Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32342d3234203d3e203537303433.roa
File:                     34352e3134312e32302e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier:          VKXhNrOQiuhWVNgytWvUk0nt55tlSM2FF1gRALi3izk=
Subject key identifier:   AB:7A:E6:9B:09:F9:90:FF:C8:E3:74:2A:5A:9A:41:62:3E:3C:E6:A2
Certificate issuer:       /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial:       4E779FB4F2CC82EB542CD8E509730618FF48836B
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32342d3234203d3e203537303433.roa
Signing time:             Sat 29 Apr 2023 09:04:37 +0000
ROA not before:           Sat 29 Apr 2023 08:59:37 +0000
ROA not after:            Sat 27 Apr 2024 09:04:37 +0000
asID:                     57043
IP address blocks:        45.141.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:77:9f:b4:f2:cc:82:eb:54:2c:d8:e5:09:73:06:18:ff:48:83:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
        Validity
            Not Before: Apr 29 08:59:37 2023 GMT
            Not After : Apr 27 09:04:37 2024 GMT
        Subject: CN=AB7AE69B09F990FFC8E3742A5A9A41623E3CE6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:11:4a:8e:b2:56:76:48:76:2d:7a:ab:0b:
                    f1:21:5a:0d:99:ed:de:73:7d:eb:da:98:7f:25:63:
                    6d:a2:97:20:48:7d:cb:b5:97:1d:6d:71:c5:60:5a:
                    c2:58:50:2f:b3:c8:e0:22:02:44:cb:f0:c8:73:59:
                    06:4a:29:a6:e9:8d:2d:b9:05:28:5b:0e:ff:85:ee:
                    cf:46:ca:26:cd:0d:7c:34:f4:8a:da:f6:23:cf:56:
                    c7:a1:f6:4f:78:f5:13:02:ac:4c:e4:5d:06:e7:08:
                    e3:f8:5e:2a:e7:e8:9f:5c:e4:70:83:54:c5:cb:ee:
                    45:e5:ed:d4:dc:55:34:7b:38:76:82:00:bc:25:ee:
                    9e:41:14:0c:a8:9d:f2:3b:10:51:ba:18:66:1e:e3:
                    a3:32:43:24:f5:81:47:fb:7d:0d:64:e2:d4:a2:f7:
                    b5:23:a3:f0:3a:43:bd:50:92:73:d7:0d:0f:e9:f3:
                    a3:58:62:67:6c:45:da:b4:38:62:bc:b2:2b:83:fa:
                    93:74:f3:76:3d:7f:b1:ba:22:d1:7c:17:2d:05:ed:
                    8a:3a:8e:f7:da:9f:b7:9c:bb:c2:cc:a6:b8:41:43:
                    25:25:a9:d4:c5:c9:4d:eb:57:bd:c5:35:2a:bd:97:
                    f3:93:5e:8a:44:e6:a5:7e:cd:33:04:2e:73:c2:c8:
                    51:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7A:E6:9B:09:F9:90:FF:C8:E3:74:2A:5A:9A:41:62:3E:3C:E6:A2
            X509v3 Authority Key Identifier:
                keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32342d3234203d3e203537303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:69:ab:a2:3a:57:30:e3:0f:49:7a:7b:62:1d:13:24:18:3d:
         8f:24:73:d5:d3:9b:37:7e:66:a0:78:84:52:64:ae:c0:b3:95:
         5d:ee:64:ee:d9:b4:65:08:6a:42:fe:39:9f:f5:b0:20:9c:e2:
         f7:ff:84:d5:2d:f1:0a:08:43:5a:fb:de:2a:a9:a2:f7:00:35:
         df:67:06:bb:7c:4d:e1:51:b9:62:eb:15:38:2e:6b:4c:76:42:
         aa:07:ff:be:9a:69:92:4a:77:66:fe:f9:b6:f7:e1:fb:70:5c:
         fc:dc:78:2b:44:a7:9c:1e:18:4e:fd:0c:ac:f6:90:a9:c7:1a:
         59:ea:11:1a:ac:19:7d:d7:5c:02:9e:15:09:3c:37:a3:7b:d6:
         e6:69:ff:98:1a:c4:a9:4c:b1:b4:1c:5a:ba:90:71:3a:69:70:
         74:ed:87:91:09:2d:40:6d:d8:e9:34:40:7a:d3:6f:15:24:83:
         91:1f:d7:fc:51:ee:ac:96:f4:60:e8:bc:74:3c:eb:39:34:db:
         8b:9b:c2:45:3a:88:32:4a:e9:c8:70:72:eb:a6:81:26:f8:98:
         ad:89:80:75:ac:c6:65:d6:2a:1e:46:de:93:26:6c:a7:ea:b6:
         52:0d:68:9d:2d:8b:77:2e:74:24:ad:31:4e:9c:0a:3e:56:27:
         00:a6:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----