Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS51765.roa
File:                     AS51765.roa (raw, json)
Hash identifier:          oE4TzBnjwYm3FhJ7iJZzOyS8y/HGHiQPEzo0/eKFjqc=
Subject key identifier:   40:2F:A0:D1:0E:CF:D1:48:8C:AA:25:72:8D:54:A8:12:27:DA:FE:B6
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       317E33E63051FF6D358ABA6D6F6D2F9360622858
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS51765.roa
Signing time:             Tue 02 May 2023 10:03:14 +0000
ROA not before:           Tue 02 May 2023 09:58:14 +0000
ROA not after:            Tue 30 Apr 2024 10:03:14 +0000
asID:                     51765
IP address blocks:        185.155.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7e:33:e6:30:51:ff:6d:35:8a:ba:6d:6f:6d:2f:93:60:62:28:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: May  2 09:58:14 2023 GMT
            Not After : Apr 30 10:03:14 2024 GMT
        Subject: CN=402FA0D10ECFD1488CAA25728D54A81227DAFEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:a3:66:2f:87:e6:b9:5f:1d:d3:f2:08:a4:
                    d8:1e:96:93:ce:b4:95:b3:ba:ec:3a:7e:0e:b6:10:
                    77:d7:1b:18:e5:99:ac:a2:18:49:07:50:f5:6a:38:
                    18:85:5e:07:e6:b3:06:30:d5:9f:a0:91:a2:10:f2:
                    0b:b9:fa:3d:69:64:50:6b:bd:3e:c1:2f:19:c7:15:
                    1b:88:7f:e2:91:ea:89:81:30:da:0c:f5:33:01:1b:
                    99:78:07:0d:9d:e3:7e:92:95:f0:d5:72:f6:61:32:
                    5c:2e:0d:96:46:3c:54:0a:a3:05:fb:65:44:f1:93:
                    ed:b6:fb:55:90:a7:bc:20:1e:6a:c3:7b:37:b6:91:
                    95:c6:76:fd:a6:6c:29:33:58:5d:79:58:ea:59:b0:
                    88:a6:a0:e3:f6:c8:52:03:ea:e2:24:cc:b2:e7:62:
                    23:b1:84:7d:a4:6a:3e:54:9c:59:4e:0e:84:8e:51:
                    51:3a:4d:98:d8:15:a6:85:cb:c6:bd:a5:22:96:a8:
                    1b:35:4c:78:47:34:6a:77:fa:de:18:a3:ff:e2:f1:
                    95:85:cb:e6:34:0e:0e:d1:1a:dd:17:58:d1:19:26:
                    65:ae:8e:e2:9e:1f:f6:b2:4d:50:4c:2a:bc:5b:04:
                    8a:9b:4b:53:fc:5b:01:ae:8c:c7:95:90:e5:f7:35:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2F:A0:D1:0E:CF:D1:48:8C:AA:25:72:8D:54:A8:12:27:DA:FE:B6
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS51765.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:7e:8a:1f:da:c1:3d:53:3e:77:3d:f0:79:13:21:a8:d4:55:
         7c:40:72:95:98:22:18:3a:2d:4d:4f:a8:6a:6d:cc:7d:50:c7:
         cb:c6:30:dd:3f:49:25:96:95:97:cc:54:15:0d:1f:91:9d:5f:
         17:85:99:37:c4:a4:ba:8d:3c:8e:c1:ca:21:76:00:59:0b:2c:
         64:60:51:4d:40:c6:7a:ea:f1:58:93:27:2b:f7:32:e1:cd:8f:
         fe:ab:4b:72:91:17:f0:dd:5e:f1:0f:eb:ac:0d:43:4e:db:3f:
         80:53:d0:cb:f9:85:d3:85:25:82:86:90:7c:dd:d6:98:77:81:
         80:35:be:75:27:85:7a:a1:3c:05:b7:b2:38:8f:7b:e8:81:98:
         41:d1:15:1d:7f:3f:81:d7:4e:60:9d:f5:d7:19:d5:be:0b:8b:
         7a:69:fd:48:f7:55:6d:04:d5:cb:19:d0:d1:05:7f:a5:42:79:
         6b:d9:84:1e:8a:80:43:01:93:e3:21:83:e7:f7:5b:14:6d:27:
         d7:ec:17:1c:43:8e:8a:af:26:64:45:ad:47:e1:f8:58:13:f5:
         9a:ee:aa:04:fb:86:d4:db:2e:8d:e2:6d:e0:80:df:72:8f:69:
         13:7f:a9:db:ae:5c:3b:aa:82:7f:11:2c:e6:9a:4d:d4:4f:3a:
         4e:c2:8e:f2
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 3 11:06:49 2023 by rpki-client on console-ams.rpki-client.org