Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60117.roa
File:                     AS60117.roa (raw, json)
Hash identifier:          XVg4iOMJiYZtacXBFfowiaU1COIzg20oTLAMqaSfp6U=
Subject key identifier:   38:AD:1C:CE:FA:02:6D:DD:EA:68:3D:10:A9:64:AA:A5:2E:CC:2B:29
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       47C1276DB9349BD13698EABE5145B9D4DC5349E9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60117.roa
Signing time:             Tue 27 Dec 2022 14:44:38 +0000
ROA not before:           Tue 27 Dec 2022 14:39:38 +0000
ROA not after:            Tue 26 Dec 2023 14:44:38 +0000
asID:                     60117
IP address blocks:        141.11.132.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c1:27:6d:b9:34:9b:d1:36:98:ea:be:51:45:b9:d4:dc:53:49:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec 27 14:39:38 2022 GMT
            Not After : Dec 26 14:44:38 2023 GMT
        Subject: CN=38AD1CCEFA026DDDEA683D10A964AAA52ECC2B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:34:2e:ca:9a:95:63:be:2a:f2:b4:1a:4b:
                    d3:79:15:89:06:d2:03:47:9d:ff:a3:2b:da:86:73:
                    37:31:3a:88:a9:4e:54:4a:7f:6a:1f:01:b2:47:18:
                    47:88:da:fb:be:56:2e:fe:0c:53:c8:2c:6f:35:27:
                    52:de:34:e1:aa:20:11:6e:35:8a:e2:28:f9:75:94:
                    1f:db:b4:0a:68:c2:a6:c8:38:24:1c:dd:72:78:db:
                    93:9b:96:75:5c:2f:ff:5f:fb:33:3c:2c:cf:01:d9:
                    18:f3:6a:b4:31:61:56:3c:3c:5e:36:be:ca:78:1c:
                    92:17:d3:c3:b3:78:8b:4a:d3:3b:d4:4d:9e:aa:31:
                    3c:ff:9b:99:d7:ec:32:4c:5c:d4:86:f6:a3:75:ae:
                    05:ec:a6:57:43:0b:3b:17:4c:d9:8c:c9:5a:0f:50:
                    11:83:09:c3:98:27:2a:ee:56:94:e6:8f:69:99:d8:
                    39:46:c8:b4:8c:6c:08:7a:94:36:41:8a:1f:3a:79:
                    13:f5:59:81:83:b8:97:0f:93:f3:36:72:c2:fb:29:
                    24:98:cc:33:19:06:4e:9b:a0:d3:e6:14:4d:ef:3b:
                    d9:86:d1:49:ea:a2:21:0b:b2:ba:63:3a:6a:b3:6a:
                    9c:da:d4:d9:78:69:18:91:6a:cd:b6:87:af:a8:17:
                    ea:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AD:1C:CE:FA:02:6D:DD:EA:68:3D:10:A9:64:AA:A5:2E:CC:2B:29
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60117.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:46:e9:14:8e:2f:ba:71:c7:5c:e4:06:a7:5f:32:2c:73:03:
         1c:f0:4a:bf:e9:bc:ef:53:0e:ca:d4:f0:2d:e8:f8:fe:d6:2b:
         35:e5:5c:5d:73:b3:9f:6e:83:59:bd:de:2d:70:f9:7a:3a:2b:
         17:3e:2a:04:4d:d9:e9:77:bc:52:f0:dc:83:7d:ca:59:e2:6a:
         7b:9b:09:86:ec:a3:7d:04:e9:1a:6f:22:6f:f0:5d:5a:e9:84:
         bf:85:5d:82:21:d8:cc:ac:51:3c:6f:fc:34:9d:76:43:01:61:
         1f:65:4e:75:20:c9:8b:42:e5:08:30:79:a1:ed:8c:cd:83:8c:
         33:0a:6f:06:ad:a6:04:4d:d4:f5:ac:a5:1c:5a:a4:4f:59:0d:
         76:54:c2:53:a4:9c:4d:a9:63:1d:27:1f:b8:ce:96:01:e1:de:
         aa:bb:1a:4f:6e:75:48:93:3f:ba:67:b3:c0:5b:9e:36:5d:53:
         2f:f4:9c:c8:f6:53:4c:0b:bd:36:43:a6:29:c2:6e:a1:0c:ac:
         46:9f:8c:f4:a4:de:36:08:79:58:df:d1:41:0c:8a:af:83:b0:
         b9:42:2c:e8:7e:46:6c:d9:68:40:5f:cc:e4:0d:af:ca:ee:f9:
         7a:d9:5c:24:c0:55:a6:8c:df:2b:cf:4e:28:18:f8:08:af:90:
         d2:b1:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----