Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS50225.roa
File:                     AS50225.roa (raw, json)
Hash identifier:          Nj09pH2PJlXYnnOeLFGhxMOkqjLbyxr8IauY39h2f18=
Subject key identifier:   4F:CF:D1:0C:13:AD:AD:5D:EF:5F:97:F0:04:46:30:15:51:A2:1D:CB
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       1609A0268D90E06775C6A970C13C493231142665
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS50225.roa
Signing time:             Tue 27 Dec 2022 14:44:38 +0000
ROA not before:           Tue 27 Dec 2022 14:39:38 +0000
ROA not after:            Tue 26 Dec 2023 14:44:38 +0000
asID:                     50225
IP address blocks:        141.11.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:09:a0:26:8d:90:e0:67:75:c6:a9:70:c1:3c:49:32:31:14:26:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec 27 14:39:38 2022 GMT
            Not After : Dec 26 14:44:38 2023 GMT
        Subject: CN=4FCFD10C13ADAD5DEF5F97F00446301551A21DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:f5:84:4c:9f:35:be:a2:30:bc:77:71:82:
                    65:67:06:8b:5e:f2:3a:76:ba:2b:ed:86:1a:03:71:
                    32:b0:a4:69:36:9e:b5:a5:0e:b1:e7:50:fb:a1:1e:
                    f4:42:28:40:93:97:3b:0c:ae:9a:c5:61:44:c2:9b:
                    89:52:9b:86:8a:33:d1:ec:4a:5d:06:19:e0:85:3f:
                    c8:b2:b4:53:ed:7e:fb:55:da:de:a4:88:16:ba:25:
                    14:79:51:f5:36:10:9c:a5:70:7a:8c:50:46:58:69:
                    5b:ee:e2:29:3d:bf:3d:80:68:95:fe:1c:e6:83:d8:
                    e7:31:7e:b8:fd:1f:a1:b1:87:fe:de:51:20:c2:95:
                    d9:3c:c6:0d:43:d8:f6:89:50:bf:70:ef:f5:4c:32:
                    2c:27:ad:00:bd:be:3b:6d:6b:f1:2f:9d:d0:21:c7:
                    69:5a:d0:10:15:ec:8a:d7:7d:f0:e2:96:d5:1b:d9:
                    cc:80:80:d9:6b:4b:75:47:de:d3:64:3f:68:63:a0:
                    76:de:3a:97:40:3b:a9:34:43:cb:b5:b1:51:52:8e:
                    cc:69:ac:be:6b:92:d6:44:d3:ea:24:23:a4:3d:1d:
                    01:4f:fb:0e:96:9b:b5:db:d2:b3:50:0e:35:a2:e3:
                    1a:e0:c3:4b:79:6b:d5:a2:fb:6a:90:93:7c:43:fd:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CF:D1:0C:13:AD:AD:5D:EF:5F:97:F0:04:46:30:15:51:A2:1D:CB
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS50225.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:07:07:37:51:7b:bc:b7:c3:36:c0:51:50:13:3c:90:57:7b:
         cd:76:3f:2d:dc:0f:12:b9:91:5f:0b:fd:f1:c9:37:2a:93:23:
         4d:25:e2:05:3c:29:56:bd:74:8c:cc:13:ff:33:1d:c0:af:b8:
         d1:5d:b2:68:43:10:37:48:0f:9a:00:55:a5:93:ce:e1:c9:99:
         2a:e3:8b:94:c0:bb:a4:72:40:8c:53:0a:9c:ed:d4:8d:f0:a9:
         c8:a1:33:f2:cd:d2:0f:e6:2c:0a:6c:49:43:79:36:aa:18:5b:
         8f:b8:0e:e7:a9:23:4e:70:f9:bd:8e:af:c0:0b:c5:78:bf:bd:
         a0:2d:37:38:aa:db:31:7c:14:fd:92:92:d1:45:61:ba:db:be:
         8d:24:3e:af:88:f6:bf:2b:df:3c:52:2f:3e:61:04:0f:74:01:
         67:29:27:06:fe:e2:c8:39:b0:e7:3f:d9:ca:1d:88:0e:ce:35:
         c6:f3:97:b1:db:28:6a:13:57:2e:93:19:c1:72:f7:0b:c7:29:
         bf:98:be:e5:97:b7:a4:a5:b8:cc:3f:32:d3:12:4c:b1:8f:69:
         31:a6:94:56:e5:0f:14:a7:ff:74:7b:9d:e3:71:56:8b:40:17:
         4a:2c:66:a8:11:d8:bd:3d:01:88:a5:39:6b:93:b7:68:b2:86:
         f7:da:85:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org