Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3135352e34322e302f32342d3234203d3e20313336373837.roa
File:                     34352e3135352e34322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          7jOHovbt7KggzYj6OBxNPaIaqMtI06bPqMgN14M0cqs=
Subject key identifier:   98:14:F4:7A:F5:37:90:00:1C:E3:F0:D0:B3:CB:67:18:2B:D1:73:80
Certificate issuer:       /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial:       0B3A2F37550443EA35E0BDB245A1380100D23F75
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3135352e34322e302f32342d3234203d3e20313336373837.roa
Signing time:             Mon 19 Jun 2023 16:34:13 +0000
ROA not before:           Mon 19 Jun 2023 16:29:13 +0000
ROA not after:            Mon 17 Jun 2024 16:34:13 +0000
asID:                     136787
IP address blocks:        45.155.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3a:2f:37:55:04:43:ea:35:e0:bd:b2:45:a1:38:01:00:d2:3f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
        Validity
            Not Before: Jun 19 16:29:13 2023 GMT
            Not After : Jun 17 16:34:13 2024 GMT
        Subject: CN=9814F47AF53790001CE3F0D0B3CB67182BD17380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:60:cb:b8:a6:25:c7:ce:fb:23:6d:c2:2b:
                    d7:46:f7:55:a8:43:38:87:d6:67:84:57:06:71:79:
                    77:53:67:58:33:16:59:27:37:43:68:1c:a2:72:4e:
                    f1:c6:49:20:a5:c2:d5:95:08:6a:ab:dd:4b:92:b3:
                    8f:42:6e:b3:aa:4d:10:28:75:94:ad:7f:e1:e1:4a:
                    4e:d8:c2:40:cf:d8:ef:14:00:48:19:1d:bb:3b:1e:
                    68:86:c0:62:53:5c:6b:1f:68:a8:ee:64:fa:43:c1:
                    26:94:5b:ca:3c:64:e9:d2:1b:db:0d:c2:d5:47:fc:
                    8d:7f:ed:48:d8:9f:fc:76:5b:1f:91:c9:43:9c:a9:
                    0e:a2:dd:d8:91:ee:36:b7:8e:e1:30:0d:f2:68:54:
                    a5:40:0d:45:c2:de:76:48:ec:0f:99:86:e8:ab:95:
                    6b:af:69:35:3f:01:12:5a:01:ac:2c:d0:3b:57:88:
                    a1:a6:21:71:66:c8:a3:16:c3:e6:d2:7a:74:41:07:
                    01:9c:66:23:9c:b0:7c:e9:b3:3a:9b:eb:ae:30:6e:
                    c3:fe:a9:7f:05:24:84:c9:10:2e:81:1c:d1:12:6f:
                    82:49:11:98:a0:3d:03:ea:b9:f3:d7:28:d2:cb:56:
                    4e:92:92:2e:fe:18:19:21:8d:29:ea:f0:4b:fa:94:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:14:F4:7A:F5:37:90:00:1C:E3:F0:D0:B3:CB:67:18:2B:D1:73:80
            X509v3 Authority Key Identifier:
                keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3135352e34322e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:97:ba:98:52:51:3e:35:b7:6f:1d:bd:8b:2a:3a:b4:d8:ee:
         cd:eb:20:87:1e:8e:e8:cc:96:53:73:33:0e:f2:a5:43:b3:c7:
         6b:70:f3:e6:cd:c4:45:83:7f:27:ba:64:36:04:0a:5d:67:e8:
         db:cb:5b:89:ee:71:af:92:8c:e6:8f:ed:e2:63:05:8d:5c:61:
         d3:62:f1:c7:cc:5b:c6:0b:68:25:44:5d:30:44:6b:f2:88:5f:
         c6:06:2d:1d:2f:9b:54:8b:55:6a:98:e3:3b:69:b6:49:42:bb:
         67:b3:b9:90:65:8d:12:13:8b:29:fc:5d:d5:92:e6:83:33:7e:
         09:3b:1f:7f:29:0e:3e:7b:35:ad:3c:17:27:da:ba:ab:28:d8:
         d0:03:89:5e:92:4f:d5:dc:0c:aa:59:4a:2f:c0:f5:ac:7d:e7:
         74:f5:25:c6:7e:ad:cb:6a:37:13:b8:82:3d:a4:d2:ae:a1:e0:
         9b:18:56:03:32:37:26:fa:5a:7b:39:02:ba:fb:00:60:c0:f2:
         a4:7b:70:ec:c9:bc:bc:40:4c:3c:fc:56:85:42:5d:d4:7e:44:
         6b:c0:8c:90:0a:61:b1:21:ff:36:21:41:3f:d8:c0:a7:49:a9:
         dc:85:85:18:4d:14:c6:14:cf:7e:3c:ab:4b:41:3b:8f:cd:fd:
         2e:fc:dd:cd
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUCzovN1UEQ+o14L2yRaE4AQDSP3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJjMmE4MzU0Njg5YWVjMmE3NGZjYTE0OTQ0OTI3NjIx
YmEyN2M5NDAeFw0yMzA2MTkxNjI5MTNaFw0yNDA2MTcxNjM0MTNaMDMxMTAvBgNV
BAMTKDk4MTRGNDdBRjUzNzkwMDAxQ0UzRjBEMEIzQ0I2NzE4MkJEMTczODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/mDLuKYlx877I23CK9dG91Wo
QziH1meEVwZxeXdTZ1gzFlknN0NoHKJyTvHGSSClwtWVCGqr3UuSs49CbrOqTRAo
dZStf+HhSk7YwkDP2O8UAEgZHbs7HmiGwGJTXGsfaKjuZPpDwSaUW8o8ZOnSG9sN
wtVH/I1/7UjYn/x2Wx+RyUOcqQ6i3diR7ja3juEwDfJoVKVADUXC3nZI7A+Zhuir
lWuvaTU/ARJaAaws0DtXiKGmIXFmyKMWw+bSenRBBwGcZiOcsHzpszqb664wbsP+
qX8FJITJEC6BHNESb4JJEZigPQPqufPXKNLLVk6Ski7+GBkhjSnq8Ev6lHghAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUmBT0evU3kAAc4/DQs8tnGCvRc4AwHwYDVR0j
BBgwFoAUEsKoNUaJrsKnT8oUlEknYhuifJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzcvMTJDMkE4MzU0Njg5QUVDMkE3NEZDQTE0OTQ0OTI3NjIxQkEyN0M5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VzS29OVWFKcnNLblQ4b1VsRWtuWWh1
aWZKUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzcvMzQzNTJlMzEzNTM1MmUzNDMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LZsqMA0GCSqGSIb3DQEBCwUAA4IBAQCgl7qYUlE+NbdvHb2LKjq02O7N6yCHHo7o
zJZTczMO8qVDs8drcPPmzcRFg38numQ2BApdZ+jby1uJ7nGvkozmj+3iYwWNXGHT
YvHHzFvGC2glRF0wRGvyiF/GBi0dL5tUi1VqmOM7abZJQrtns7mQZY0SE4sp/F3V
kuaDM34JOx9/KQ4+ezWtPBcn2rqrKNjQA4lekk/V3AyqWUovwPWsfed09SXGfq3L
ajcTuII9pNKuoeCbGFYDMjcm+lp7OQK6+wBgwPKke3Dsyby8QEw8/FaFQl3UfkRr
wIyQCmGxIf82IUE/2MCnSanchYUYTRTGFM9+PKtLQTuPzf0u/N3N
-----END CERTIFICATE-----