Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32342d3234203d3e203233343730.roa
File:                     3137362e3131382e3136302e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          xi5OwNFrTCO8j063Msjh0cjj5qiI06ePEgvvCCwGMYw=
Subject key identifier:   1F:EF:6E:F0:8E:62:FB:5F:50:4E:41:DA:59:17:97:D6:CF:A5:13:08
Certificate issuer:       /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial:       149CAFE824985A389F35C9C7F40CB1B1A17753F0
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 19 Dec 2023 00:02:27 +0000
ROA not before:           Mon 18 Dec 2023 23:57:27 +0000
ROA not after:            Tue 17 Dec 2024 00:02:27 +0000
asID:                     23470
IP address blocks:        176.118.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9c:af:e8:24:98:5a:38:9f:35:c9:c7:f4:0c:b1:b1:a1:77:53:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
        Validity
            Not Before: Dec 18 23:57:27 2023 GMT
            Not After : Dec 17 00:02:27 2024 GMT
        Subject: CN=1FEF6EF08E62FB5F504E41DA591797D6CFA51308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:16:d8:f2:00:8f:71:a2:7a:f1:7b:80:cc:
                    3f:69:5c:50:7a:83:2b:5d:fb:60:6d:8b:5e:2a:da:
                    53:a6:2b:1a:06:cf:de:2d:88:89:c0:2e:2d:e8:ea:
                    e9:3a:4f:b3:d2:a1:5f:0d:21:e3:47:65:43:e8:e9:
                    24:75:c0:60:f6:45:a4:22:13:57:0c:e5:c7:1b:dc:
                    07:dc:d4:bc:c2:8c:38:aa:5c:d6:01:5c:c7:bb:92:
                    6a:de:c8:8e:1e:89:4e:a3:91:5b:b0:b2:18:59:5a:
                    1c:cf:f2:cc:6d:54:ac:b4:ee:39:f5:69:4b:aa:be:
                    04:49:2b:c7:3d:2f:54:3b:43:29:d5:1b:20:c9:41:
                    58:51:bc:e5:d5:f0:72:1b:8d:a7:e4:55:1b:84:b3:
                    fc:32:0e:56:4f:d6:d3:b4:9d:c3:de:06:13:a3:db:
                    6f:bc:93:3b:31:2f:4b:4d:2d:d0:7f:41:f1:13:d1:
                    e4:6d:c9:ca:e3:5c:9a:50:c9:de:60:8d:28:e6:30:
                    dd:cd:b2:1d:5f:11:e5:5e:cd:2f:54:c7:e4:b7:5b:
                    14:b8:39:dd:ac:ec:14:4e:4f:45:37:b2:5c:b0:a1:
                    a7:5b:23:97:63:de:6d:75:0d:28:22:5e:2d:be:61:
                    1f:0f:34:fa:6d:18:af:49:8a:f9:49:ba:bf:67:11:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EF:6E:F0:8E:62:FB:5F:50:4E:41:DA:59:17:97:D6:CF:A5:13:08
            X509v3 Authority Key Identifier:
                keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:44:5b:a1:2b:40:ef:a0:05:6d:eb:d6:7f:0c:21:6e:61:51:
         29:e6:5a:d3:0a:4b:d6:bc:b3:f3:be:22:6f:a1:ad:5c:73:61:
         f3:cb:43:c8:24:f8:80:28:4d:b6:6d:cf:57:12:73:49:fd:b4:
         c8:5e:36:46:fe:35:7a:02:43:32:ae:75:79:ca:c3:32:f6:a0:
         23:3f:93:8b:3e:8a:e5:46:2e:90:77:15:cf:60:e4:3f:e2:01:
         d7:bd:f1:bd:c5:d9:e3:d8:59:5e:f5:c1:4e:a9:b7:35:66:65:
         d7:bb:b1:2e:78:d1:b5:84:69:91:52:f9:c8:16:af:54:98:2a:
         45:da:5b:8a:ec:19:71:5f:b5:49:f4:0a:31:9e:cf:bb:17:65:
         3f:af:a4:ce:cb:30:db:97:9d:f6:bc:73:4f:55:0c:0f:dc:ab:
         5f:00:92:74:aa:4f:da:a6:26:f3:ef:99:19:ac:d5:ae:dd:2b:
         be:0e:83:7a:05:75:12:b5:c0:11:08:7a:c5:59:e4:d1:bf:f9:
         5f:92:70:a5:78:9a:39:13:17:6c:43:fa:3a:24:84:7e:0e:fe:
         2b:3d:7b:df:01:da:71:6e:fd:f5:88:79:e5:4a:17:7f:ed:84:
         e4:02:24:bb:31:60:7b:93:15:c2:26:1b:95:9e:7c:bf:fe:6f:
         92:f8:f9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----