Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS55286.roa
File:                     AS55286.roa (raw, json)
Hash identifier:          1x2RX8Cm5lAVHXGb54xuBpOdKsw/GGuN83jb8AZJDas=
Subject key identifier:   86:C4:FF:F8:2B:13:79:48:60:62:99:14:69:4B:82:0F:9C:2C:C9:AF
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       5A9171DC292F63F52AB22EF300043F9A5B8E8A65
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS55286.roa
Signing time:             Mon 30 Oct 2023 17:36:52 +0000
ROA not before:           Mon 30 Oct 2023 17:31:52 +0000
ROA not after:            Mon 28 Oct 2024 17:36:52 +0000
asID:                     55286
IP address blocks:        192.166.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:91:71:dc:29:2f:63:f5:2a:b2:2e:f3:00:04:3f:9a:5b:8e:8a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Oct 30 17:31:52 2023 GMT
            Not After : Oct 28 17:36:52 2024 GMT
        Subject: CN=86C4FFF82B13794860629914694B820F9C2CC9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:e9:99:c7:df:25:d5:8b:c7:7c:82:39:0b:
                    43:63:33:12:01:6a:92:54:a5:bd:d1:d3:59:1f:86:
                    94:75:e5:d2:21:35:07:3e:d7:3e:e8:11:1f:15:84:
                    81:42:f0:f8:8e:a6:c1:86:c3:40:c8:db:72:fc:3b:
                    d9:9f:45:a7:c3:51:17:12:f8:ef:44:3e:2b:e1:31:
                    e4:38:87:9b:bb:55:ea:de:83:2f:5a:e4:9d:a1:c4:
                    1a:0d:e4:c0:c6:07:af:8f:94:bb:8a:80:cb:36:47:
                    96:df:f4:04:f4:32:f3:12:8c:1e:17:00:5b:df:31:
                    34:6f:fe:44:7b:5f:0c:85:87:93:a4:c9:39:68:5c:
                    51:44:36:d1:bc:bc:d5:56:41:c9:1d:f4:af:7c:32:
                    de:76:f2:00:f1:42:49:e9:6d:a4:64:96:e4:5e:1e:
                    0a:35:fc:0d:64:61:67:c8:bc:4c:f0:26:9f:0e:97:
                    66:2c:cc:be:75:62:b5:59:3d:70:c2:7c:7a:19:39:
                    2d:28:d7:d5:48:5a:79:70:c3:2e:65:96:32:96:41:
                    62:0d:9c:47:3a:cc:51:d3:e4:c8:5b:99:fa:6f:1c:
                    da:a6:73:f2:b1:ea:d9:49:6e:43:bd:ca:c4:8e:e0:
                    1a:38:36:7b:65:95:64:32:01:68:62:5b:87:a5:da:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C4:FF:F8:2B:13:79:48:60:62:99:14:69:4B:82:0F:9C:2C:C9:AF
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS55286.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:a7:85:11:bc:d4:1a:cf:ce:cb:27:3a:ea:26:a3:a1:e7:6a:
         d3:b9:dc:3d:93:f2:f4:1f:ff:28:f3:a9:97:fc:11:2f:04:48:
         46:bf:77:46:7a:8c:40:8b:0a:cf:10:f4:c6:45:0e:0f:16:b9:
         a7:d6:24:e5:52:22:2b:69:ce:04:d8:40:f0:f6:15:17:2f:65:
         38:25:54:55:24:51:76:7a:31:3f:25:9e:dc:2e:87:03:fc:d1:
         35:e3:bd:d6:f0:fe:42:cc:87:cc:d7:26:7b:fb:a9:b2:c9:36:
         84:52:ff:d0:12:50:38:78:61:4c:b8:e2:9e:79:a2:09:71:45:
         cb:f1:7f:0f:9a:30:a8:4a:eb:bf:56:5c:56:9f:67:9a:62:12:
         3b:3a:54:61:16:6e:7d:a3:08:6a:13:13:8b:c2:6f:28:c8:1a:
         28:1a:bd:82:7a:47:89:0b:32:d5:90:89:a7:31:7b:29:3b:6d:
         b5:47:56:87:71:2e:7d:87:fa:f7:93:54:45:c5:ee:a9:3f:8d:
         5d:0b:a7:57:44:2d:9c:c6:f9:f1:d9:c2:17:66:bc:aa:1f:de:
         8a:46:68:e0:40:82:e2:53:50:6f:11:67:63:75:73:64:28:d7:
         e2:b4:1f:50:3e:96:50:f3:e2:c5:f7:98:af:39:5e:ee:f0:7e:
         36:4d:58:8e
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 15 11:17:41 2023 by rpki-client on console-ams.rpki-client.org