Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212027.roa
File:                     AS212027.roa (raw, json)
Hash identifier:          2V2lpB6Y0l1M32UmRkHUtsMyGCo5d/xCcSIJ2jsJxtY=
Subject key identifier:   2A:84:71:74:F0:89:5C:AF:D3:93:FF:C1:31:DD:46:F4:66:E6:34:A2
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       75F021DA72FE0D86547828F6F291093FCFE8DE69
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212027.roa
Signing time:             Mon 26 Jun 2023 08:37:00 +0000
ROA not before:           Mon 26 Jun 2023 08:32:00 +0000
ROA not after:            Mon 24 Jun 2024 08:37:00 +0000
asID:                     212027
IP address blocks:        141.11.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f0:21:da:72:fe:0d:86:54:78:28:f6:f2:91:09:3f:cf:e8:de:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Jun 26 08:32:00 2023 GMT
            Not After : Jun 24 08:37:00 2024 GMT
        Subject: CN=2A847174F0895CAFD393FFC131DD46F466E634A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:84:4b:35:2e:d9:dc:0f:42:be:4d:5c:1c:
                    99:44:2e:ae:1f:5c:6c:c0:d4:47:d0:26:6c:c5:b6:
                    9f:4e:3f:bc:ed:33:88:8e:3a:2d:7b:2f:38:81:87:
                    48:5c:ba:43:20:bd:7e:e7:70:74:79:87:bf:0d:23:
                    68:0f:4c:1c:bc:a3:19:f5:6c:c6:42:8c:67:9a:c6:
                    d1:08:cf:b3:67:89:49:f9:04:17:e9:9a:a5:88:05:
                    32:1d:80:ca:f5:2f:64:90:bc:07:9c:d6:83:d5:10:
                    cb:b8:40:82:93:9c:76:a6:e3:65:cf:8e:70:f9:26:
                    43:b9:27:b9:d9:46:e3:5f:30:87:40:1d:6a:64:ab:
                    68:0f:b9:57:65:61:8f:92:f4:92:b2:d1:16:40:66:
                    7b:80:54:30:b5:49:23:eb:93:e7:bb:b5:1f:48:75:
                    91:ba:c1:90:5d:e7:f8:5f:d7:ef:f6:7f:e1:99:9d:
                    45:43:1b:d8:59:78:c2:76:7e:c6:94:26:cf:c5:d8:
                    6a:4d:dd:db:41:02:d3:68:92:1a:51:a8:ed:2e:63:
                    c7:5d:f5:00:7a:55:9a:5f:a2:9c:af:b0:b4:74:32:
                    6c:29:bc:ce:bf:46:af:ce:94:fd:55:4f:42:5b:88:
                    42:af:a5:42:4f:8d:18:38:39:33:28:ed:e5:a2:4c:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:84:71:74:F0:89:5C:AF:D3:93:FF:C1:31:DD:46:F4:66:E6:34:A2
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212027.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:50:c4:e4:33:ba:9c:9a:49:d9:ca:0c:30:c2:a3:3c:4b:f6:
         56:7b:b4:ca:13:a2:d2:6d:5d:b4:d0:3d:ec:5c:25:8a:f0:ca:
         6e:51:c8:13:0d:98:37:61:29:7e:19:b2:29:67:28:7d:69:57:
         80:09:ef:e4:52:c2:87:9c:40:4b:1b:29:fe:51:59:45:f8:3e:
         21:d7:f4:d0:9a:8a:16:b9:14:4f:72:b9:e7:aa:0e:d4:00:20:
         ce:96:dc:ed:f8:e1:68:36:41:88:4e:49:2c:1b:b8:74:71:e6:
         10:55:f1:f3:0c:04:36:b2:35:24:fa:5c:ef:06:c6:21:ae:a5:
         32:e0:30:36:2a:ee:1d:00:8d:00:16:d0:ae:71:cc:10:fa:43:
         5b:43:df:c5:81:53:e2:82:26:e5:e3:40:37:55:e5:d3:7d:50:
         61:91:f3:60:2a:b7:1c:98:40:ef:b1:43:9a:56:35:04:ec:bd:
         cb:f7:63:5c:01:de:65:b9:42:dd:31:fd:58:a9:4d:c8:18:27:
         68:b9:f4:14:45:f1:97:2b:9d:18:4b:51:4f:d6:11:44:a0:53:
         0a:20:5d:a5:e0:11:75:ff:fe:ea:8e:51:2c:c1:2a:3e:e1:31:
         b5:24:a3:06:bd:36:d9:e1:6e:66:93:79:e2:99:79:25:13:84:
         05:73:66:23
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUdfAh2nL+DYZUeCj28pEJP8/o3mkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMzA2MjYwODMyMDBaFw0yNDA2MjQwODM3MDBaMDMxMTAvBgNV
BAMTKDJBODQ3MTc0RjA4OTVDQUZEMzkzRkZDMTMxREQ0NkY0NjZFNjM0QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VIRLNS7Z3A9Cvk1cHJlELq4f
XGzA1EfQJmzFtp9OP7ztM4iOOi17LziBh0hcukMgvX7ncHR5h78NI2gPTBy8oxn1
bMZCjGeaxtEIz7NniUn5BBfpmqWIBTIdgMr1L2SQvAec1oPVEMu4QIKTnHam42XP
jnD5JkO5J7nZRuNfMIdAHWpkq2gPuVdlYY+S9JKy0RZAZnuAVDC1SSPrk+e7tR9I
dZG6wZBd5/hf1+/2f+GZnUVDG9hZeMJ2fsaUJs/F2GpN3dtBAtNokhpRqO0uY8dd
9QB6VZpfopyvsLR0MmwpvM6/Rq/OlP1VT0JbiEKvpUJPjRg4OTMo7eWiTPbLAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUKoRxdPCJXK/Tk//BMd1G9GbmNKIwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjEyMDI3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQsi
MA0GCSqGSIb3DQEBCwUAA4IBAQDRUMTkM7qcmknZygwwwqM8S/ZWe7TKE6LSbV20
0D3sXCWK8MpuUcgTDZg3YSl+GbIpZyh9aVeACe/kUsKHnEBLGyn+UVlF+D4h1/TQ
mooWuRRPcrnnqg7UACDOltzt+OFoNkGITkksG7h0ceYQVfHzDAQ2sjUk+lzvBsYh
rqUy4DA2Ku4dAI0AFtCuccwQ+kNbQ9/FgVPigibl40A3VeXTfVBhkfNgKrccmEDv
sUOaVjUE7L3L92NcAd5luULdMf1YqU3IGCdoufQURfGXK50YS1FP1hFEoFMKIF2l
4BF1//7qjlEswSo+4TG1JKMGvTbZ4W5mk3nimXklE4QFc2Yj
-----END CERTIFICATE-----