Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS140155.roa
File:                     AS140155.roa (raw, json)
Hash identifier:          oQ7dYfM0plWwBzbXkDXModCJUbKibXIfgghVBzlqOBA=
Subject key identifier:   50:CC:83:AF:7A:EC:19:13:BB:41:7A:30:E1:DD:D6:55:A9:97:61:55
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       39C07648E49AAE8F30D67A61B282859C67F7FED8
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS140155.roa
Signing time:             Fri 05 May 2023 05:48:10 +0000
ROA not before:           Fri 05 May 2023 05:43:10 +0000
ROA not after:            Fri 03 May 2024 05:48:10 +0000
asID:                     140155
IP address blocks:        185.155.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c0:76:48:e4:9a:ae:8f:30:d6:7a:61:b2:82:85:9c:67:f7:fe:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: May  5 05:43:10 2023 GMT
            Not After : May  3 05:48:10 2024 GMT
        Subject: CN=50CC83AF7AEC1913BB417A30E1DDD655A9976155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b2:58:86:b8:42:fd:e2:a3:61:eb:55:c4:71:
                    8c:bb:11:7f:01:5c:a6:a5:b5:50:af:cb:7a:25:e6:
                    f9:fd:a2:90:c5:bb:e9:43:5f:58:89:fd:d9:43:74:
                    65:2c:55:d3:04:91:31:2b:56:ef:3d:2b:9c:24:2f:
                    9a:c0:1a:cf:c0:5d:47:ee:09:ba:f6:3f:a9:e7:85:
                    d3:3e:16:91:db:21:ff:18:b3:2c:f6:e3:00:52:16:
                    4e:26:68:5d:8a:14:a7:67:b0:dc:91:3a:47:d5:7d:
                    07:99:90:87:96:26:c7:46:60:0e:63:10:b2:23:6e:
                    0e:0f:a9:1e:c6:79:b9:cd:ea:fd:bf:24:a9:e2:80:
                    4c:ba:cf:36:90:2a:44:8e:e3:54:b0:f6:e4:72:aa:
                    6e:13:5a:3c:31:95:9f:03:cd:65:ae:c0:93:69:e7:
                    27:29:c2:d0:79:5d:1f:70:c8:50:19:2d:aa:10:c6:
                    6b:24:0d:46:f0:10:e4:93:85:45:7e:1f:bc:b2:38:
                    ce:bd:0b:73:06:76:27:4a:cd:18:04:71:ef:76:ee:
                    0b:74:ab:92:47:74:85:0b:93:9e:da:0a:47:a2:d4:
                    3c:d9:c0:bb:2a:76:ec:76:48:22:eb:dc:21:3b:cc:
                    a9:d6:79:a3:53:ae:02:96:2b:50:4f:ca:5b:5f:08:
                    f6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CC:83:AF:7A:EC:19:13:BB:41:7A:30:E1:DD:D6:55:A9:97:61:55
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS140155.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:40:73:05:30:96:db:7b:e0:66:c9:10:50:01:2d:05:96:
         be:55:ec:e4:b7:e1:c4:57:b8:01:27:af:5f:cf:7e:c5:9d:4c:
         f4:f7:b2:51:4a:40:20:6b:4c:0d:5a:42:ec:7f:00:58:87:cd:
         af:a7:62:a7:76:98:5c:7e:8b:05:1f:f9:a8:b0:90:92:00:07:
         6b:a1:89:bb:a1:a0:d9:e1:b3:ec:e6:5e:c9:38:31:ce:0c:3b:
         e5:a0:45:79:8b:3b:c2:5f:a8:d2:87:79:28:3a:4e:ea:6d:2f:
         9a:e3:27:86:05:6d:3e:86:28:93:f8:03:a2:a0:db:5c:15:37:
         ef:9e:2b:b4:86:f7:da:31:b4:96:f4:62:45:b5:48:38:e9:7a:
         2c:47:83:15:b5:b8:cf:54:22:c3:c1:ef:47:bc:ce:d9:e6:43:
         f9:2c:22:4d:39:a8:6a:30:de:f7:60:54:51:52:33:96:f6:7f:
         7a:c6:4e:8f:08:c1:b2:34:c6:8a:3c:ff:26:12:d9:27:56:05:
         5d:8a:eb:c1:ba:f6:b0:df:2e:2c:00:b2:b4:0c:2a:75:8a:91:
         bc:f8:9a:15:7b:17:2b:19:2a:2c:ba:a0:65:37:ab:b4:69:07:
         8e:d0:a0:07:8e:8c:65:8a:ee:23:1d:f3:8b:7c:c2:c4:77:0c:
         b7:4a:be:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org