Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS147186.roa
File:                     AS147186.roa (raw, json)
Hash identifier:          NWLbq1N3M3nNBKRdngqGe0q5whPz7fhkNJS5f5k1NDs=
Subject key identifier:   6F:02:E8:37:93:AD:72:CD:6E:24:4D:C3:9E:C0:19:E6:75:0C:B7:AE
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       7D3F6286D24191EB6570E53FE9D92DD7E6352C90
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS147186.roa
Signing time:             Fri 14 Apr 2023 11:30:00 +0000
ROA not before:           Fri 14 Apr 2023 11:25:00 +0000
ROA not after:            Fri 12 Apr 2024 11:30:00 +0000
asID:                     147186
IP address blocks:        45.155.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3f:62:86:d2:41:91:eb:65:70:e5:3f:e9:d9:2d:d7:e6:35:2c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Apr 14 11:25:00 2023 GMT
            Not After : Apr 12 11:30:00 2024 GMT
        Subject: CN=6F02E83793AD72CD6E244DC39EC019E6750CB7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:3a:69:84:1f:5f:d4:c2:5c:f2:40:14:95:
                    1a:82:0c:2d:70:f0:df:60:e3:b9:cc:8a:03:e8:34:
                    87:c9:3e:9c:44:a4:2c:98:d9:34:d3:54:53:db:c4:
                    64:4e:56:a0:3c:b8:94:81:16:50:e6:1a:4f:79:4d:
                    17:ba:6d:b8:8a:22:11:72:ee:c5:df:e8:59:f8:db:
                    61:c6:69:0f:f4:49:ba:99:23:9e:d5:e7:d7:5a:98:
                    4d:02:24:00:fa:c3:11:c4:41:13:b4:47:c6:27:66:
                    49:da:3c:6a:ee:4b:da:52:12:a3:1a:15:9c:09:ff:
                    5a:8d:8a:d8:b2:cb:68:61:23:35:c5:c9:8d:0d:83:
                    fa:79:6c:99:20:51:24:cb:20:1f:d2:4a:54:12:5f:
                    89:3c:bd:36:df:13:1b:9d:9a:7d:40:6c:cf:de:d1:
                    63:89:60:69:50:3f:1f:39:e9:98:7a:3c:6e:ca:a7:
                    fd:d2:fa:82:2c:91:68:75:d3:08:e9:c7:e1:d9:15:
                    56:62:7d:90:4f:a3:f7:f8:78:f0:71:47:0b:f2:c7:
                    e8:44:45:1e:ea:c1:10:fb:95:fa:71:dd:4a:18:6e:
                    2d:bf:f4:4a:f7:ed:7c:1c:ea:48:90:c8:c3:08:19:
                    4c:d0:bb:60:d8:6c:67:bb:02:e1:82:2a:48:d3:96:
                    72:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:02:E8:37:93:AD:72:CD:6E:24:4D:C3:9E:C0:19:E6:75:0C:B7:AE
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS147186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:9c:dd:34:9c:fc:6e:6f:15:7f:87:8e:da:b2:b4:33:05:98:
         86:65:18:e7:e4:26:9e:ce:89:66:09:42:13:90:18:a7:ef:f8:
         18:38:b6:1d:ff:c7:22:f6:24:15:b7:f1:5f:b0:d3:01:6e:df:
         f5:2b:a2:30:98:9b:01:f8:b3:64:8b:fd:bf:38:34:fc:70:c3:
         9e:a6:65:fc:18:91:a1:47:2b:fb:a5:25:65:69:c0:ae:77:94:
         3f:b1:b2:e5:53:3f:7a:36:36:2f:a5:7d:57:fc:ae:b3:a0:5b:
         f5:5c:95:96:d6:c3:42:3c:ed:28:64:f8:d4:10:d2:bb:09:f6:
         a4:d8:10:cb:d6:39:91:da:88:a6:ff:69:e9:2b:5b:03:3b:f7:
         f5:61:1f:ac:08:d7:c5:db:68:a4:54:21:4a:00:97:a7:da:76:
         25:ad:21:a1:e1:ce:c6:bc:e1:8b:a5:39:98:b1:82:3c:56:5f:
         d2:e0:4d:e1:c4:81:1b:2b:fe:d5:69:0f:71:66:a2:1d:e7:d3:
         09:c2:74:f3:6b:45:5d:67:a5:e4:50:17:22:59:3f:9a:d1:cd:
         77:a0:a9:30:cb:78:79:e8:2a:ed:a1:7b:27:1a:dc:f4:36:95:
         4e:77:8c:f2:bb:09:5c:3b:77:08:b3:40:54:e5:ab:fd:81:d6:
         a6:06:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----