Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38342e3133362e302f32332d3234203d3e2030.roa
File:                     34352e38342e3133362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          0PAomYYLW9perWzAJwBtub+R2fHdpgHG4n8Zv1WxG7A=
Subject key identifier:   8E:61:C4:E7:25:F8:24:B4:75:BC:DF:0A:D8:3A:91:8F:2F:A6:75:81
Certificate issuer:       /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial:       3D7937DE4FDA599748C1555AB2981626ED5F345B
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38342e3133362e302f32332d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:27:30 +0000
ROA not before:           Mon 27 Mar 2023 08:22:30 +0000
ROA not after:            Mon 25 Mar 2024 08:27:30 +0000
asID:                     0
IP address blocks:        45.84.136.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:79:37:de:4f:da:59:97:48:c1:55:5a:b2:98:16:26:ed:5f:34:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
        Validity
            Not Before: Mar 27 08:22:30 2023 GMT
            Not After : Mar 25 08:27:30 2024 GMT
        Subject: CN=8E61C4E725F824B475BCDF0AD83A918F2FA67581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:8e:7f:1a:f0:e0:27:b1:73:73:cb:ba:1b:
                    3e:45:1c:19:88:8a:c6:6a:74:1b:e5:2c:36:ae:af:
                    83:4f:63:e5:6c:5c:f5:3b:e4:9b:2b:7d:b8:a2:d9:
                    b8:61:8a:3b:e7:79:71:4a:35:f6:a6:f0:e1:a1:db:
                    ea:2e:07:9e:93:0c:9f:14:69:2f:69:f1:00:bc:66:
                    5d:d8:49:0b:53:32:0b:b0:da:fb:8f:dd:89:97:b5:
                    8b:96:5b:52:aa:b9:83:cd:9c:8e:91:5e:36:34:ed:
                    97:fc:49:c2:ab:b6:94:71:e4:03:f8:b0:e0:bd:1a:
                    c5:4a:7b:0a:04:2c:6c:11:f5:dc:f0:ff:6b:fd:f3:
                    08:38:c4:5b:cd:f2:7a:16:54:18:83:2d:8a:86:63:
                    2a:2a:fa:13:e8:ed:b9:1a:71:e2:60:2b:48:ee:3a:
                    39:02:21:dc:59:f6:91:b8:ec:4e:55:5c:cf:6a:94:
                    29:e0:90:a2:33:ae:8b:88:36:46:67:42:9b:f5:71:
                    95:dc:8a:1c:9f:12:6b:08:93:0d:fb:9e:f7:d4:ba:
                    c9:a1:79:ca:d4:50:5d:96:eb:28:2a:b1:8d:4a:81:
                    34:3d:0e:8e:12:ee:f7:e9:ba:fc:70:5c:c1:a6:ed:
                    dc:6b:85:cc:17:05:e0:84:32:d4:e9:1a:c3:4a:ee:
                    c0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:61:C4:E7:25:F8:24:B4:75:BC:DF:0A:D8:3A:91:8F:2F:A6:75:81
            X509v3 Authority Key Identifier:
                keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38342e3133362e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:67:22:b7:76:41:76:98:88:b3:2d:9f:37:66:f2:53:c2:7f:
         80:a1:21:3c:af:b5:80:d4:0b:75:eb:60:3f:58:4a:40:12:6c:
         b0:7a:e5:4d:cc:a4:e5:7c:e0:d5:95:43:8a:a5:63:a2:bc:d6:
         80:1a:a2:56:fb:14:0b:53:ee:3b:ab:3b:ea:69:ef:c2:c6:7f:
         96:a0:84:19:84:5d:56:01:5c:98:af:3c:95:80:42:9b:42:71:
         76:b5:ba:3c:cb:f5:ef:8a:a6:f8:69:80:63:31:6d:39:16:5b:
         32:11:7f:f0:1a:ce:ae:66:86:9d:be:26:3e:2e:f2:f7:0f:df:
         b8:cd:28:dc:32:ce:65:92:27:80:6f:80:98:17:54:60:d9:4f:
         ae:ee:cf:8e:17:f6:11:05:99:d5:b2:25:04:d3:76:38:00:97:
         de:9d:5b:2f:da:fb:56:e8:19:7e:25:b4:aa:f8:4f:23:8d:02:
         0e:9c:5f:ce:40:1a:86:85:ae:7f:78:45:0b:53:cc:a6:8c:36:
         c1:36:ba:43:3a:fa:0c:d1:9c:44:e9:31:2c:57:8d:b7:f9:10:
         91:d5:c6:8a:f0:7d:3a:b1:2d:54:d4:2a:26:9d:12:a8:74:ef:
         65:2f:f6:60:dd:ed:54:95:1b:6a:9c:2f:82:49:5f:2b:3c:d9:
         04:32:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----