Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e2036393339.roa
File:                     39332e39352e3131332e302f32342d3234203d3e2036393339.roa (raw, json)
Hash identifier:          VgBdP7Q053TvVzLLEFyG+w7omgFuHJBT56t6RcegxQg=
Subject key identifier:   9A:DF:2F:50:0F:B8:AC:04:5B:1A:66:EC:22:17:C6:F9:7C:33:14:03
Certificate issuer:       /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial:       65B509EDEE1A8DDFC1C6B00302A5349E0BE72F52
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e2036393339.roa
Signing time:             Sun 19 Nov 2023 06:17:35 +0000
ROA not before:           Sun 19 Nov 2023 06:12:35 +0000
ROA not after:            Sun 17 Nov 2024 06:17:35 +0000
asID:                     6939
IP address blocks:        93.95.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Jan 2024 00:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b5:09:ed:ee:1a:8d:df:c1:c6:b0:03:02:a5:34:9e:0b:e7:2f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
        Validity
            Not Before: Nov 19 06:12:35 2023 GMT
            Not After : Nov 17 06:17:35 2024 GMT
        Subject: CN=9ADF2F500FB8AC045B1A66EC2217C6F97C331403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:21:83:20:2b:1b:bc:88:93:b5:11:98:98:ce:
                    0f:a3:db:ed:94:2f:07:69:1c:96:17:51:6b:07:d0:
                    5f:4d:32:57:67:c2:19:e7:53:67:0d:8e:90:e4:a6:
                    ce:96:a7:60:5b:4c:56:7e:1d:97:c3:77:9e:2e:59:
                    95:fd:89:84:cc:0f:32:72:f8:ce:60:5e:68:df:31:
                    5a:f0:3f:45:8b:14:5d:67:ca:62:a8:5e:34:eb:41:
                    b5:11:ec:7f:7f:f5:26:f2:04:10:84:40:9a:6f:76:
                    1f:25:9e:ae:24:1b:e8:81:35:e6:07:e7:9e:ea:df:
                    36:98:10:ab:34:b2:06:f3:32:e3:40:7b:4f:8a:88:
                    12:db:e9:cd:3d:01:9d:2f:be:26:b1:07:73:f8:cc:
                    39:e6:36:31:67:9f:58:26:79:05:73:47:8c:15:42:
                    7b:ae:c9:53:01:f3:f0:af:e3:83:5c:88:dc:05:53:
                    30:57:97:a0:27:5c:8f:50:96:0b:f0:97:fa:8d:43:
                    1e:09:b7:ca:cb:de:38:70:25:06:cb:4b:f3:b7:94:
                    6e:17:9d:2c:35:1b:af:f4:bb:02:d9:9b:66:b2:0f:
                    90:09:7c:72:72:3d:42:1d:e1:23:7e:29:64:76:79:
                    c6:b8:ad:2f:d6:11:b9:4d:3b:8e:40:2a:7c:e0:a6:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DF:2F:50:0F:B8:AC:04:5B:1A:66:EC:22:17:C6:F9:7C:33:14:03
            X509v3 Authority Key Identifier:
                keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ec:c7:8f:fa:8e:c1:73:3c:66:17:0c:a1:03:a3:ba:a8:6c:40:
         fc:87:3d:09:15:e5:92:7d:7f:63:85:c9:a9:63:f1:3b:dd:81:
         d6:c8:2a:77:8a:3e:aa:fd:5c:5f:ca:8f:bb:50:4c:e4:ce:97:
         ae:2f:b5:9a:e5:e4:d0:7e:f3:91:25:a8:59:a4:07:a0:2a:45:
         fc:5f:24:46:ae:e4:87:73:c1:12:a2:e0:d4:89:f9:8c:7c:86:
         79:34:ef:fe:05:71:62:5e:08:8d:8c:95:a0:3d:5e:ef:e8:b3:
         18:ec:91:03:5e:c5:a0:a3:8a:0e:a0:68:5b:c4:60:12:42:9f:
         20:d0:1a:0d:27:6b:68:c0:67:31:a3:ee:69:8d:de:96:6c:06:
         43:99:3b:e3:4d:ac:7f:bd:e3:d3:45:96:5d:df:3f:93:d6:aa:
         83:28:e1:41:58:ab:2c:7b:a8:f3:71:ff:20:6b:92:58:4a:93:
         f2:ec:0c:0c:b1:a2:0c:39:d5:6e:d7:13:85:69:f1:1f:45:7d:
         f3:6f:e0:22:dd:cf:9e:06:97:cc:aa:43:dc:68:60:d0:5d:3c:
         6c:f3:ee:a5:e4:6a:68:93:14:4c:19:bc:ed:3d:c0:7a:1a:2a:
         f0:d2:97:0e:70:2c:da:ad:38:e2:00:e7:89:6a:20:8f:a0:ae:
         04:bb:91:ab
-----BEGIN CERTIFICATE-----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Generated at Wed Jan 10 01:26:44 2024 by rpki-client on console-ams.rpki-client.org