Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS43043.roa
File:                     AS43043.roa (raw, json)
Hash identifier:          Ip+nF5Iqbl8Kbx5KNWvnFGwZmlgqQEMoUgEHIkwk0qI=
Subject key identifier:   A2:B5:EA:84:F7:29:C8:6F:A4:E6:3F:B7:3F:0A:46:B2:B1:FB:CB:47
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       655FD1EB19CCF60CCD45DD7000C3F7506A2F3738
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS43043.roa
Signing time:             Tue 27 Dec 2022 14:44:36 +0000
ROA not before:           Tue 27 Dec 2022 14:39:36 +0000
ROA not after:            Tue 26 Dec 2023 14:44:36 +0000
asID:                     43043
IP address blocks:        141.11.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5f:d1:eb:19:cc:f6:0c:cd:45:dd:70:00:c3:f7:50:6a:2f:37:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec 27 14:39:36 2022 GMT
            Not After : Dec 26 14:44:36 2023 GMT
        Subject: CN=A2B5EA84F729C86FA4E63FB73F0A46B2B1FBCB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:30:de:30:f1:62:26:0d:cc:98:b3:a7:73:
                    e7:ff:aa:8d:b3:ec:4a:dd:ac:54:cf:88:92:a7:bc:
                    04:d6:44:de:20:90:c5:e6:2c:06:da:71:00:03:f2:
                    ac:16:27:34:dd:94:26:15:1e:8c:ce:f8:e7:e6:c6:
                    a3:3a:8e:f1:b1:d3:f9:26:ae:96:89:57:27:d3:b8:
                    ea:e7:9b:3d:20:d8:bc:60:74:36:83:c9:a1:53:52:
                    79:62:c9:84:a3:4c:23:c4:cf:fd:9b:63:8e:76:8c:
                    1f:2d:e0:86:08:d0:58:3a:34:9c:33:d9:12:a1:b8:
                    b8:b9:b6:b6:e1:36:55:cb:b1:f5:82:e9:93:72:c9:
                    89:00:6d:df:20:9d:fe:f0:ad:59:f3:fa:e2:80:01:
                    eb:01:16:84:d5:32:0a:13:37:6e:3d:79:41:f0:42:
                    a7:4e:81:de:d9:4e:be:14:54:57:0d:02:d8:b5:e9:
                    1e:f4:5a:52:b1:02:d9:ce:03:8e:82:d9:77:c8:71:
                    a2:08:a1:2e:fb:e8:4e:ff:18:60:d8:aa:eb:99:60:
                    29:4b:73:2b:03:5b:eb:d1:c7:fa:f5:bf:3b:e9:30:
                    87:f0:7e:d0:f5:9c:4f:b3:2e:e8:a1:dc:67:92:7a:
                    27:05:76:cd:b5:38:8b:fe:3c:34:2f:d0:8b:7e:2b:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B5:EA:84:F7:29:C8:6F:A4:E6:3F:B7:3F:0A:46:B2:B1:FB:CB:47
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS43043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:6c:f8:44:c4:77:cb:e0:84:b1:17:d0:c7:9d:99:1f:5d:f8:
         01:b5:ea:75:d2:ac:26:54:47:ae:aa:e6:3a:65:b7:63:ae:d9:
         d8:8a:de:1f:74:ab:a1:ba:1a:27:b5:f3:8e:6f:f4:2b:ea:6c:
         49:db:45:ff:32:fc:94:3e:af:fc:73:1e:4d:77:ee:89:e2:7f:
         93:5d:1e:78:6d:f0:e5:1b:20:0e:95:95:f5:44:d7:e7:be:60:
         00:bb:c9:5b:62:42:1d:1a:e4:44:3d:3d:09:d3:8a:e4:28:bb:
         d0:e0:2d:5a:6d:8c:50:4e:90:93:bd:e0:5f:63:1e:0c:8f:72:
         75:42:da:d1:e3:94:1f:3d:55:8a:3f:7d:68:2b:22:d3:d3:2c:
         0b:86:ef:bc:2e:6b:ad:e3:38:21:ae:f4:95:14:61:6b:ee:9d:
         26:0e:65:c9:de:46:53:d5:dc:a8:7d:70:dd:65:ac:76:76:f7:
         d4:3d:79:fb:02:ae:f3:19:ce:af:81:56:3b:49:c3:71:72:10:
         b3:9c:2d:b6:c4:08:d5:b4:fc:5c:25:45:17:f6:29:7e:20:44:
         88:08:67:96:ba:29:8a:b9:71:95:5d:44:8c:c5:d4:7f:06:f3:
         7e:35:e4:c0:36:63:5e:f8:e4:47:41:f0:28:44:cf:86:ec:54:
         a2:61:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----