Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212634.roa
File:                     AS212634.roa (raw, json)
Hash identifier:          NNOId3p5JL2F+lNk/QwBjlnogITupMcnkYsMmQ19Fmc=
Subject key identifier:   0D:CB:5C:F4:65:09:4B:7E:56:00:50:55:B0:CE:45:DB:AC:E7:9B:3F
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       040EE7A7F096C6A86B1EC06DA115107C7987E5
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212634.roa
Signing time:             Tue 27 Dec 2022 14:44:41 +0000
ROA not before:           Tue 27 Dec 2022 14:39:41 +0000
ROA not after:            Tue 26 Dec 2023 14:44:41 +0000
asID:                     212634
IP address blocks:        141.11.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0e:e7:a7:f0:96:c6:a8:6b:1e:c0:6d:a1:15:10:7c:79:87:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec 27 14:39:41 2022 GMT
            Not After : Dec 26 14:44:41 2023 GMT
        Subject: CN=0DCB5CF465094B7E56005055B0CE45DBACE79B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:7a:76:61:e0:2e:13:8a:bb:1e:25:f9:1c:
                    f1:58:4f:85:19:d6:be:ed:43:4e:39:e0:a3:4e:9d:
                    15:b5:46:6b:27:a9:0a:f9:cf:2b:1f:86:14:91:69:
                    ef:59:c5:8c:9d:f0:46:18:dc:71:6f:5e:4d:cc:7d:
                    e6:00:9f:1e:ce:f6:8d:e9:d3:ef:dd:f0:10:55:19:
                    1b:6a:37:a1:ab:92:a4:a2:bb:3e:b6:15:0e:8f:ca:
                    54:cf:69:20:c0:90:11:05:75:0e:f8:ee:f0:8c:00:
                    30:6d:0c:39:81:f6:16:f4:a5:bc:ec:09:9c:e0:cf:
                    f8:51:97:af:d8:56:9b:0c:81:6a:cd:9f:49:f0:57:
                    bb:ba:92:df:7c:ac:f4:d2:0e:ee:b5:88:a1:1b:2a:
                    66:bb:6c:c9:2a:1c:a8:cf:dc:47:80:15:9e:95:ab:
                    5c:a4:c9:34:c1:bb:7a:37:94:ed:ff:1e:6c:19:1e:
                    92:b5:0b:33:36:5f:05:42:8c:29:24:6b:94:ae:a5:
                    c4:dd:bf:42:6c:80:11:07:cb:37:35:04:3c:cf:36:
                    91:ec:76:b9:3d:52:ed:95:05:42:31:4a:d8:6d:c9:
                    11:7d:79:7e:29:93:7b:77:22:8a:7b:ca:8e:ca:db:
                    96:23:b7:e3:b4:31:16:07:4d:fe:8f:25:14:15:5b:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CB:5C:F4:65:09:4B:7E:56:00:50:55:B0:CE:45:DB:AC:E7:9B:3F
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS212634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:44:d6:5b:53:05:e2:7e:f4:b6:97:c9:56:c3:06:d5:7f:de:
         79:b0:55:5a:c1:b5:bd:4f:ea:70:0b:d3:f8:c3:af:5c:28:e5:
         19:f6:9b:f4:9f:0f:fb:84:b6:37:73:a6:e8:e0:1f:c0:d6:b7:
         2e:1e:e9:1c:7d:77:43:e0:82:be:3f:ad:ba:d6:cf:dc:14:1a:
         f7:02:72:53:9b:14:cf:0e:55:0f:2a:af:37:ca:1d:23:9a:f6:
         7f:6e:b8:86:f0:5a:69:b4:cd:ed:ca:59:1d:40:a1:27:1c:5b:
         df:ac:95:11:d5:4e:07:f2:97:92:16:77:fb:22:e3:2d:cf:d1:
         15:4e:84:71:0d:06:c1:bd:9c:a5:3d:f8:9d:de:f2:13:8f:85:
         c8:07:f6:fd:2b:90:51:fe:80:08:09:14:17:a8:d1:01:e9:9b:
         74:6d:45:31:d7:b7:9a:34:34:d7:51:88:e7:5e:44:53:63:70:
         af:6c:58:33:50:74:4c:c5:5f:77:f8:c1:e3:1a:36:9a:8c:87:
         e8:2f:d2:f9:fe:83:f4:e9:27:0e:91:76:30:50:d7:5d:9b:ff:
         23:b9:8d:30:c8:1a:df:c7:d5:66:8d:2e:ff:9b:3c:91:97:bd:
         ab:04:00:f6:0e:56:c2:e1:74:c9:7b:65:df:26:6f:90:80:9b:
         60:a1:e6:c3
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 22 00:26:42 2023 by rpki-client on console-fra.rpki-client.org