Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e33352e3132312e302f32342d3234203d3e2030.roa
File:                     3139342e33352e3132312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          fQjOKgQCaTfl4321Ginve9228Q/mSX1doRmC44DaJeE=
Subject key identifier:   5E:E1:C3:1A:C6:6E:2F:F3:E7:E8:4F:05:88:7D:14:35:4C:3F:8F:F1
Certificate issuer:       /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial:       4ABCE56CB1CC805F92AF067E035ADF7D26DC857B
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e33352e3132312e302f32342d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:27:30 +0000
ROA not before:           Mon 27 Mar 2023 08:22:30 +0000
ROA not after:            Mon 25 Mar 2024 08:27:30 +0000
asID:                     0
IP address blocks:        194.35.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:bc:e5:6c:b1:cc:80:5f:92:af:06:7e:03:5a:df:7d:26:dc:85:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
        Validity
            Not Before: Mar 27 08:22:30 2023 GMT
            Not After : Mar 25 08:27:30 2024 GMT
        Subject: CN=5EE1C31AC66E2FF3E7E84F05887D14354C3F8FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d0:0d:53:8d:89:80:37:53:10:9e:e5:da:06:
                    c3:6a:b1:fa:f0:a9:d5:ce:17:74:40:66:41:35:26:
                    e6:fe:87:2f:29:b5:6c:a4:11:a8:14:00:43:02:72:
                    6a:4a:3c:63:fd:85:ea:cc:81:b9:b7:f3:c2:9f:d2:
                    9a:4f:47:8e:fb:57:3a:24:09:1d:44:b7:67:3e:dc:
                    d9:80:b6:df:a4:02:69:c9:10:c2:4d:8b:0b:7f:de:
                    8e:72:fa:91:a3:34:dc:7d:c8:43:78:f3:53:b3:09:
                    c5:65:5f:c4:41:72:05:41:51:4d:63:66:12:fe:0e:
                    7e:94:35:7f:01:98:3d:bf:d2:41:aa:56:19:d5:d3:
                    88:1c:6c:31:98:76:6c:c3:7a:7d:47:b4:95:de:7d:
                    bb:4a:32:fb:6a:25:7a:ca:e4:8f:13:06:e3:41:2b:
                    9a:68:72:9e:a2:f7:1a:29:26:a0:c4:36:c6:73:14:
                    fd:1b:53:f6:01:be:6c:28:f4:9f:e3:fd:fc:57:53:
                    78:9e:60:10:82:bd:94:58:9e:b1:b1:0e:3a:5d:0c:
                    22:88:42:5a:9e:4c:39:e8:0b:09:16:5f:da:48:ed:
                    ae:0d:af:9c:96:ad:b8:08:c9:00:bc:69:c8:0e:97:
                    07:da:71:b7:83:b0:41:c5:54:1b:8b:78:6f:c2:75:
                    13:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E1:C3:1A:C6:6E:2F:F3:E7:E8:4F:05:88:7D:14:35:4C:3F:8F:F1
            X509v3 Authority Key Identifier:
                keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e33352e3132312e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.35.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:3f:1d:5b:b1:93:38:65:f1:16:95:e9:8e:0a:75:50:f3:c3:
         3c:39:a6:c9:33:8b:e0:70:55:75:9e:22:45:28:d7:c3:fe:61:
         bf:89:9a:e4:21:ef:fc:18:a7:f7:c3:49:6f:9e:13:a5:5a:6d:
         8e:3f:6e:d5:66:ba:d5:97:36:ca:0b:9c:4c:d0:62:e8:2a:68:
         2f:db:6e:3c:ef:f9:54:d1:5b:07:d6:c6:6b:c2:33:93:22:f4:
         33:7a:1c:f2:3f:6c:39:7e:64:17:e9:19:0c:af:ab:27:e0:e5:
         1e:84:cf:95:ac:8b:3e:f0:95:17:1d:89:90:b0:9c:27:a8:df:
         71:0c:bf:f5:14:88:2d:3a:09:6d:6a:4c:f3:d2:d5:53:4a:39:
         b1:93:77:3a:b5:b4:34:02:a8:28:14:7c:40:a6:04:bb:cd:c6:
         18:a8:3c:e1:53:95:98:8d:c7:2e:19:04:16:54:3c:da:91:6e:
         4b:19:ae:c7:e2:b0:8b:87:98:a5:61:05:b6:bc:03:84:81:e8:
         e8:90:87:8d:3a:97:c0:9a:03:cc:17:7c:c5:a2:e4:d2:da:16:
         d2:50:46:ae:85:02:75:4d:98:96:cd:e2:21:f8:dc:b8:bd:bc:
         d6:b4:bc:71:8a:e1:1c:87:b4:29:f1:4e:00:09:8c:75:82:8f:
         c1:b0:6b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----