Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS140947.roa
File:                     AS140947.roa (raw, json)
Hash identifier:          QbSZeGKpeP/dtKowsQWuyfuUsvm/9yK0slfpYrGixqQ=
Subject key identifier:   83:F3:9B:D1:15:8F:7C:E5:13:A4:BD:55:4B:7C:DD:89:6F:3B:33:A4
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       42EC3CB9791A33162FB85D553C25D4E08DF14370
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS140947.roa
Signing time:             Tue 27 Dec 2022 14:44:44 +0000
ROA not before:           Tue 27 Dec 2022 14:39:44 +0000
ROA not after:            Tue 26 Dec 2023 14:44:44 +0000
asID:                     140947
IP address blocks:        141.11.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ec:3c:b9:79:1a:33:16:2f:b8:5d:55:3c:25:d4:e0:8d:f1:43:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec 27 14:39:44 2022 GMT
            Not After : Dec 26 14:44:44 2023 GMT
        Subject: CN=83F39BD1158F7CE513A4BD554B7CDD896F3B33A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:d9:f6:24:7b:da:3a:9e:c1:f9:ab:7b:38:
                    76:73:10:c1:92:61:c6:09:4a:cb:e9:55:f2:0e:f6:
                    b5:43:2f:0a:a2:09:f9:17:bc:b7:6e:95:f8:0b:37:
                    df:12:67:6a:1a:63:e8:e0:f1:c8:e0:68:94:08:24:
                    70:68:ba:73:e6:ca:08:8f:d9:eb:e4:b9:71:b4:d9:
                    78:b2:32:16:71:33:53:b9:3f:72:17:ce:d0:49:ee:
                    33:30:0f:d3:2c:28:a4:a4:ff:79:ff:5a:83:19:fb:
                    04:59:b7:ef:4b:7b:1f:b9:58:d7:a9:ab:1c:75:5f:
                    47:de:01:1f:d7:62:5b:37:05:12:ba:0b:cd:c7:cf:
                    ba:c4:3f:85:7d:d0:5d:37:53:35:f2:68:ab:bb:f5:
                    fb:31:5e:b6:39:89:2b:28:d8:8c:54:d2:f5:6a:84:
                    8b:ec:35:49:dc:38:e1:e3:a7:ed:17:4b:72:7e:f2:
                    a3:74:14:4f:49:22:88:f8:35:c7:ce:d1:18:9a:43:
                    d1:d5:fd:b5:86:52:6a:55:16:21:2d:3e:91:06:ee:
                    3e:d1:0f:f4:ea:77:95:5f:64:e0:53:a9:50:b7:9a:
                    b7:81:e8:2b:76:4e:73:03:f4:9e:c0:7a:70:7f:f6:
                    fa:6f:fe:83:06:76:6d:d9:99:b4:63:e6:c6:34:7d:
                    2f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F3:9B:D1:15:8F:7C:E5:13:A4:BD:55:4B:7C:DD:89:6F:3B:33:A4
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS140947.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:7e:37:e0:34:ed:8f:6f:68:ca:db:a1:7d:b6:2d:4a:0f:b6:
         b9:60:16:23:47:2a:98:71:6f:e7:cb:b5:34:69:1c:48:bf:ce:
         8d:8c:e3:74:89:71:c1:6e:b7:09:d3:01:62:86:6b:c5:e1:65:
         ae:cd:db:bc:06:4b:c5:2c:80:4f:41:df:17:ff:b1:87:78:18:
         ef:d7:80:c6:b5:79:60:e9:40:18:67:5f:56:38:65:b9:7f:53:
         89:a8:03:2a:fb:0b:de:d1:7b:32:85:3d:d1:46:f9:ee:68:b5:
         1a:c2:fe:10:9b:26:94:fb:fa:00:55:27:a2:df:2d:95:55:e7:
         f8:be:e5:04:d5:64:9a:50:f4:c0:9c:f9:88:61:37:ac:da:84:
         e4:ea:a7:99:78:72:f6:f2:25:aa:83:cb:ff:01:57:bb:42:c7:
         d7:d1:96:83:81:59:2d:e2:f7:1a:18:05:d0:99:e5:88:6c:56:
         2a:96:0d:b4:31:63:b6:ba:f2:64:5a:81:08:47:76:49:46:b9:
         b0:f1:96:ed:64:7c:d4:f1:72:f0:97:2b:9b:4f:61:84:69:90:
         1c:5c:03:f8:71:4c:8a:ec:81:27:06:19:17:ab:ff:dd:79:da:
         46:59:1a:33:c1:6e:9b:59:86:90:2c:ea:a2:76:cb:b9:97:67:
         18:9d:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----