Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS201575.roa
File:                     AS201575.roa (raw, json)
Hash identifier:          pXHCKjc7ARVpM5PAoC87uzOrDlEpU1FZYTsy1OPnVLA=
Subject key identifier:   4F:C4:E9:ED:B1:2C:3C:99:9C:AC:BF:8D:2D:87:C0:39:B3:00:47:3F
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       7A73E97E2169EC7541C7A36247C6DF5FE5CAB7D9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS201575.roa
Signing time:             Thu 30 Nov 2023 08:51:40 +0000
ROA not before:           Thu 30 Nov 2023 08:46:40 +0000
ROA not after:            Thu 28 Nov 2024 08:51:40 +0000
asID:                     201575
IP address blocks:        141.11.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:73:e9:7e:21:69:ec:75:41:c7:a3:62:47:c6:df:5f:e5:ca:b7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Nov 30 08:46:40 2023 GMT
            Not After : Nov 28 08:51:40 2024 GMT
        Subject: CN=4FC4E9EDB12C3C999CACBF8D2D87C039B300473F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:72:ff:d4:f8:3c:e3:d8:fa:00:81:67:b0:
                    fc:b7:69:78:60:4a:29:ac:f9:3f:46:ae:63:96:97:
                    2e:79:8a:2b:d2:8f:1b:70:dc:3b:b2:36:be:4d:07:
                    1c:16:a7:57:7c:8e:cb:7f:f2:de:13:5e:10:d2:83:
                    15:f8:44:7b:70:3a:71:c3:63:f2:54:6f:54:c4:22:
                    b8:1d:fd:4c:c3:e2:13:dc:2b:f7:70:38:41:2a:a8:
                    86:98:3f:32:2f:9e:ed:a5:70:27:0e:da:ab:19:e7:
                    a1:fd:47:63:32:54:b1:ed:d5:37:74:81:6b:f2:5d:
                    fd:e6:6a:d4:8e:79:b6:6c:51:f9:ec:86:46:e8:64:
                    f8:0c:05:b5:ce:28:da:88:01:46:15:62:90:e1:12:
                    b5:49:e5:fd:e9:38:65:b2:c0:34:4f:73:84:64:99:
                    2f:31:78:39:08:ba:ac:73:31:9b:28:11:36:44:8d:
                    66:ea:fc:71:38:d4:65:71:6f:c9:50:e7:76:09:06:
                    d6:70:55:fb:d3:83:cd:0b:a9:3a:e0:fd:a2:89:02:
                    0e:f8:85:aa:13:54:bb:88:5c:41:13:f8:2a:70:db:
                    32:50:dc:2a:88:1e:ee:0f:3f:72:cf:0b:c3:52:fa:
                    2b:5f:45:fe:26:07:2d:a4:2c:da:ba:0a:6c:5a:52:
                    30:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C4:E9:ED:B1:2C:3C:99:9C:AC:BF:8D:2D:87:C0:39:B3:00:47:3F
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS201575.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:ad:42:39:5f:c4:ab:1a:85:98:41:f8:62:6c:07:78:38:9c:
         99:df:2a:eb:d0:3b:f4:ba:e1:90:47:6f:4a:65:6b:75:81:36:
         fd:08:f9:78:eb:c1:47:69:8e:78:65:94:6c:60:f4:74:c6:fe:
         cd:05:9c:c8:16:7d:6d:d6:f2:01:5f:da:a0:1f:74:9f:ae:5c:
         83:66:69:9f:af:3e:24:35:43:dc:e9:c0:24:06:c9:83:37:1d:
         52:1e:a4:23:27:1c:58:5f:0b:88:fa:7f:ad:70:11:69:bf:ce:
         a3:da:cf:71:fe:a4:13:3f:70:af:d9:fb:9c:25:00:c9:a5:57:
         41:e7:3e:d8:52:33:02:d6:20:37:38:49:38:0c:d6:55:7d:0e:
         a0:22:93:38:a4:f6:f8:e0:ab:78:11:0f:1f:1a:47:79:28:97:
         df:52:db:14:31:29:82:72:bf:76:b5:ec:c9:83:36:0b:b9:47:
         e3:b3:fb:d3:e0:a4:18:00:b7:a7:db:7d:37:b8:dd:ea:bb:9e:
         0f:5f:be:c1:62:4f:19:24:7e:5b:75:8a:7c:ea:a4:d9:fd:b0:
         73:bf:2c:22:f0:7c:3e:b2:b9:e6:46:f3:44:8a:b0:7a:aa:02:
         8e:aa:2e:0d:05:45:29:47:e8:25:29:97:f4:0d:b1:33:31:e7:
         c2:7e:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 31 01:59:09 2023 by rpki-client on console.sobornost.net