Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS44547.roa
File:                     AS44547.roa (raw, json)
Hash identifier:          06H1XbPhAAhzmCPceVazbS0mxv/xASA99F1c/ehBujw=
Subject key identifier:   AE:38:15:14:F5:00:63:6B:F9:F9:3B:1D:8F:10:50:61:AB:76:EA:A1
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       1DBD0A2671A091671129979CB0D75BBEE556D590
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS44547.roa
Signing time:             Wed 02 Aug 2023 14:45:46 +0000
ROA not before:           Wed 02 Aug 2023 14:40:46 +0000
ROA not after:            Wed 31 Jul 2024 14:45:46 +0000
asID:                     44547
IP address blocks:        185.155.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bd:0a:26:71:a0:91:67:11:29:97:9c:b0:d7:5b:be:e5:56:d5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Aug  2 14:40:46 2023 GMT
            Not After : Jul 31 14:45:46 2024 GMT
        Subject: CN=AE381514F500636BF9F93B1D8F105061AB76EAA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d5:28:cd:b2:ea:4b:6c:ea:e8:2f:ac:97:e1:
                    80:d3:07:fc:32:22:68:c3:fc:c8:db:c0:20:03:dd:
                    df:d7:12:b3:6e:37:aa:03:dc:c8:9f:78:7d:64:27:
                    fd:83:95:e8:92:d1:63:55:e5:6d:18:34:25:45:ec:
                    db:ab:15:b8:68:f8:0e:50:48:e0:45:a3:e1:bd:92:
                    bf:de:c0:84:e7:56:1c:4a:59:1f:c5:93:0e:96:58:
                    7f:4b:94:48:0d:60:8d:29:d7:bd:f1:06:af:b6:0e:
                    29:c1:70:75:18:a3:5d:2b:a8:de:a9:1c:c8:c4:7e:
                    0f:f5:9d:b9:10:1b:74:4a:68:05:b3:80:7e:c9:1a:
                    ae:7b:dc:27:04:0b:eb:e4:24:fb:cc:ae:41:09:d3:
                    c0:85:4e:41:c5:f5:69:5f:4b:33:33:3f:33:d2:84:
                    15:73:68:8a:c2:fd:9d:b4:7d:37:09:60:1c:29:9e:
                    96:3a:10:32:ed:4d:88:e6:2a:64:62:e7:a8:e7:4e:
                    9d:82:1b:94:39:16:9a:29:45:21:2f:0c:31:28:bd:
                    f0:ce:90:76:39:13:56:82:b5:10:d6:ea:60:70:39:
                    0f:d2:18:89:f8:44:38:6e:09:83:85:85:bc:37:e3:
                    bc:7f:06:b9:41:18:c3:22:e8:2e:9e:49:e0:d9:0c:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:38:15:14:F5:00:63:6B:F9:F9:3B:1D:8F:10:50:61:AB:76:EA:A1
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS44547.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:28:bf:4b:55:6c:b2:8d:5c:6f:33:49:71:3b:ed:78:a7:c8:
         3c:48:97:6c:1f:d7:5a:a9:fd:6b:7d:28:ab:4e:e5:49:bb:76:
         39:3a:8c:3a:7c:db:8b:2d:a7:01:cc:0e:e2:f3:7d:78:fa:4d:
         d7:73:30:1e:a2:43:fe:1c:86:ac:cf:03:fa:9b:ec:08:c6:5b:
         90:00:0f:53:93:8e:bc:9e:5b:81:1d:f8:f1:b2:2a:60:dd:1c:
         97:61:47:af:e9:13:1d:11:77:0f:7e:31:63:66:59:b0:7a:8f:
         af:52:ff:69:6e:9c:48:d7:75:90:d4:66:a0:27:19:87:59:40:
         dd:36:53:c6:ae:b4:b4:3f:d1:1d:8b:c2:0c:e7:84:ba:ee:4e:
         ee:da:7f:bf:7c:87:30:16:59:61:e7:e1:de:6e:5b:b1:c2:41:
         b9:55:e9:ab:a0:aa:45:d4:a3:4d:c0:14:9d:73:35:d0:de:16:
         fc:6e:51:f0:d0:f0:50:32:11:7c:fe:2e:49:4f:a1:1e:35:25:
         7e:6b:56:fb:f9:2f:8a:64:44:89:02:d0:1e:5d:ff:21:bf:2b:
         f9:10:23:f1:99:4b:5c:0e:89:70:a9:a5:98:01:ee:a8:c4:26:
         b0:52:cc:a3:b5:e4:6e:db:45:4b:14:39:31:e1:0b:18:c8:65:
         89:ac:a9:0e
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 17 00:47:54 2023 by rpki-client on console-ams.rpki-client.org