Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e203631333137.roa
File:                     33312e362e33392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ysvdvC/e+W5WNnNRyuVzXtTQan4h/7HweTDWeUw3N5M=
Subject key identifier:   9C:A8:E3:64:F1:04:9D:70:0A:04:8D:6C:BE:0F:17:47:2B:C1:B5:1B
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       1B334CC990BF56FA18C0980DFA2138D3ED6C9476
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 02 Oct 2023 05:19:28 +0000
ROA not before:           Mon 02 Oct 2023 05:14:28 +0000
ROA not after:            Mon 30 Sep 2024 05:19:28 +0000
asID:                     61317
IP address blocks:        31.6.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 May 2024 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:33:4c:c9:90:bf:56:fa:18:c0:98:0d:fa:21:38:d3:ed:6c:94:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Oct  2 05:14:28 2023 GMT
            Not After : Sep 30 05:19:28 2024 GMT
        Subject: CN=9CA8E364F1049D700A048D6CBE0F17472BC1B51B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:e1:bf:b6:ef:8f:5e:62:65:dd:ca:b2:5d:
                    65:00:07:29:2d:bf:8a:9e:74:5a:10:3e:11:47:b7:
                    cb:d0:01:2a:d5:54:95:31:bf:a4:28:42:b8:ae:9f:
                    47:70:f0:1d:3e:24:39:f0:8b:f1:3f:bc:61:56:69:
                    b5:9f:96:6c:c8:50:3d:00:c6:1d:81:23:cd:ba:be:
                    58:f6:96:c7:9d:7f:7a:cd:65:e9:04:e3:73:b8:de:
                    b8:62:c7:b4:8d:67:39:b0:9f:f4:14:52:51:33:e9:
                    00:3c:85:d4:a6:81:8b:f8:25:6d:05:33:71:ed:74:
                    29:3a:79:45:ec:75:d0:26:13:37:e1:c9:dd:ee:c8:
                    43:38:08:23:a9:6d:7d:1b:37:df:d2:36:78:5a:27:
                    a3:a2:f2:64:f0:91:f4:3f:9d:0b:ae:38:97:0a:68:
                    d6:c7:67:be:97:f6:8a:cc:7f:cd:35:2c:45:b3:92:
                    e1:dd:f7:fd:14:6d:38:8c:fa:d1:a7:69:13:aa:9f:
                    b4:58:26:03:6a:3b:a6:dd:d9:31:b4:63:b9:60:69:
                    9c:16:e2:70:38:26:a7:60:04:d3:ec:ff:c7:f1:a6:
                    23:5a:e9:24:fb:1f:ae:48:f8:e3:1a:30:ae:2e:ca:
                    73:17:b2:cc:36:eb:a3:ba:b1:2d:30:f6:0f:da:5c:
                    db:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A8:E3:64:F1:04:9D:70:0A:04:8D:6C:BE:0F:17:47:2B:C1:B5:1B
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:79:53:33:7d:4b:2a:27:fc:c0:cc:08:1c:bc:0c:dd:e3:01:
         8a:41:5d:f2:19:49:ad:49:5a:a1:f6:03:f9:bf:46:c7:91:59:
         c3:52:86:0b:19:1d:0f:b2:86:66:2b:95:c8:ad:44:47:41:3b:
         99:54:53:5d:e5:7f:0a:d1:d5:ab:30:7e:8d:55:21:b6:1a:7d:
         7a:2c:9d:04:fd:17:a6:b0:e8:3f:de:1d:81:a1:cf:80:2f:31:
         7b:8d:3a:d9:a6:98:6c:78:8b:be:36:1e:01:ed:8f:7f:34:d7:
         61:91:f7:fe:bf:07:5c:22:56:e8:e7:7f:86:66:4c:59:07:96:
         07:3c:7a:86:22:5c:26:9d:2e:b5:03:07:ff:f6:64:1c:85:0d:
         ab:d9:60:3a:8b:ca:cb:92:2c:06:58:aa:88:93:3b:3a:af:6b:
         dc:f6:92:b0:c4:d3:a5:6c:2c:d8:ee:84:67:5a:11:1d:d1:75:
         15:e4:c2:e1:fb:db:91:d9:a9:cf:a7:3e:f8:a4:ea:eb:4f:b6:
         bb:c8:48:51:d1:3d:87:57:4a:6b:e5:be:d1:a7:82:de:d6:87:
         a1:ca:ed:a2:0b:da:59:83:2e:bd:81:a2:42:a9:1f:1d:e5:99:
         a8:d1:7f:59:f9:c2:be:0d:d9:3d:90:03:99:a6:df:7d:3b:7b:
         b7:5a:fc:b3
-----BEGIN CERTIFICATE-----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Generated at Fri May 3 02:21:42 2024 by rpki-client on console-ams.rpki-client.org