Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203377.roa
File:                     AS203377.roa (raw, json)
Hash identifier:          w1+cHWNLkYFVF63LmBiFpJDU1vMqW5YJB373tW1iG3E=
Subject key identifier:   70:BF:D5:76:D3:19:79:C6:85:73:23:DE:A6:C8:73:C9:5E:BB:17:FE
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       3A0BAB1594BD50AD794F7F4F3C4A6A4E724EAC22
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203377.roa
Signing time:             Tue 12 Sep 2023 11:47:29 +0000
ROA not before:           Tue 12 Sep 2023 11:42:29 +0000
ROA not after:            Tue 10 Sep 2024 11:47:29 +0000
asID:                     203377
IP address blocks:        141.11.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0b:ab:15:94:bd:50:ad:79:4f:7f:4f:3c:4a:6a:4e:72:4e:ac:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Sep 12 11:42:29 2023 GMT
            Not After : Sep 10 11:47:29 2024 GMT
        Subject: CN=70BFD576D31979C6857323DEA6C873C95EBB17FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:98:83:3c:a7:fe:f2:52:2f:35:c1:87:f9:
                    5d:bf:6c:3f:47:0c:3a:94:66:74:38:41:85:69:62:
                    75:7a:00:de:12:97:e5:f5:98:9b:08:b2:70:8b:5a:
                    1c:f5:b4:a2:ec:d3:28:2f:0c:06:75:86:aa:cc:9a:
                    9b:d2:ea:78:5e:e1:2f:a6:41:71:95:fd:7d:9b:61:
                    ab:fb:02:87:bd:cb:f3:de:7e:c9:8c:b7:db:1c:2f:
                    4d:84:6e:91:ba:41:3e:85:52:1b:8b:43:aa:f9:f8:
                    34:3b:8f:2d:32:84:8a:87:48:84:c5:a1:d5:f9:72:
                    02:69:ae:d4:78:c9:63:13:10:3c:e1:13:11:b7:2f:
                    bb:26:d5:35:67:22:41:74:c0:49:cc:19:21:01:fa:
                    fc:53:0e:e7:cb:7e:1a:22:2e:69:61:9f:d7:76:42:
                    2a:a7:e2:4f:98:9f:24:b1:fe:04:92:31:dd:41:2a:
                    9f:5d:80:09:9f:62:f4:1a:a5:5a:0a:fc:dd:4d:8e:
                    f2:77:cf:5e:57:23:8a:7c:50:73:43:ec:df:2f:ca:
                    93:e5:60:e8:6d:6c:91:7a:5a:e9:0f:44:39:8e:ec:
                    a9:22:7e:14:a0:8f:46:ef:6e:41:62:bd:2c:58:c5:
                    8e:7b:6c:11:f2:94:e5:04:41:14:05:f9:0d:58:9d:
                    ae:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BF:D5:76:D3:19:79:C6:85:73:23:DE:A6:C8:73:C9:5E:BB:17:FE
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203377.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:2c:31:b0:24:23:e9:c8:74:5e:ae:a5:c9:75:43:55:9d:a5:
         3c:a4:1b:18:24:3b:b6:e3:75:ca:85:cc:2d:e3:7c:50:91:b1:
         ff:25:dc:a9:28:ed:58:9b:e4:37:9d:09:2c:f2:17:ca:21:79:
         68:79:b9:8f:11:88:fe:43:8c:75:46:00:1e:26:45:9d:83:d2:
         57:a9:98:dd:bb:c2:e3:6d:c6:34:c3:82:4b:bc:fd:83:6d:e3:
         68:4e:29:d8:cb:c5:b3:45:2d:5c:e4:37:9f:57:f1:71:d0:24:
         eb:c9:d1:ab:da:8d:4a:63:bc:89:bc:00:b9:7c:86:0a:96:65:
         a9:53:cf:ed:d3:b3:e1:61:ef:47:39:3d:d8:d0:5a:e7:6b:ef:
         6e:53:52:cb:0d:4d:19:a7:48:b8:49:b0:af:ef:af:34:03:19:
         34:57:3e:04:c4:38:ca:2e:67:ce:3a:26:44:cd:92:bf:a1:22:
         5a:7d:06:1b:ed:d3:b1:39:3d:c6:cd:63:80:52:13:2a:8d:fc:
         d6:db:0e:75:aa:d9:ec:9e:4a:48:4b:62:af:b1:bd:44:1e:c0:
         e1:ab:58:ce:9e:9f:f6:27:bd:53:92:46:52:f3:72:fa:b0:30:
         28:29:b1:4c:2d:ad:9d:03:aa:64:1d:f6:c3:03:f1:e2:c9:84:
         ce:c3:2e:db
-----BEGIN CERTIFICATE-----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