Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216146.roa
File:                     AS216146.roa (raw, json)
Hash identifier:          lTOCVB+0ydJHZLXZ+CG++afoAuaWrIjItnGaJtFHrpU=
Subject key identifier:   A1:AD:6D:24:4D:0E:EA:78:89:51:9B:27:65:D9:8E:92:31:53:48:26
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       319A185704198B294784F876BC168DD47E54E159
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216146.roa
Signing time:             Fri 20 Oct 2023 13:13:30 +0000
ROA not before:           Fri 20 Oct 2023 13:08:30 +0000
ROA not after:            Fri 18 Oct 2024 13:13:30 +0000
asID:                     216146
IP address blocks:        141.11.202.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9a:18:57:04:19:8b:29:47:84:f8:76:bc:16:8d:d4:7e:54:e1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Oct 20 13:08:30 2023 GMT
            Not After : Oct 18 13:13:30 2024 GMT
        Subject: CN=A1AD6D244D0EEA7889519B2765D98E9231534826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:83:71:ce:eb:d0:01:2b:47:54:88:9b:2b:
                    92:fb:bd:1c:46:de:2e:df:49:d9:04:d2:3b:dd:a1:
                    82:6e:17:bb:3f:03:63:e8:8d:79:ed:b1:14:1c:e1:
                    ed:80:03:5f:d8:80:49:54:fb:52:8f:53:2c:ec:18:
                    2d:3e:6f:6f:69:5f:87:55:7c:a8:d5:6d:f3:2c:da:
                    23:c4:86:d5:77:cf:5d:38:b1:4d:a2:db:f9:03:9c:
                    50:cf:c1:97:3d:8c:fd:a4:64:76:97:c7:85:6a:d3:
                    b6:ea:22:d7:a1:32:b3:bc:af:c7:bb:96:35:65:df:
                    45:a5:47:67:53:69:c4:99:5a:1b:f8:2a:c6:9e:d5:
                    34:86:32:e6:9d:cd:94:f3:4f:e3:ef:f9:6b:f6:a7:
                    39:6a:d3:33:40:bb:b1:1a:12:5f:a2:5e:3e:b1:9a:
                    51:f5:76:02:53:35:87:c6:f6:1f:05:df:cd:8f:07:
                    18:17:3a:96:4d:ed:26:c2:c4:c2:ae:09:04:ed:89:
                    8a:e9:0d:b1:7a:b7:9a:d9:73:f7:8a:70:15:15:38:
                    c7:ce:f0:38:72:e7:00:21:4d:b0:34:3b:d0:43:81:
                    e9:06:89:ba:81:55:84:24:67:3a:05:9e:47:ea:4d:
                    e5:37:4e:ed:4d:ba:1f:c5:e3:cc:2f:24:32:42:ec:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AD:6D:24:4D:0E:EA:78:89:51:9B:27:65:D9:8E:92:31:53:48:26
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216146.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:f7:f7:77:2c:ae:fe:e7:17:b0:c0:06:21:f5:6b:d1:41:f3:
         3e:dd:8d:35:99:27:fc:de:e2:08:8f:f0:77:eb:c8:c4:1c:81:
         6c:f2:d7:21:6f:59:d9:5f:f8:63:60:4f:53:b6:e0:92:25:57:
         e1:6c:92:92:50:5e:8e:6a:48:02:22:c9:25:73:6b:f5:d4:2a:
         2f:65:15:3e:14:03:72:85:35:b1:90:69:93:29:60:91:b3:0c:
         ed:14:20:92:e7:61:c0:3c:60:5a:ad:14:ed:c2:19:3c:2e:96:
         31:a7:ef:c5:ad:54:e2:0c:54:30:43:b2:d7:79:63:ed:b1:09:
         f7:b0:72:af:a5:74:c1:82:d2:49:96:0c:10:42:85:5d:41:84:
         85:7d:ba:0f:9a:44:ba:1e:92:bf:b9:cf:83:c2:13:6d:7d:67:
         bb:3c:c1:e2:58:7e:9c:4a:1c:ae:cf:04:d0:48:a0:ff:f9:89:
         19:02:c9:3d:4d:f1:82:a2:42:3e:1e:12:73:f3:fd:72:c3:61:
         08:48:a8:9f:90:ec:75:6d:fb:04:95:de:85:19:7c:0f:2c:a9:
         33:e3:26:7e:0e:a0:d9:24:83:bb:44:44:ac:56:7b:1a:75:8d:
         cf:b4:bd:13:07:9d:5d:79:72:7c:a3:83:03:0d:1f:0f:4f:e2:
         1a:56:f4:6e
-----BEGIN CERTIFICATE-----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