Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS207279.roa
File:                     AS207279.roa (raw, json)
Hash identifier:          DJ7gAH8ne6bhUj+Z23uNJqWhvndEoAd+XUaY5ajsQcM=
Subject key identifier:   5C:96:02:98:A4:32:B1:FD:86:C8:BF:DC:42:F1:3B:01:CD:4A:DF:5E
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       07DA05AB78BD3035D074F7004B64FF99A1EA740C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS207279.roa
Signing time:             Tue 14 Mar 2023 16:50:51 +0000
ROA not before:           Tue 14 Mar 2023 16:45:51 +0000
ROA not after:            Tue 12 Mar 2024 16:50:51 +0000
asID:                     207279
IP address blocks:        141.11.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:da:05:ab:78:bd:30:35:d0:74:f7:00:4b:64:ff:99:a1:ea:74:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Mar 14 16:45:51 2023 GMT
            Not After : Mar 12 16:50:51 2024 GMT
        Subject: CN=5C960298A432B1FD86C8BFDC42F13B01CD4ADF5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:26:66:9d:0e:ad:8e:bb:46:ab:96:96:93:
                    7a:dd:10:bb:e9:75:c4:b8:96:1c:9f:3d:1b:25:7b:
                    89:3e:6a:31:49:bb:e4:17:0d:4f:6f:7a:a4:4b:aa:
                    97:93:e1:af:75:61:ad:e6:7d:a9:1d:23:c4:34:94:
                    cf:71:79:00:42:84:61:87:7a:b9:7e:6f:4d:61:ab:
                    2f:ec:94:ef:38:92:76:b0:62:59:4b:53:2c:d0:a9:
                    62:a0:0a:ea:04:f9:3a:14:97:79:29:ce:44:64:eb:
                    cd:a4:2a:48:b3:2a:d6:2b:b0:01:ca:dc:b6:09:6c:
                    2b:49:d2:e8:9f:e4:a9:9a:7d:8d:52:9a:5c:b9:30:
                    55:bc:24:40:ec:2c:b9:5f:5d:b0:e1:b2:6d:b9:9b:
                    47:05:0d:00:c1:b7:ec:44:b6:f1:34:40:89:d5:a1:
                    99:66:0e:7a:a9:d3:74:47:00:c7:4a:d5:a9:e5:41:
                    f2:25:dd:f2:89:49:b9:6a:03:8a:3e:e8:06:6f:d8:
                    3e:a4:01:23:78:7d:fd:23:aa:de:1a:11:c0:12:54:
                    15:47:2b:c4:85:15:dc:97:9d:ee:f6:9c:08:d6:fd:
                    3d:22:43:54:e0:1d:d2:12:10:d8:1f:37:8a:5e:f3:
                    dc:b0:cf:db:2f:09:d7:db:0a:56:cc:6f:3a:df:eb:
                    57:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:96:02:98:A4:32:B1:FD:86:C8:BF:DC:42:F1:3B:01:CD:4A:DF:5E
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS207279.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:dd:79:e0:77:f7:3c:71:67:d3:5d:ad:26:e8:3a:a2:b5:d1:
         27:91:9c:af:f6:ec:ad:dd:c0:cc:30:97:bd:2a:51:85:3a:38:
         1d:3e:a3:73:73:26:49:1e:18:2a:cf:0e:ca:5c:f0:cc:bc:b0:
         26:47:16:35:09:b3:77:01:a7:31:3c:dd:b9:f7:9a:e6:a7:cf:
         2a:7e:15:e7:05:e0:cf:7f:15:fc:1a:77:f0:4a:a3:cf:57:b0:
         db:04:37:d2:28:55:94:89:36:64:9a:e3:47:27:e6:f9:58:13:
         61:3b:38:60:f3:0b:db:9c:22:3b:9f:24:e8:15:24:00:bd:80:
         92:d8:16:b9:80:41:6d:df:44:0c:22:6c:2a:69:e0:f9:9e:e3:
         cd:24:9a:e6:b8:b1:ef:24:c0:65:0d:12:aa:41:06:cf:3a:d6:
         6a:ba:0d:47:ca:b8:ac:18:ce:bf:ef:58:f9:b9:a6:d0:4c:34:
         f8:22:d7:31:83:0e:c2:c2:36:6b:aa:a5:15:0d:f8:68:94:b1:
         21:e9:58:19:c4:4e:97:dd:e3:a0:40:8e:a8:c3:a0:bd:e6:09:
         58:15:f1:cb:9d:01:4b:6d:9d:ef:00:b1:20:6c:75:64:7c:07:
         03:4b:e3:8f:33:16:38:8a:00:59:26:0c:5f:31:4e:7c:22:b7:
         fc:8d:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org