Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39312e3139362e3232322e302f32332d3234203d3e2030.roa
File:                     39312e3139362e3232322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier:          5z9LP+KJBBaFHKjrY2brmHwhrRm1vKdzpJSZtJecybA=
Subject key identifier:   33:6D:54:42:9C:B7:42:B1:88:10:4F:4B:A4:31:4F:18:52:E7:B6:68
Certificate issuer:       /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial:       3CE52B5DF998532FED78B07D547C24F96F7103E5
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39312e3139362e3232322e302f32332d3234203d3e2030.roa
Signing time:             Mon 27 Mar 2023 08:27:33 +0000
ROA not before:           Mon 27 Mar 2023 08:22:33 +0000
ROA not after:            Mon 25 Mar 2024 08:27:33 +0000
asID:                     0
IP address blocks:        91.196.222.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e5:2b:5d:f9:98:53:2f:ed:78:b0:7d:54:7c:24:f9:6f:71:03:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
        Validity
            Not Before: Mar 27 08:22:33 2023 GMT
            Not After : Mar 25 08:27:33 2024 GMT
        Subject: CN=336D54429CB742B188104F4BA4314F1852E7B668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:50:07:cf:6b:6b:5b:f3:af:41:f2:e3:a4:
                    13:c3:f0:35:b0:56:c5:57:49:2a:e7:6f:31:50:a9:
                    68:bb:98:8d:2a:4d:e1:da:91:9a:d9:37:36:69:46:
                    7b:c0:5f:a2:cd:2c:0c:b2:d6:15:84:c5:55:36:91:
                    de:d5:38:f1:ba:19:db:d9:ae:e0:55:b4:90:19:df:
                    a9:96:08:a9:e8:44:79:64:d0:45:3b:1d:8d:15:0b:
                    d9:1d:61:e6:34:2e:30:b3:b7:cd:86:b3:f3:eb:5d:
                    a1:1b:48:ca:12:4b:bf:17:71:96:ef:6e:07:41:2c:
                    34:3a:fc:17:69:4d:f2:7d:2b:09:b9:bc:92:56:7d:
                    b5:c0:36:59:18:cc:06:17:dc:91:58:05:bb:03:72:
                    db:88:01:69:77:41:87:74:92:6f:8a:20:0c:49:58:
                    51:a5:8c:08:df:03:06:14:e1:46:b1:95:69:ae:b5:
                    d7:39:3a:e0:20:bb:d6:56:9b:00:0d:f1:42:98:a3:
                    34:d7:8f:fd:40:79:35:55:e9:22:ab:4f:e6:a4:d2:
                    8c:9b:6e:b0:36:e3:6d:89:a6:01:1d:70:da:87:2c:
                    88:02:46:45:9f:69:e9:1c:76:b4:35:0c:33:58:31:
                    5d:d8:64:cf:89:55:22:0b:7b:e4:7f:36:bd:e2:5e:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6D:54:42:9C:B7:42:B1:88:10:4F:4B:A4:31:4F:18:52:E7:B6:68
            X509v3 Authority Key Identifier:
                keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39312e3139362e3232322e302f32332d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:4f:3a:63:17:49:4b:e0:05:74:db:c5:5b:48:1f:f9:bd:7a:
         0d:34:cf:99:10:31:8b:5f:2e:a6:b7:e8:c2:cc:08:5d:cf:c7:
         5b:81:ab:3e:0c:e0:11:a3:f9:50:b9:cf:21:bc:cd:23:69:f2:
         2f:23:3a:7b:ba:b7:c0:ff:e7:46:82:60:6d:e6:af:eb:4b:f2:
         bf:30:d6:6b:b6:53:39:8a:a9:14:d8:b7:da:f5:80:6c:af:4c:
         c7:cc:52:be:60:7f:3c:53:0f:2d:85:dd:60:38:e5:30:75:99:
         ba:a2:25:b2:4d:ca:03:99:79:23:54:d5:7e:ea:1d:f3:f5:16:
         df:1a:5c:22:5e:6c:ea:f7:fd:9f:42:f9:02:02:be:b9:a2:6e:
         45:79:7e:e2:d3:6a:fc:c3:3e:e3:2d:c9:5f:87:97:0a:16:16:
         29:ac:ad:7b:ec:14:ce:a3:b9:3c:6f:25:a7:70:92:7b:20:0f:
         50:30:5a:d5:b7:6a:dc:4e:d8:fd:d0:64:14:ca:ca:a1:19:3e:
         d9:9a:5f:19:cf:0e:74:fe:72:c4:b2:d3:8a:68:11:22:4f:21:
         f9:2b:61:1a:1d:d4:e9:38:5b:b7:6f:e4:e8:0c:da:4f:74:78:
         e3:cb:cb:5c:d8:09:72:9c:99:d6:77:e6:c6:ed:7c:3d:5a:9d:
         45:d6:c0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----