Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS54574.roa
File:                     AS54574.roa (raw, json)
Hash identifier:          cIkiLO7KdwVCdSm2IuFLBbn14oL6IL9jpLVwZJyr4Ro=
Subject key identifier:   B7:B1:B0:4E:33:A6:1E:A5:B9:64:8F:CC:D3:6C:80:1A:5B:70:AE:47
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       4CFA48838DF8B70CBF76FBD96526E3973FE57F78
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS54574.roa
Signing time:             Tue 27 Dec 2022 14:44:39 +0000
ROA not before:           Tue 27 Dec 2022 14:39:39 +0000
ROA not after:            Tue 26 Dec 2023 14:44:39 +0000
asID:                     54574
IP address blocks:        141.11.170.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fa:48:83:8d:f8:b7:0c:bf:76:fb:d9:65:26:e3:97:3f:e5:7f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec 27 14:39:39 2022 GMT
            Not After : Dec 26 14:44:39 2023 GMT
        Subject: CN=B7B1B04E33A61EA5B9648FCCD36C801A5B70AE47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:1a:20:55:bc:05:62:e0:81:c7:63:9a:57:
                    68:01:35:ca:ae:e9:54:98:f1:93:d4:aa:af:24:33:
                    e9:75:12:bf:29:97:d6:24:52:38:77:70:07:94:17:
                    02:d9:96:cd:91:22:64:3d:f8:8a:67:17:36:0b:65:
                    22:c9:68:d5:35:a6:74:e8:1a:df:c7:bb:8f:5e:cc:
                    d1:09:82:49:d7:c4:38:cd:8e:66:69:1c:f9:a5:5c:
                    e6:34:39:dd:04:18:0d:04:ae:be:30:b6:58:f2:29:
                    0a:82:e4:65:74:58:ef:4f:a3:51:6b:12:5a:26:ec:
                    45:e8:66:b7:4e:43:75:c6:ed:8b:21:a7:b1:5b:4a:
                    ce:73:10:79:98:54:a4:4d:66:08:0e:12:b9:5d:24:
                    01:cb:b3:74:e3:9a:2a:08:4f:a1:c0:e5:5f:67:a9:
                    78:54:be:a9:46:71:fe:22:05:b6:7c:79:46:a8:5e:
                    80:29:fb:67:e3:2c:20:25:da:92:5f:91:91:87:8c:
                    73:bc:09:fa:50:31:5d:40:77:f5:fb:06:c0:86:8d:
                    ca:9f:40:d1:1b:6d:9b:b2:ae:3e:1b:0c:dc:ef:8e:
                    f8:f1:f7:1f:a4:65:7d:2f:07:ab:e1:90:72:f2:90:
                    4c:e1:1e:aa:1e:25:3e:4b:66:c5:0f:7a:a1:66:53:
                    b2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B1:B0:4E:33:A6:1E:A5:B9:64:8F:CC:D3:6C:80:1A:5B:70:AE:47
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS54574.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:41:c9:21:1d:e7:0c:53:8e:22:4e:73:2f:e4:f0:28:57:
         cf:01:f4:b6:fe:8e:9f:a9:84:b0:2b:ce:74:63:dc:06:4e:d2:
         58:a8:5a:a3:bf:6c:e8:8f:92:a7:8b:ec:2d:8f:85:ab:a6:2c:
         f1:87:fc:61:39:b6:f0:24:35:52:d1:87:42:6f:6c:1a:f7:0a:
         8e:59:a5:92:c5:19:4e:1d:79:67:f9:ef:67:24:e2:54:63:3e:
         12:fc:ea:1f:99:6e:54:df:d6:fc:1c:26:2c:38:ff:9f:78:ba:
         1a:19:d6:23:31:f3:7d:5a:21:7d:e3:3e:97:c1:58:98:98:7c:
         3d:08:88:8f:09:90:09:11:32:29:83:0c:17:2f:42:a1:8a:f9:
         5f:85:e1:e7:79:60:8c:f1:a6:62:2b:7d:8a:44:01:c0:e1:bf:
         dc:89:e7:49:eb:e4:60:88:91:f6:51:df:b2:93:a0:69:fe:38:
         42:bf:68:e5:d0:8d:bc:9f:c4:87:33:12:8d:45:38:62:b0:a8:
         89:dc:1f:90:02:40:69:1c:7c:c7:dc:eb:ba:8e:55:36:a3:3f:
         e7:cb:55:ce:27:66:f7:81:8e:f2:cd:fa:b8:ec:4d:05:f4:4e:
         c1:bb:54:fe:14:c6:4c:22:17:fe:91:17:5a:97:8e:1f:e9:55:
         61:50:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----