Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203631333137.roa
File:                     33312e362e33362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Rq/52ZANash67vh6O5Eh3rPle3QQRmSKzVav7w51va0=
Subject key identifier:   B9:ED:23:3A:E8:35:B9:05:C8:26:A2:C0:B2:09:8A:53:8B:88:09:C3
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       5D590F6FCA5D368ED8447CC68C5A7251F5B56208
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 02 Oct 2023 05:23:16 +0000
ROA not before:           Mon 02 Oct 2023 05:18:16 +0000
ROA not after:            Mon 30 Sep 2024 05:23:16 +0000
asID:                     61317
IP address blocks:        31.6.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 May 2024 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:59:0f:6f:ca:5d:36:8e:d8:44:7c:c6:8c:5a:72:51:f5:b5:62:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Oct  2 05:18:16 2023 GMT
            Not After : Sep 30 05:23:16 2024 GMT
        Subject: CN=B9ED233AE835B905C826A2C0B2098A538B8809C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:4f:14:99:71:ba:16:5f:89:88:4e:43:6d:
                    6e:6d:3f:9d:92:f3:b6:c9:ef:58:a7:34:d4:ee:b1:
                    a4:48:7b:c5:26:68:54:a0:e1:a3:6f:4b:77:f1:74:
                    3b:ff:de:42:f5:3f:b8:79:c2:8d:da:12:51:c8:fd:
                    cd:f8:01:78:b1:3c:29:7a:60:c4:8e:f2:ac:2e:3b:
                    86:0a:f8:6e:85:48:b5:1e:a4:ac:35:83:f0:26:27:
                    ef:50:c9:1f:b2:bb:2f:2e:84:a1:d8:55:e2:9b:7a:
                    10:d6:3a:59:34:4d:f7:c2:99:07:72:f9:56:45:3c:
                    de:b1:73:62:10:48:07:4d:03:3c:3e:e0:17:d3:ad:
                    30:2e:aa:16:f4:31:4e:71:90:fc:64:11:5a:c1:fb:
                    59:c4:65:17:a8:c0:54:40:61:d5:08:fd:b2:66:f8:
                    e0:7b:92:6c:2f:db:38:95:21:42:79:9a:0b:8d:ba:
                    c2:47:05:e1:a3:67:d1:e0:79:cf:a4:1e:9a:16:fd:
                    24:71:37:6a:a9:16:1a:b7:86:25:40:5d:b9:45:ff:
                    08:53:40:95:85:0a:38:95:97:78:25:f6:e9:b7:48:
                    e9:fc:b2:ac:a8:86:a0:1b:6e:d9:f6:b8:15:27:6d:
                    2f:2b:1e:8d:c8:cd:81:8b:63:f8:48:67:a5:92:59:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:ED:23:3A:E8:35:B9:05:C8:26:A2:C0:B2:09:8A:53:8B:88:09:C3
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:e3:6d:03:36:f8:e7:85:37:6f:2f:a1:1f:69:c1:bd:4b:
         c8:4e:d0:ff:8c:36:5d:4b:cd:6e:f5:bd:4f:d7:6c:f1:4e:5d:
         49:d0:fa:84:4a:ce:93:b5:34:b8:96:60:97:ad:42:2e:f3:c3:
         34:eb:ff:8a:1c:d4:bf:bb:ef:bd:8c:ec:44:5f:a7:86:dc:2b:
         b4:05:7c:61:47:d5:30:8e:fd:cb:51:0c:a0:73:9a:c7:d5:bc:
         1c:4a:b7:5a:30:fc:6c:f0:3a:aa:95:1a:62:0d:f5:4f:a7:42:
         4c:60:d2:af:98:f1:90:2a:f6:ae:d3:de:76:93:82:13:28:ab:
         7e:05:e9:86:5e:6f:27:ed:ec:4c:21:7a:a8:bd:41:f1:58:32:
         2a:6f:3b:b4:c2:a4:c8:65:37:a0:45:8e:f4:1b:26:12:91:df:
         c0:4f:fe:ba:e3:2e:08:2a:2f:db:c0:19:ac:e1:7b:d7:0e:85:
         bd:8a:80:d8:b6:58:c2:00:da:9f:d8:52:59:75:b3:ab:33:97:
         9b:30:68:24:2c:37:9e:a4:f8:cc:ae:a9:81:3e:95:85:24:22:
         a4:31:6e:97:56:6b:7b:57:41:0b:ad:3e:bb:20:00:73:32:e5:
         c7:ed:4e:d4:1a:a7:d6:96:4a:57:74:9d:71:b9:bf:a1:96:77:
         81:67:66:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:21:42 2024 by rpki-client on console-ams.rpki-client.org