Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS30823.roa
File:                     AS30823.roa (raw, json)
Hash identifier:          +neDXzZduHWKs5y0NLjnroomlpN0IH42c3jj1DtTQE8=
Subject key identifier:   A1:61:44:55:23:E9:E8:ED:F0:F8:6B:34:AA:80:86:92:B9:0E:F2:38
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       1E35FC679F1757ECF74DA0F08D267D07237EAB19
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS30823.roa
Signing time:             Thu 29 Dec 2022 12:26:20 +0000
ROA not before:           Thu 29 Dec 2022 12:21:20 +0000
ROA not after:            Thu 28 Dec 2023 12:26:20 +0000
asID:                     30823
IP address blocks:        193.164.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:35:fc:67:9f:17:57:ec:f7:4d:a0:f0:8d:26:7d:07:23:7e:ab:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Dec 29 12:21:20 2022 GMT
            Not After : Dec 28 12:26:20 2023 GMT
        Subject: CN=A161445523E9E8EDF0F86B34AA808692B90EF238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c2:38:49:dc:e0:e0:78:07:4f:3a:da:b8:5f:
                    72:2b:4b:94:ef:a0:c1:40:2d:17:1c:a0:79:af:e6:
                    de:8c:10:1b:8f:53:71:05:f7:aa:7a:17:f3:1f:30:
                    af:cb:4a:e3:5b:9d:db:bf:e4:a5:d4:32:78:af:06:
                    46:ce:7c:82:9d:12:48:ae:dc:e4:82:c8:f8:ed:7a:
                    66:89:3a:69:d9:73:e9:35:a3:86:af:41:27:73:e5:
                    1c:91:9b:ee:a3:97:9b:94:8b:53:b0:d6:8e:3f:ce:
                    a1:5d:1b:0d:86:e4:31:bf:cd:09:1a:3a:97:37:2b:
                    b5:2d:5f:15:7d:be:9a:b9:d9:7f:87:a0:01:44:f6:
                    c7:f2:11:43:20:a8:a4:d0:20:35:c0:18:db:36:76:
                    2c:fb:06:f9:cd:b2:df:25:80:44:07:77:21:d9:a1:
                    db:d9:fd:3b:b9:6e:08:5b:6c:13:c5:68:97:7e:f8:
                    30:63:14:7d:fb:01:6b:17:ab:67:66:75:41:e7:db:
                    58:b1:c3:50:e5:9e:95:6d:a7:7e:20:43:31:9e:c8:
                    c9:34:3d:e7:dc:f5:fc:7e:fb:08:4c:d1:f8:31:2c:
                    e9:5a:a7:73:a2:68:9c:12:08:b1:1e:73:28:46:37:
                    ff:9e:53:e3:df:ab:39:b6:d6:96:36:4b:b0:98:1e:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:61:44:55:23:E9:E8:ED:F0:F8:6B:34:AA:80:86:92:B9:0E:F2:38
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS30823.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.164.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:88:bb:22:bf:5b:d5:93:e1:a4:dc:5a:0d:97:83:ec:e1:64:
         48:10:f2:f9:f0:fb:07:e1:6e:4f:50:9c:00:ba:71:9c:6f:e8:
         9a:15:5e:1e:9f:b5:f8:d8:30:2f:f5:55:da:16:69:bc:98:21:
         07:40:dd:79:73:cf:76:84:84:72:1d:94:38:b3:4c:9f:8d:72:
         3b:46:a3:16:37:e2:f0:44:2d:f2:83:ed:c6:27:3c:75:a0:aa:
         93:6b:f5:c7:a8:94:56:5f:37:c1:0b:36:04:1f:63:f4:75:03:
         52:99:9a:0e:f9:20:c3:9a:27:d4:a0:18:7c:7b:46:69:f3:a4:
         af:83:67:e1:36:c8:90:d6:8f:14:90:2a:68:4e:19:3f:f6:0a:
         2f:35:ca:8d:52:6a:c2:98:d1:82:23:57:71:98:67:03:41:9a:
         3b:ba:16:54:f9:ec:52:2a:d0:e9:1e:c2:14:d9:ee:ad:9c:bd:
         eb:3d:ee:f8:8d:c9:3e:2c:f2:59:e1:06:5b:25:0e:23:52:97:
         d2:7c:ab:51:60:c2:6f:09:ee:27:d9:8b:34:60:5d:22:c9:97:
         8a:1e:f3:11:f3:29:2b:cd:a4:73:e1:33:db:95:fc:9b:a6:f1:
         3d:8f:21:c0:46:79:6e:65:a6:ff:2c:ee:22:c4:2b:33:fe:e5:
         4e:13:bb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org