Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211112.roa
File:                     AS211112.roa (raw, json)
Hash identifier:          6TmtBjlVj7Q/JwcPn5VoXuhTaDTWpqmWRlIKefEOBkk=
Subject key identifier:   57:99:D7:BE:D0:66:B3:78:0A:67:A8:51:8D:47:77:EF:82:AD:C5:40
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       547632BE78AAFD9969AFF1554B87ECB021B8DA28
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211112.roa
Signing time:             Tue 27 Dec 2022 14:44:37 +0000
ROA not before:           Tue 27 Dec 2022 14:39:37 +0000
ROA not after:            Tue 26 Dec 2023 14:44:37 +0000
asID:                     211112
IP address blocks:        141.11.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:76:32:be:78:aa:fd:99:69:af:f1:55:4b:87:ec:b0:21:b8:da:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec 27 14:39:37 2022 GMT
            Not After : Dec 26 14:44:37 2023 GMT
        Subject: CN=5799D7BED066B3780A67A8518D4777EF82ADC540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:16:d3:16:96:83:ef:d3:3f:fc:08:7f:29:06:
                    5f:9a:d7:7a:1f:4b:05:f2:fd:ab:91:72:60:ee:ed:
                    48:b7:9f:81:40:55:db:f6:51:18:df:22:44:57:0a:
                    cd:6e:64:bd:3e:2f:9f:61:f4:5e:86:c9:cf:04:2d:
                    4f:f1:10:30:cb:97:32:cc:c2:ad:9f:aa:07:e2:01:
                    0e:86:d1:3e:d7:85:d7:aa:be:4d:9e:cc:2e:2f:87:
                    ec:23:8e:ee:70:a5:57:23:c6:4c:88:95:06:9e:3f:
                    38:ab:ec:e5:12:f8:11:9d:ea:f3:8b:a4:2c:65:78:
                    a7:8e:87:49:9f:4b:15:94:6a:50:12:fe:3b:5e:92:
                    75:88:6c:bb:ea:c9:bb:e5:38:c8:4a:bf:81:76:19:
                    73:ed:23:9e:52:cc:d3:48:35:3d:93:3c:de:87:dd:
                    1f:7c:c8:63:a0:39:19:de:b1:96:90:d0:9d:db:39:
                    43:72:10:80:c5:01:cf:fd:36:c9:1b:a4:66:59:6c:
                    53:45:49:34:fc:9c:bc:8c:c0:78:de:ae:7d:bc:eb:
                    4a:63:ec:c3:40:f8:7b:27:11:a4:dc:3d:bc:9e:6a:
                    22:6b:d4:1b:5b:77:a3:52:09:02:49:ee:75:01:ea:
                    b2:fc:df:c5:72:6d:cf:f1:74:1d:e3:57:20:d7:49:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:99:D7:BE:D0:66:B3:78:0A:67:A8:51:8D:47:77:EF:82:AD:C5:40
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:a1:dc:50:4b:50:b4:b8:a7:fa:ac:df:46:a4:c1:8f:15:85:
         3f:d0:4c:41:05:61:1c:b2:89:c7:d3:ab:8e:30:63:5f:4c:8d:
         90:4b:66:d6:ef:fa:28:60:d5:4c:61:8d:e9:f8:e3:d8:79:3b:
         ae:11:54:79:4b:03:1a:68:ff:67:bf:69:a9:5e:de:52:5e:ff:
         82:f6:e0:42:47:90:00:9e:d1:7c:39:63:d4:df:84:47:1a:85:
         0a:0b:64:d4:d6:5d:39:7e:af:00:20:3e:b7:da:70:22:c4:65:
         fe:1d:35:ea:14:fd:2c:ca:89:6a:35:58:5f:e4:69:0b:ef:69:
         ed:da:36:2c:0e:4b:29:c0:9e:e3:b9:38:07:29:9b:f4:2a:91:
         f0:5d:d2:96:f0:02:a3:c7:c5:63:e1:98:5c:e6:f5:ee:b1:b8:
         b2:91:2b:f9:ad:f3:6c:2a:a2:14:b6:82:49:2e:ed:f7:a4:96:
         3f:72:38:f1:2b:af:b5:bd:eb:84:2e:c5:a5:8e:ab:67:55:39:
         43:e8:4c:84:cb:7d:d7:d4:b9:21:eb:ff:62:e5:f4:bf:f3:46:
         a9:3f:75:04:a0:a8:5c:52:2b:81:c6:d0:c5:7a:4c:16:61:10:
         8b:15:c9:89:2d:c2:fa:34:ed:06:65:78:5a:12:e1:f7:04:76:
         d9:d3:c6:ad
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVHYyvniq/Zlpr/FVS4fssCG42igwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMjEyMjcxNDM5MzdaFw0yMzEyMjYxNDQ0MzdaMDMxMTAvBgNV
BAMTKDU3OTlEN0JFRDA2NkIzNzgwQTY3QTg1MThENDc3N0VGODJBREM1NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwFtMWloPv0z/8CH8pBl+a13of
SwXy/auRcmDu7Ui3n4FAVdv2URjfIkRXCs1uZL0+L59h9F6Gyc8ELU/xEDDLlzLM
wq2fqgfiAQ6G0T7Xhdeqvk2ezC4vh+wjju5wpVcjxkyIlQaePzir7OUS+BGd6vOL
pCxleKeOh0mfSxWUalAS/jteknWIbLvqybvlOMhKv4F2GXPtI55SzNNINT2TPN6H
3R98yGOgORnesZaQ0J3bOUNyEIDFAc/9NskbpGZZbFNFSTT8nLyMwHjern2860pj
7MNA+HsnEaTcPbyeaiJr1Btbd6NSCQJJ7nUB6rL838Vybc/xdB3jVyDXSXPRAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUV5nXvtBms3gKZ6hRjUd374KtxUAwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjExMTEyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQtn
MA0GCSqGSIb3DQEBCwUAA4IBAQBNodxQS1C0uKf6rN9GpMGPFYU/0ExBBWEcsonH
06uOMGNfTI2QS2bW7/ooYNVMYY3p+OPYeTuuEVR5SwMaaP9nv2mpXt5SXv+C9uBC
R5AAntF8OWPU34RHGoUKC2TU1l05fq8AID632nAixGX+HTXqFP0syolqNVhf5GkL
72nt2jYsDkspwJ7juTgHKZv0KpHwXdKW8AKjx8Vj4Zhc5vXusbiykSv5rfNsKqIU
toJJLu33pJY/cjjxK6+1veuELsWljqtnVTlD6EyEy33X1Lkh6/9i5fS/80apP3UE
oKhcUiuBxtDFekwWYRCLFcmJLcL6NO0GZXhaEuH3BHbZ08at
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:48 2023 by rpki-client on console-ams.rpki-client.org