKWRtGQJYom6shAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUNYkP3WGOvc8e3sYnBwv05jYxXQUwHwYDVR0j
BBgwFoAUEsKoNUaJrsKnT8oUlEknYhuifJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzcvMTJDMkE4MzU0Njg5QUVDMkE3NEZDQTE0OTQ0OTI3NjIxQkEyN0M5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VzS29OVWFKcnNLblQ4b1VsRWtuWWh1
aWZKUS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzcvMzEzOTMzMmUzMzM2MmUzMjMz
MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcEk7jANBgkq
hkiG9w0BAQsFAAOCAQEAcM0SUqV1qXpi4skibctUUnHyxSZsfR76ZXxxRouVfhTQ
kAE0/h46NoCLUsADz4P6CyoFwWc1Fsxmn23Fn+eY152SZJ08Fd4FdR+sjG5NEAxQ
C3yIY0dXv7jTvobbzkIpx4g2yP4UxHnyqBZPewGo2WfJvdslhtVDM2KEEp2VMwge
8FExXAq5GzlErJdk7YRLJbWAV7ztfV+BReJOTSKFmFCRmAa/ZftFBkWWcBvHdQB5
eNc0RUyVij3OTshAbaOhF1lKufvHnavYveiWGEDLexbceJdGUPFdiR57cg58jadj
c7V2mdHrgT2pRdoYYg3icB7AXPx8ofO3iLMUHx/glA==
-----END CERTIFICATE-----