Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS52073.roa
File:                     AS52073.roa (raw, json)
Hash identifier:          wk5sB5mlkLGEdu8zJ/dfLdkfV8YJ8u55O2rLPuAaxS4=
Subject key identifier:   33:72:27:29:14:E9:16:7E:CA:21:FD:74:86:77:CA:EA:9D:B7:C7:AA
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       60C76DEAB09E514A27B5A9CDD384CFE38557D2C9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS52073.roa
Signing time:             Thu 14 Sep 2023 11:26:22 +0000
ROA not before:           Thu 14 Sep 2023 11:21:22 +0000
ROA not after:            Thu 12 Sep 2024 11:26:22 +0000
asID:                     52073
IP address blocks:        141.11.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c7:6d:ea:b0:9e:51:4a:27:b5:a9:cd:d3:84:cf:e3:85:57:d2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Sep 14 11:21:22 2023 GMT
            Not After : Sep 12 11:26:22 2024 GMT
        Subject: CN=3372272914E9167ECA21FD748677CAEA9DB7C7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:23:e1:a0:13:f3:ef:35:7b:aa:de:90:36:
                    2b:0c:24:f2:10:58:44:0f:8f:df:36:71:78:2f:cc:
                    14:c9:27:8b:42:2d:e7:bc:9c:46:37:70:f1:7f:ff:
                    2f:ea:cb:c8:03:a9:b1:fa:da:1d:9a:0c:f9:14:f7:
                    c0:0a:b2:e0:a1:2d:fe:3a:85:c2:3f:df:5c:65:ef:
                    87:84:35:6e:b5:4b:29:4a:0a:5e:a1:53:19:b6:bf:
                    75:81:f4:a0:e5:46:a6:1a:61:7d:1e:bb:6b:ee:58:
                    b4:74:21:ba:23:b0:be:c7:f7:64:0c:5a:85:c0:dc:
                    45:a5:4c:b5:43:b5:d9:6e:a7:7f:72:7c:e8:22:08:
                    c5:1d:56:2c:2a:db:df:03:69:ef:c3:c5:f4:73:27:
                    c5:e5:bb:20:93:7e:41:5c:60:ae:a9:c7:05:1b:70:
                    f5:d5:24:9b:7f:60:38:68:7a:74:ba:58:5b:38:ed:
                    a2:aa:0f:42:ee:15:25:17:90:ff:26:f9:80:d5:11:
                    59:fc:92:07:7c:eb:00:21:27:a4:bf:cc:36:b7:ce:
                    b5:8e:7f:87:71:93:1c:45:33:13:98:3d:65:53:ad:
                    7a:77:ad:ba:07:8b:c3:2e:92:e2:ef:d5:32:3b:29:
                    ac:ce:b8:37:f3:9a:ec:54:18:26:6e:05:14:33:ce:
                    c9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:72:27:29:14:E9:16:7E:CA:21:FD:74:86:77:CA:EA:9D:B7:C7:AA
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS52073.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:df:4f:94:80:de:d9:14:c1:a1:bd:f9:bc:8c:8c:01:b3:71:
         3d:fe:8e:e5:6d:81:c8:e2:d6:e8:17:0b:fc:aa:b1:c5:9c:bd:
         2d:74:4a:6a:5a:14:60:17:0c:3c:0d:27:3f:88:51:05:e0:21:
         aa:2e:ed:f6:c7:ea:50:86:05:03:2b:9f:f9:45:e1:9c:b5:c2:
         78:e0:f7:3d:2a:4d:00:f3:13:42:3e:3c:2a:a1:1b:62:31:36:
         f2:c9:86:d7:84:f0:b3:07:38:f0:c2:50:90:42:9b:f3:e3:63:
         13:14:d6:91:0f:25:71:f3:09:e9:15:2f:a9:d7:cd:53:42:0b:
         82:b3:07:d0:11:1e:3f:56:b1:66:e7:6f:e3:c0:ce:1e:30:9a:
         30:1f:7a:1a:b3:16:03:37:31:89:c6:0f:d3:e6:58:cf:0d:c5:
         3e:4a:08:94:e1:28:f1:c5:83:bd:0d:8b:04:4d:69:02:e7:98:
         c0:2f:93:d6:9a:b4:7a:61:61:5a:0b:77:e9:40:2e:66:22:0e:
         2b:2d:fa:01:e4:62:55:3a:2a:03:91:fb:5f:8c:0c:1f:3e:f4:
         11:dd:fd:5d:0e:5d:12:98:f4:31:59:01:07:aa:6a:3b:b1:6a:
         ed:e8:f1:ca:77:13:f6:07:3d:22:bd:00:86:22:99:e8:9e:3e:
         0c:9a:ec:24
-----BEGIN CERTIFICATE-----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