Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS150398.roa
File:                     AS150398.roa (raw, json)
Hash identifier:          zv4j/zOZDAkKDGDMpbr4zLimruSP4WJ6gIv2en0Qtv8=
Subject key identifier:   E8:5D:2E:05:2D:55:8A:5F:96:A8:29:D4:A8:BB:1E:6D:91:BE:E0:5E
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       1F4AE11EAC92F9BBB34E37F9D90C092C84BDC2DA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS150398.roa
Signing time:             Tue 27 Dec 2022 14:44:43 +0000
ROA not before:           Tue 27 Dec 2022 14:39:43 +0000
ROA not after:            Tue 26 Dec 2023 14:44:43 +0000
asID:                     150398
IP address blocks:        141.11.204.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4a:e1:1e:ac:92:f9:bb:b3:4e:37:f9:d9:0c:09:2c:84:bd:c2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec 27 14:39:43 2022 GMT
            Not After : Dec 26 14:44:43 2023 GMT
        Subject: CN=E85D2E052D558A5F96A829D4A8BB1E6D91BEE05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:cf:93:27:2d:9d:a5:15:9a:be:2b:e9:10:
                    8b:fd:16:4b:60:c1:66:17:31:41:b6:f6:1a:6e:3c:
                    b0:96:89:eb:5c:b9:9a:65:e0:e3:f7:19:c0:27:32:
                    6c:9f:94:95:d8:fb:8d:cf:30:d3:e9:db:3b:c8:cd:
                    86:2a:9f:6c:6f:5d:f4:28:d0:be:0e:72:64:b6:c0:
                    73:56:ee:1a:41:18:61:80:87:66:b2:07:01:eb:f0:
                    91:e8:c8:f3:6f:bf:3d:be:a4:0f:ea:5c:83:24:ce:
                    c6:06:0c:6b:78:c5:ae:b8:e6:c0:e0:f5:0a:1a:a9:
                    7b:f6:a3:92:bb:eb:66:82:83:a7:fd:79:9d:71:e7:
                    b1:f8:4d:9b:52:53:c8:52:f6:a6:00:98:d6:83:81:
                    7c:d9:53:f2:cb:0a:02:5c:a3:9b:cc:cc:1b:99:14:
                    c6:9b:78:69:7a:bb:dd:29:1e:4a:9e:f4:4e:8d:93:
                    46:1b:c9:92:28:c8:51:41:56:49:85:0c:19:4a:20:
                    b4:6a:e0:4c:e3:4c:11:ee:79:8c:07:ab:4e:59:6d:
                    91:89:01:88:1f:87:86:fb:6f:14:c0:d1:2b:fe:be:
                    93:0b:ea:07:dd:80:bc:ac:f0:78:bb:19:9d:ac:0e:
                    cc:a9:9c:ba:e1:d8:37:ed:70:4d:eb:84:37:86:f0:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5D:2E:05:2D:55:8A:5F:96:A8:29:D4:A8:BB:1E:6D:91:BE:E0:5E
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS150398.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:d9:45:7f:ec:8a:c3:7b:b9:1f:a7:49:7e:58:f6:78:8c:40:
         c6:fb:00:5f:43:00:0f:bf:9c:4c:e0:a5:c9:b3:8e:ae:1b:fd:
         3c:b0:1e:83:2c:ce:db:b0:de:1b:8f:ff:36:4f:12:b0:2a:3d:
         be:88:88:75:93:21:ed:2e:cd:6f:f7:22:f3:9e:85:43:04:a5:
         2b:75:11:a9:b3:e6:d6:7a:56:88:58:40:85:b1:e8:b2:9d:bf:
         a4:b5:09:88:d0:79:84:dc:6c:0b:2f:23:c4:b9:cd:d1:4b:cc:
         4d:b3:76:62:39:b0:2e:19:9f:03:82:70:94:39:c5:e7:bd:0f:
         97:93:2e:05:bd:99:f1:f2:d8:d3:bf:c1:11:40:34:7d:ac:58:
         90:9a:0d:1f:c1:73:cf:02:6f:06:8f:bf:9f:8d:0c:4c:b9:3f:
         47:01:41:ad:4a:42:dc:64:1a:1c:83:24:7b:15:55:4f:86:03:
         52:b8:29:3e:45:88:96:3d:85:04:27:77:7a:22:8a:0e:4b:75:
         23:ad:b2:03:51:f9:69:75:26:4d:ad:c9:c8:b1:2b:ff:87:f3:
         4d:38:05:42:2d:e4:39:dd:1d:83:eb:e7:86:9d:40:45:f6:19:
         2f:1c:6f:97:bc:25:10:33:64:46:d9:5a:29:d1:88:94:d8:28:
         e0:8e:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----