Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS2914.roa
File:                     AS2914.roa (raw, json)
Hash identifier:          iziIETJwR0Ens86M1/mW1z6nTyvbXDarqdhbD/J51DA=
Subject key identifier:   02:F2:14:47:7D:AF:0B:59:C0:6A:89:70:8D:39:51:72:7C:9C:8B:F2
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       55EFF330F7D91259951C2BD67BFA999785DC9C1F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS2914.roa
Signing time:             Tue 27 Dec 2022 14:44:38 +0000
ROA not before:           Tue 27 Dec 2022 14:39:38 +0000
ROA not after:            Tue 26 Dec 2023 14:44:38 +0000
asID:                     2914
IP address blocks:        141.11.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ef:f3:30:f7:d9:12:59:95:1c:2b:d6:7b:fa:99:97:85:dc:9c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec 27 14:39:38 2022 GMT
            Not After : Dec 26 14:44:38 2023 GMT
        Subject: CN=02F214477DAF0B59C06A89708D3951727C9C8BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:fe:fc:76:e1:3c:da:8c:90:3d:77:c6:cd:
                    e5:b1:60:fb:d1:13:64:17:9d:a8:f9:45:7b:c9:41:
                    e6:45:88:b2:28:c2:35:f7:88:5b:38:06:fb:a6:bf:
                    c6:fc:c7:59:46:b4:4f:cf:26:42:85:f3:a6:d6:05:
                    f9:22:8d:6f:15:3f:57:9b:17:00:29:1b:16:2b:12:
                    a5:09:35:1b:37:09:4b:02:00:4e:3e:27:a2:7b:3e:
                    5c:44:a5:4c:3f:cc:58:b5:49:1b:02:f3:fc:60:92:
                    65:85:79:f1:e2:d2:26:5c:43:08:68:16:ce:09:fb:
                    2d:20:47:93:0e:7b:c7:9f:e6:45:52:28:81:82:28:
                    82:6e:c7:16:f8:b8:c7:b7:a1:0b:c3:69:8c:fb:12:
                    f4:ec:18:28:a2:b2:03:e1:2b:75:66:3d:97:a1:cb:
                    43:42:fa:cf:45:8c:0e:b5:ef:16:eb:db:42:1d:fe:
                    00:fa:71:7b:e1:a3:dc:71:a7:c4:1d:9c:28:63:49:
                    68:ca:1f:26:a2:85:0a:5d:0f:1b:7c:6b:09:bb:c9:
                    10:c0:20:2c:fa:7d:15:23:27:b0:2b:0f:35:6f:08:
                    3a:c9:00:d3:bf:f8:31:65:f5:8d:56:44:eb:71:8c:
                    ef:97:db:4b:bd:16:e8:01:96:38:5a:f2:2f:6c:81:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F2:14:47:7D:AF:0B:59:C0:6A:89:70:8D:39:51:72:7C:9C:8B:F2
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS2914.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:68:ce:20:bb:2e:09:30:e2:01:32:70:6b:a4:69:7d:1f:62:
         a2:cd:b9:ac:64:75:48:62:ee:d3:14:d3:a9:dc:9f:43:77:97:
         fb:2b:92:a9:76:be:cd:b5:f0:99:17:7e:de:8c:45:54:48:df:
         48:08:4d:a1:82:9a:86:99:1e:a0:f0:55:aa:8a:46:60:a9:33:
         06:bb:95:f2:2e:3f:f9:5c:45:bb:f4:7f:12:d4:e2:4c:6a:b1:
         c0:02:18:20:45:64:e6:d4:dd:6e:98:ec:72:3e:d9:2b:c3:6d:
         2b:f8:bf:1d:c1:96:5e:9d:26:6c:89:8d:41:d6:5f:b3:96:05:
         f3:02:bc:b5:0c:36:bf:e2:e5:0a:73:4e:29:75:3a:1b:76:91:
         d4:17:26:2e:1d:f2:58:ac:92:76:33:46:f6:5d:0c:73:c4:97:
         82:cb:21:f0:8c:b7:34:fb:82:8f:a4:05:ee:2c:a4:13:f2:f0:
         24:3d:0b:44:de:cd:dc:cb:d5:34:44:dc:43:64:dc:2e:d8:5b:
         ce:9b:96:1b:63:ec:c1:e2:f7:45:c5:6f:d2:9d:56:f1:4f:a4:
         0f:25:2f:7b:36:a9:86:8e:96:dc:3c:02:2a:79:df:ba:91:35:
         a6:b5:fd:88:2c:6f:db:21:c3:f4:f6:66:fa:51:41:a8:9c:69:
         2e:15:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----