Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133302e3130352e302f32342d3234203d3e2030.roa
File:                     34352e3133302e3130352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          jXQNkyAxd5SKUoQF4HwOoPd1lo2N/uYRev5QGlWQDmQ=
Subject key identifier:   FE:ED:B3:45:09:40:B1:DC:7B:26:C5:71:04:69:F5:DD:BB:7E:D2:D0
Certificate issuer:       /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial:       10B152C92CD43B38DA7145FFC6962277350F962D
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133302e3130352e302f32342d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:27:29 +0000
ROA not before:           Mon 27 Mar 2023 08:22:29 +0000
ROA not after:            Mon 25 Mar 2024 08:27:29 +0000
asID:                     0
IP address blocks:        45.130.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b1:52:c9:2c:d4:3b:38:da:71:45:ff:c6:96:22:77:35:0f:96:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
        Validity
            Not Before: Mar 27 08:22:29 2023 GMT
            Not After : Mar 25 08:27:29 2024 GMT
        Subject: CN=FEEDB3450940B1DC7B26C5710469F5DDBB7ED2D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:60:59:2a:d8:28:36:89:3b:0f:48:00:0b:
                    90:0d:57:c1:6f:a8:1c:9b:c4:eb:e5:2b:8e:99:57:
                    90:b4:c2:02:3b:57:a6:da:c6:71:7a:03:ca:83:17:
                    69:60:e6:ea:a0:6a:d1:04:b5:de:46:22:0c:81:b7:
                    ee:91:f4:70:29:9f:36:85:a3:53:2a:39:bb:fa:5a:
                    a1:84:c1:f2:04:c0:84:19:26:5f:71:3c:ce:e0:64:
                    16:77:47:49:b2:f4:9f:74:2a:60:46:fa:8f:47:ee:
                    e6:03:59:29:64:3b:08:b2:bb:9d:5a:38:70:07:65:
                    01:b8:6a:c4:a2:f2:bd:ee:17:27:3a:25:93:03:e3:
                    e6:4b:e2:a7:ad:d1:84:c8:a0:70:14:65:1a:d9:71:
                    66:37:f9:34:21:3a:75:e7:1f:8c:e5:26:cf:c8:b4:
                    1d:c7:90:c8:28:2a:13:95:62:08:21:d1:71:57:ff:
                    11:eb:42:5f:10:91:3a:87:9d:67:9f:1e:97:2b:5f:
                    4f:8e:42:5d:fa:39:4f:e6:29:5c:85:50:6d:0e:ae:
                    98:96:0e:e5:c1:11:f4:95:09:6f:f3:7d:f6:d9:07:
                    d8:b8:bd:e7:47:d2:2f:3f:37:2b:66:49:d8:c5:9e:
                    fb:b7:54:f4:b1:47:eb:21:a2:35:dc:e3:37:7b:51:
                    a1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:ED:B3:45:09:40:B1:DC:7B:26:C5:71:04:69:F5:DD:BB:7E:D2:D0
            X509v3 Authority Key Identifier:
                keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133302e3130352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:97:ca:dc:fe:5a:75:6e:a7:34:99:41:fb:d5:03:c0:0c:27:
         06:ad:ce:34:15:fa:e7:04:c9:4c:8b:de:15:01:44:57:0e:94:
         33:ef:24:69:ed:c2:88:80:6b:7a:ed:b8:9e:38:39:b0:52:95:
         b1:ab:79:0e:9c:5c:39:e0:bc:a7:bd:73:9d:dc:87:df:91:e0:
         04:12:c3:fc:c5:c2:f3:f8:c3:f6:d1:42:ea:f6:48:b1:b3:b8:
         18:4e:e2:70:91:d4:11:21:40:e7:5c:75:4c:d4:b0:4f:ef:36:
         49:34:2e:b2:c6:36:c2:f6:df:77:f7:9e:58:34:0a:fc:bc:c5:
         63:6c:e0:57:b7:5a:3e:ad:1a:3a:43:09:7e:9a:89:07:88:83:
         95:8c:8b:ce:68:85:c0:b3:f0:93:96:93:f8:40:48:07:82:bf:
         fc:ed:c9:4c:83:70:c8:4a:77:f8:0b:4e:c8:49:29:38:0a:84:
         f3:17:83:7e:fb:08:e0:83:d6:84:79:63:6d:bc:d6:41:92:63:
         9d:f5:ab:7e:a6:5b:d2:c6:0e:de:4e:02:26:a5:1f:5d:00:d2:
         b6:83:f3:47:43:92:40:ce:3d:80:35:7a:43:ff:69:93:73:ff:
         84:f2:89:44:dc:76:38:e6:4e:5b:a9:1d:99:48:c9:5e:ed:5c:
         27:c0:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----