Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS41944.roa
File:                     AS41944.roa (raw, json)
Hash identifier:          z1VbvXl8IOX4hR30xhLndssKtlLU4RSup368zBfQLhw=
Subject key identifier:   D2:EC:5C:4C:12:F6:E5:4F:CF:1F:B1:F5:0A:C6:EF:60:AD:92:9B:C8
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       4E058F22E668306787660CB5EB4589FE28043DA2
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS41944.roa
Signing time:             Wed 17 May 2023 06:37:52 +0000
ROA not before:           Wed 17 May 2023 06:32:52 +0000
ROA not after:            Wed 15 May 2024 06:37:52 +0000
asID:                     41944
IP address blocks:        141.11.224.0/23 maxlen: 23
                          141.11.226.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:05:8f:22:e6:68:30:67:87:66:0c:b5:eb:45:89:fe:28:04:3d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: May 17 06:32:52 2023 GMT
            Not After : May 15 06:37:52 2024 GMT
        Subject: CN=D2EC5C4C12F6E54FCF1FB1F50AC6EF60AD929BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:c8:81:e8:05:b4:1f:5b:af:d1:8f:55:eb:
                    44:bc:07:c4:12:c7:59:ce:94:7c:24:a5:08:7d:de:
                    74:f1:77:c7:2f:60:58:d7:00:a2:00:a3:53:e6:bf:
                    df:c9:cb:52:5e:ea:f9:3f:d5:69:a7:bb:3c:51:4f:
                    66:b7:a9:0d:b7:c4:74:8a:cb:1c:5c:a9:ef:c1:cd:
                    66:c3:01:cd:2f:e4:96:3e:33:42:a9:eb:76:2f:16:
                    65:dd:21:b7:1b:b5:cf:79:2d:34:ad:5c:e1:65:0e:
                    77:8c:33:76:d0:91:27:d9:c2:b8:bb:c2:d9:7e:08:
                    ac:39:d7:31:9d:a2:36:eb:2b:1e:ef:fa:f8:44:d2:
                    e2:b3:59:89:80:97:8e:61:fd:ff:08:bb:b0:ff:fc:
                    6a:20:df:97:66:ac:33:4b:67:35:cf:e0:19:36:59:
                    3a:1b:5b:ab:55:10:6b:ab:bd:ca:ed:6d:23:fd:19:
                    1d:be:9e:31:f7:15:c3:fa:f2:14:53:41:65:5c:08:
                    f1:86:2a:4f:7d:0a:9a:d8:af:e4:16:7c:28:05:33:
                    4b:29:9f:c2:05:39:6b:95:7c:09:0f:07:b0:27:be:
                    c1:8e:ea:90:a9:20:07:ac:0f:75:e8:a0:e3:bf:cf:
                    d0:a2:50:70:b0:f1:1f:34:6b:23:2b:d8:ed:ff:1a:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EC:5C:4C:12:F6:E5:4F:CF:1F:B1:F5:0A:C6:EF:60:AD:92:9B:C8
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS41944.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:5d:d8:f4:ae:4f:22:37:99:74:a9:22:78:c2:b3:76:c6:07:
         f7:e3:d1:a4:e1:2d:d1:92:07:8f:a5:2c:95:3c:05:d9:32:db:
         f2:50:f0:b6:dc:35:4c:23:54:23:44:b4:fc:13:f5:5a:56:5c:
         54:cd:ef:72:55:c1:31:4d:9b:d4:30:5c:c1:5e:c5:fb:40:73:
         42:0f:b8:20:e1:91:65:cd:a2:c4:e8:8a:b3:1c:48:ea:5d:52:
         9d:81:09:be:4b:8b:bc:64:fb:3b:b5:e7:40:02:c5:f9:57:83:
         1f:d7:fe:77:14:34:32:a3:db:b1:64:50:a2:a3:15:ec:44:c5:
         6a:70:0e:f4:f8:07:4f:e5:00:b5:71:ac:fb:4a:cb:22:f7:18:
         7c:fc:ee:a3:0a:d8:15:52:3c:95:c0:30:59:44:d2:e5:b4:06:
         a7:9a:c2:be:84:ff:c3:0c:1c:5b:e7:e4:54:0f:98:ca:d6:46:
         09:3f:2a:71:11:9b:1d:1b:0a:c5:15:c5:20:ec:98:c4:a4:04:
         27:4f:37:af:f4:80:93:79:b7:bd:40:97:b2:f4:1b:52:53:3a:
         8b:72:f4:e1:44:19:71:35:15:4b:e7:3b:48:f0:ec:05:2f:3f:
         b2:a8:e1:30:d2:5e:3a:ca:0c:c3:fa:f8:0c:5d:f2:52:d4:41:
         d8:d6:cc:20
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUTgWPIuZoMGeHZgy160WJ/igEPaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMzA1MTcwNjMyNTJaFw0yNDA1MTUwNjM3NTJaMDMxMTAvBgNV
BAMTKEQyRUM1QzRDMTJGNkU1NEZDRjFGQjFGNTBBQzZFRjYwQUQ5MjlCQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6ciB6AW0H1uv0Y9V60S8B8QS
x1nOlHwkpQh93nTxd8cvYFjXAKIAo1Pmv9/Jy1Je6vk/1WmnuzxRT2a3qQ23xHSK
yxxcqe/BzWbDAc0v5JY+M0Kp63YvFmXdIbcbtc95LTStXOFlDneMM3bQkSfZwri7
wtl+CKw51zGdojbrKx7v+vhE0uKzWYmAl45h/f8Iu7D//Gog35dmrDNLZzXP4Bk2
WTobW6tVEGurvcrtbSP9GR2+njH3FcP68hRTQWVcCPGGKk99CprYr+QWfCgFM0sp
n8IFOWuVfAkPB7AnvsGO6pCpIAesD3XooOO/z9CiUHCw8R80ayMr2O3/Gr3dAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU0uxcTBL25U/PH7H1CsbvYK2Sm8gwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNDE5NDQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKNC+Aw
DQYJKoZIhvcNAQELBQADggEBAKxd2PSuTyI3mXSpInjCs3bGB/fj0aThLdGSB4+l
LJU8Bdky2/JQ8LbcNUwjVCNEtPwT9VpWXFTN73JVwTFNm9QwXMFexftAc0IPuCDh
kWXNosToirMcSOpdUp2BCb5Li7xk+zu150ACxflXgx/X/ncUNDKj27FkUKKjFexE
xWpwDvT4B0/lALVxrPtKyyL3GHz87qMK2BVSPJXAMFlE0uW0Bqeawr6E/8MMHFvn
5FQPmMrWRgk/KnERmx0bCsUVxSDsmMSkBCdPN6/0gJN5t71Al7L0G1JTOoty9OFE
GXE1FUvnO0jw7AUvP7Ko4TDSXjrKDMP6+Axd8lLUQdjWzCA=
-----END CERTIFICATE-----