Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49581.roa
File:                     AS49581.roa (raw, json)
Hash identifier:          UlwVNOxMbA0NvPwc7B03H+vKIejNi0VNTWV0AFG5iwU=
Subject key identifier:   E2:5E:58:84:8D:E8:F2:AF:0E:8E:26:D5:49:20:7D:46:70:2E:BD:C0
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       5054FDD13AE1F018EF33FAFD39C9073639529B90
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49581.roa
Signing time:             Tue 27 Dec 2022 14:44:45 +0000
ROA not before:           Tue 27 Dec 2022 14:39:45 +0000
ROA not after:            Tue 26 Dec 2023 14:44:45 +0000
asID:                     49581
IP address blocks:        141.11.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:54:fd:d1:3a:e1:f0:18:ef:33:fa:fd:39:c9:07:36:39:52:9b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec 27 14:39:45 2022 GMT
            Not After : Dec 26 14:44:45 2023 GMT
        Subject: CN=E25E58848DE8F2AF0E8E26D549207D46702EBDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:43:63:1d:78:e7:f0:4c:d3:44:15:d4:07:8e:
                    3f:6e:d4:18:0b:6e:3c:97:bc:83:e0:ef:73:10:f4:
                    95:54:38:63:a2:e4:6c:0f:27:97:6a:5c:06:2d:9d:
                    8d:35:14:e1:42:ba:91:4f:36:06:83:65:4b:bc:a2:
                    4d:c5:03:1d:fa:cc:1d:4d:ee:f8:4b:3a:6b:c7:5e:
                    22:78:7d:95:48:37:d8:af:16:4b:38:47:6d:50:0e:
                    38:fd:c5:48:e8:39:e0:d4:cb:df:ee:a3:d2:a2:e6:
                    81:99:dd:1e:35:e7:31:78:f7:d5:aa:24:7c:9c:26:
                    af:7e:cb:14:d9:91:3a:fe:cf:ed:f6:06:80:02:7d:
                    fc:fb:66:af:96:9f:79:25:40:3a:c5:73:5d:d6:b6:
                    04:6b:64:e9:e5:b0:b8:72:f8:05:a2:18:8c:5f:77:
                    e1:3c:ea:71:7d:d5:8a:5d:b5:1e:ce:a3:6e:7a:6c:
                    38:40:c2:66:02:a0:a3:d1:7a:e1:5d:22:9e:d6:35:
                    bd:59:cb:09:21:d1:e2:2d:0a:2d:33:02:38:72:70:
                    56:a8:d8:06:7d:9e:3a:1f:64:4a:e9:b3:2d:f8:b3:
                    a6:86:48:82:08:b4:1a:67:c9:6e:3c:80:b0:05:df:
                    e1:07:03:f1:b8:07:81:05:ad:2c:bc:bb:36:c5:ef:
                    33:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5E:58:84:8D:E8:F2:AF:0E:8E:26:D5:49:20:7D:46:70:2E:BD:C0
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:f6:7a:74:27:1b:bc:4f:11:e9:a0:32:fb:70:7e:47:d1:ba:
         12:b4:79:22:6d:f4:c4:5f:18:0a:fb:48:c7:7a:1e:00:45:75:
         a9:80:b9:f6:b3:a1:35:76:46:36:97:82:08:f7:27:19:ce:0e:
         17:cb:86:64:ec:5d:5a:83:2b:13:d7:e2:57:68:37:63:d6:5b:
         d2:9c:f1:d7:98:90:f8:7e:87:b8:3c:0c:54:bb:e8:0a:6a:da:
         fa:e8:a4:57:81:84:66:89:a5:63:9d:bc:44:f1:a7:ce:92:6b:
         dd:4a:e5:8e:3f:00:86:dc:3c:76:fc:34:ec:01:cf:cb:84:03:
         e5:34:4a:79:d9:54:38:59:10:de:64:2a:ea:a6:03:f4:2f:15:
         05:f6:7f:fb:89:7e:8a:0d:4f:66:60:6c:c6:01:8a:81:75:e6:
         75:b5:f5:75:95:c4:49:b7:e5:93:98:51:4c:2b:2c:6f:88:6c:
         6e:6f:eb:c9:b3:ea:20:1f:cc:47:c3:ae:2a:4d:4b:67:de:df:
         2d:57:9a:a5:48:a3:08:95:40:ca:f9:ee:a2:8b:f4:69:9c:b2:
         3c:83:74:d0:2e:2c:69:a7:d7:1c:b5:e1:e7:85:53:e9:2e:0b:
         01:e9:e7:70:52:0a:1b:74:8e:6c:e4:82:7d:7b:e2:07:95:0a:
         67:28:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org