Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS142430.roa
File:                     AS142430.roa (raw, json)
Hash identifier:          c0fB4o33xjHw1KDRJKCWzzRKGxElqvwJL+n+7CUFask=
Subject key identifier:   11:41:E2:05:7B:66:09:96:19:A1:DD:AA:D1:35:FD:47:1B:A0:B8:DD
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       68EA2A524CA9FEA492E8DBFA5D8B9FAB3E359E02
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS142430.roa
Signing time:             Tue 27 Dec 2022 14:44:37 +0000
ROA not before:           Tue 27 Dec 2022 14:39:37 +0000
ROA not after:            Tue 26 Dec 2023 14:44:37 +0000
asID:                     142430
IP address blocks:        141.11.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ea:2a:52:4c:a9:fe:a4:92:e8:db:fa:5d:8b:9f:ab:3e:35:9e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec 27 14:39:37 2022 GMT
            Not After : Dec 26 14:44:37 2023 GMT
        Subject: CN=1141E2057B66099619A1DDAAD135FD471BA0B8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1e:e1:14:4e:f5:0c:1f:a5:a3:87:ac:17:ee:
                    66:9b:a7:8b:98:42:b9:78:c5:53:4c:70:51:e8:22:
                    79:b2:7f:c4:22:93:dc:71:34:b7:3f:0d:46:c5:db:
                    74:55:1b:04:25:f4:c0:4c:e4:dd:e4:92:99:d2:ad:
                    ec:cc:a4:9c:13:03:45:fa:9f:6b:81:c1:bb:a8:77:
                    38:14:26:d4:1d:04:6a:c7:33:e2:34:f5:dc:18:48:
                    5d:18:e9:ec:0b:ff:9a:6a:0b:1b:23:b5:48:1a:74:
                    47:fe:d5:02:30:83:6a:57:96:78:d6:58:20:9f:e8:
                    b2:1a:fe:c0:ef:82:f7:a6:68:97:32:f3:4b:e8:f9:
                    5a:e6:61:00:90:a5:4d:05:bc:7f:fe:4a:13:14:39:
                    11:c0:d9:0e:51:47:ca:12:7b:90:ed:1c:e4:ef:0a:
                    82:70:60:25:8a:d2:fb:c8:c9:01:ef:51:33:fd:f7:
                    16:85:46:e4:93:dc:02:7a:d9:45:df:41:81:36:8b:
                    b7:96:de:e6:d2:a8:95:a7:b2:e4:06:06:09:29:42:
                    fc:73:55:28:82:37:8b:c0:e8:97:0f:f6:22:bd:5d:
                    a1:29:89:e6:29:4f:cf:6b:05:60:e5:b0:a3:b5:21:
                    fa:8d:02:4c:e2:db:1b:52:9d:71:7d:2f:a8:b6:91:
                    c2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:41:E2:05:7B:66:09:96:19:A1:DD:AA:D1:35:FD:47:1B:A0:B8:DD
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS142430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:19:31:b6:eb:7a:9a:b7:d6:ae:7d:77:0b:07:9c:2b:ef:11:
         0a:ca:e7:d0:ee:51:be:5d:5d:12:7c:3c:fd:9e:0d:34:06:95:
         dc:df:09:2c:f7:6b:67:7d:2a:6a:a7:cd:43:49:4c:0b:e9:54:
         dd:df:bf:98:be:11:c1:81:35:ee:88:cc:19:5f:6d:97:c8:cc:
         e7:57:58:ae:20:79:a4:eb:2d:9e:d4:52:15:40:0a:f7:78:df:
         b0:f1:55:ea:a7:d1:4b:6d:8d:27:05:00:8b:78:2b:4a:bc:42:
         b7:e0:66:e2:0d:34:2c:09:b8:bb:e0:3b:9e:89:61:7f:45:31:
         0f:79:ad:fe:4d:5b:13:37:6a:a6:ee:af:fc:ad:7d:1b:ec:9c:
         2e:81:fc:02:a9:be:48:d4:da:51:e0:78:04:70:d5:35:35:ed:
         4a:0a:da:08:9b:1e:ff:bb:ea:de:0f:23:30:f2:6c:49:b0:1e:
         cd:2b:22:47:50:3c:89:bb:bc:85:08:e1:59:f9:ad:97:86:fb:
         f6:b7:3d:8c:ca:9b:ab:b5:f5:70:7d:f1:6d:50:81:35:35:f7:
         b0:dc:85:81:2c:43:c6:e1:13:d8:be:8b:be:1a:7f:69:3c:ca:
         32:15:d6:9e:52:aa:22:23:87:49:fc:7d:78:f4:5c:95:0d:9c:
         21:f1:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org