Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203511.roa
File:                     AS203511.roa (raw, json)
Hash identifier:          n4spHynd6jMsz+DQcJy4I5uSS2SoKxRG30jKOJgXBzk=
Subject key identifier:   94:5E:2B:10:AD:F4:EC:02:66:21:C5:44:22:B4:EA:49:09:8C:16:62
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       15B76B612A86BC6A83F603D0EB3F136A15E1B9BE
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203511.roa
Signing time:             Fri 30 Jun 2023 22:20:10 +0000
ROA not before:           Fri 30 Jun 2023 22:15:10 +0000
ROA not after:            Fri 28 Jun 2024 22:20:10 +0000
asID:                     203511
IP address blocks:        141.11.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b7:6b:61:2a:86:bc:6a:83:f6:03:d0:eb:3f:13:6a:15:e1:b9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Jun 30 22:15:10 2023 GMT
            Not After : Jun 28 22:20:10 2024 GMT
        Subject: CN=945E2B10ADF4EC026621C54422B4EA49098C1662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:ef:9b:21:ed:76:a1:72:4a:17:70:d4:2b:
                    18:0c:52:56:33:3f:8a:d1:32:75:df:ee:8c:94:26:
                    68:83:1c:28:3a:4a:96:58:a5:05:ee:37:98:96:d5:
                    59:1b:49:8f:a2:00:bc:7a:3e:88:35:63:95:01:4e:
                    72:86:75:36:8d:73:3b:89:06:95:7c:f1:09:d0:ec:
                    d1:1f:2e:9b:23:2e:f3:2a:04:01:d8:ee:1c:2a:07:
                    ae:48:ff:a2:79:9f:a3:fe:3b:a2:57:79:41:25:9e:
                    ba:e8:49:4e:67:49:31:e9:b1:ac:f7:ab:24:78:95:
                    25:b5:70:1e:ff:da:ae:10:9d:f0:df:02:5b:6f:3b:
                    3a:13:d8:03:ac:59:73:7a:fa:50:cf:d3:e0:22:a3:
                    ae:52:2a:9b:97:66:f5:3e:34:79:2d:7a:37:94:89:
                    1b:95:49:47:3c:c4:71:89:f6:1f:0b:95:dd:a0:d4:
                    d1:46:26:c9:5f:4d:ac:82:ec:c2:3b:d0:c5:8f:8f:
                    72:06:6e:9a:42:78:7e:aa:b2:ef:65:df:cd:c6:e3:
                    92:65:2d:4e:58:23:4b:12:2d:af:f0:b0:d5:fa:b3:
                    cb:a5:dc:a0:8a:e8:67:32:11:53:84:92:e8:04:79:
                    6e:06:f8:52:33:88:ec:15:54:09:50:ad:22:ed:d3:
                    36:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5E:2B:10:AD:F4:EC:02:66:21:C5:44:22:B4:EA:49:09:8C:16:62
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203511.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b9:94:84:02:17:99:2d:9c:09:28:a0:71:f5:83:d7:8c:c6:
         da:84:fb:5a:a7:db:86:50:52:d8:99:e6:43:20:72:aa:4c:24:
         78:55:bc:bc:01:cd:a4:4f:70:8f:b5:45:6b:0d:f7:a0:99:13:
         63:e9:a4:96:c5:ba:22:c8:25:df:4b:e4:5a:c0:a0:ad:b2:53:
         88:21:c4:d0:ab:8b:7e:86:8c:68:77:a0:0e:73:df:10:ca:98:
         86:78:9e:05:d0:0a:9b:28:e1:5f:ba:fe:78:0e:37:92:45:df:
         07:d1:a4:50:9d:5f:af:ee:2d:0d:44:e8:d8:dc:55:be:36:4e:
         08:d1:a3:68:59:00:53:af:8c:1a:bd:c2:de:37:b1:06:32:b3:
         11:5d:cc:81:dd:32:a3:59:ff:4e:0f:ee:e4:69:32:44:14:7c:
         4e:a5:98:21:b1:c4:47:79:55:2c:91:5f:30:39:71:42:7a:cc:
         03:b1:15:13:0f:29:48:c4:eb:5d:5e:8b:73:de:9b:fb:cf:5a:
         b5:0f:a2:59:74:74:d9:2b:3a:98:ca:6c:72:0e:fb:d3:2e:85:
         17:d1:e4:f2:fb:33:70:94:00:b0:a0:d3:33:b4:66:47:9e:3d:
         8b:94:b6:e2:24:eb:9e:35:4a:f2:20:46:a7:2f:37:9b:31:11:
         b4:bc:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 00:30:13 2023 by rpki-client on console-ams.rpki-client.org