Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204843.roa
File:                     AS204843.roa (raw, json)
Hash identifier:          apB3ZLys2KZV6L/34GtJtt151W0Cm7xhhBKaUYUJFGw=
Subject key identifier:   27:BB:68:7F:F2:1D:E1:94:CE:E7:B3:12:17:E8:A1:4E:22:9C:7A:D5
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       30D9A58E32B6585E6D5BABFA4C51604DF69F0017
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204843.roa
Signing time:             Tue 27 Dec 2022 14:44:44 +0000
ROA not before:           Tue 27 Dec 2022 14:39:44 +0000
ROA not after:            Tue 26 Dec 2023 14:44:44 +0000
asID:                     204843
IP address blocks:        141.11.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d9:a5:8e:32:b6:58:5e:6d:5b:ab:fa:4c:51:60:4d:f6:9f:00:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec 27 14:39:44 2022 GMT
            Not After : Dec 26 14:44:44 2023 GMT
        Subject: CN=27BB687FF21DE194CEE7B31217E8A14E229C7AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:38:98:12:ad:8d:9f:bd:5f:51:f6:dd:8b:
                    61:87:82:89:e9:13:53:b5:d3:e6:6d:a3:66:a0:dd:
                    9a:16:05:5b:e7:5f:fb:b7:37:1d:96:1a:2e:58:95:
                    d9:ab:66:03:f3:fe:09:1d:0a:24:47:b0:c2:bc:18:
                    8d:a5:3d:ad:23:37:dc:50:0d:d4:ce:24:51:aa:20:
                    f2:a0:98:94:e2:52:72:f5:1d:d2:35:3e:fd:c1:4b:
                    d3:35:1e:44:ce:b9:be:eb:0c:e1:c3:4b:82:61:cb:
                    12:bd:37:10:c9:4c:3f:50:be:41:94:eb:03:e3:03:
                    57:1e:2a:fc:8b:dd:9b:9d:68:a2:00:cb:c1:61:99:
                    71:c3:cf:d3:2a:0f:5a:f9:b9:fa:17:ed:6e:12:1e:
                    ec:4f:4d:6f:2d:83:8f:f8:57:23:bc:d9:0b:31:13:
                    0c:41:27:af:e2:d1:34:6d:d0:a9:50:5e:33:5a:de:
                    a5:0e:ab:e1:9f:93:18:a3:6f:b3:c6:4a:83:44:b9:
                    fc:75:90:8e:99:ff:af:81:68:b7:f3:a5:32:50:b1:
                    52:36:57:e3:56:4d:25:81:31:d1:29:32:67:22:82:
                    1c:79:c0:88:0b:ca:d8:e6:6c:c5:74:09:4d:7f:25:
                    80:55:d8:99:75:e6:1c:41:f8:0b:5b:d4:9d:df:30:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BB:68:7F:F2:1D:E1:94:CE:E7:B3:12:17:E8:A1:4E:22:9C:7A:D5
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS204843.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:8f:f5:a6:a5:22:4f:42:b1:ad:b1:67:a4:a1:45:c0:2d:57:
         ca:e3:01:a3:86:fc:5a:dc:bf:1c:06:4c:2f:1b:a8:d0:e9:96:
         58:95:89:54:f1:9d:60:2a:a1:b1:71:3a:d1:d5:4e:13:5f:fe:
         b3:ef:3f:5f:3c:e5:31:75:15:ec:82:d3:fb:96:5d:03:7c:fb:
         45:74:e4:5f:3f:16:a1:b1:9c:47:36:4e:5c:4e:73:a5:2c:85:
         5f:76:dc:1c:1f:42:c7:99:cb:57:6d:5e:2c:fd:fb:33:15:ff:
         ef:0c:e3:72:7d:64:f0:bb:a9:31:37:99:78:11:06:17:3a:0d:
         1d:22:0d:8c:67:0d:ca:da:88:4a:c2:04:be:72:ce:99:66:67:
         9d:05:61:8f:27:c9:fa:c6:aa:9c:d0:4b:bf:c3:b6:55:9d:40:
         a8:db:8f:b6:4f:60:37:81:fe:01:3d:15:12:2a:e7:f1:16:52:
         f3:88:14:ec:ed:db:d2:bb:65:bc:f8:55:92:c7:5a:f0:73:5c:
         49:8f:12:62:51:ed:e2:32:c0:c0:9c:c0:bd:41:4b:40:da:b0:
         d9:99:0e:8a:2b:03:3c:bc:08:2f:a8:cc:a8:22:4a:db:aa:38:
         71:e4:f4:42:ea:1f:99:5d:62:0a:b1:7f:e3:c8:c9:da:47:3e:
         03:ed:40:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----