Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35382e302f32342d3234203d3e2031.roa
File:                     34352e38312e35382e302f32342d3234203d3e2031.roa (raw, json)
Hash identifier:          7wqosIaxJiP5Ysu/dd9FrlA3GVYRvUEyoql5Ng1Wlpg=
Subject key identifier:   C6:52:EF:3E:DB:13:C4:82:3C:CC:86:6E:AC:A1:52:FD:28:F8:E0:C8
Certificate issuer:       /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial:       1BF33AB338588B3A311DA1ED0B88F4CF74B9A732
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35382e302f32342d3234203d3e2031.roa
Signing time:             Wed 15 May 2024 16:26:49 +0000
ROA not before:           Wed 15 May 2024 16:21:49 +0000
ROA not after:            Wed 14 May 2025 16:26:49 +0000
asID:                     1
IP address blocks:        45.81.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 23 May 2024 17:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f3:3a:b3:38:58:8b:3a:31:1d:a1:ed:0b:88:f4:cf:74:b9:a7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
        Validity
            Not Before: May 15 16:21:49 2024 GMT
            Not After : May 14 16:26:49 2025 GMT
        Subject: CN=C652EF3EDB13C4823CCC866EACA152FD28F8E0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:8a:d9:e1:fa:3c:74:ad:b1:53:51:59:fe:
                    6a:50:05:16:9e:61:a2:af:1e:fc:44:b4:1a:d9:c1:
                    5f:15:ad:b0:85:f6:38:bf:e7:1d:34:49:eb:2c:4f:
                    27:c2:10:1f:b0:ff:b0:1a:51:5c:c6:dc:e7:e1:4c:
                    81:ae:29:c8:f5:7b:84:8d:97:92:b2:09:0c:95:b1:
                    20:6c:58:ed:46:22:0a:71:f6:41:5a:cd:07:b8:d8:
                    bd:7f:a5:33:e0:ee:e3:2a:ad:0f:12:d8:80:46:51:
                    8b:94:af:2f:24:ae:c3:d3:8c:6d:c9:f6:cb:c3:cc:
                    1b:4d:5b:b2:5f:6b:69:a4:51:ff:0b:cf:a6:4e:9b:
                    a8:23:1e:85:e2:ab:8a:89:10:6d:41:87:e9:5a:f9:
                    83:2e:f0:c1:98:0b:40:5e:a5:69:10:b9:3f:6e:d4:
                    60:fa:09:14:bc:68:1a:2c:a5:b8:ef:4e:58:ca:5b:
                    63:25:dd:9e:cb:c1:b7:7b:fc:5b:2c:6a:67:6c:06:
                    28:60:1f:d1:3f:39:8d:36:81:3a:dc:01:11:e2:4f:
                    c7:1d:24:07:83:c4:70:ab:de:28:c3:ab:06:79:ea:
                    66:45:e4:07:cf:c8:f8:6c:fe:05:3b:ba:8c:fd:17:
                    84:20:a3:1e:fc:60:1e:62:6b:a3:87:3d:1a:9d:08:
                    cb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:52:EF:3E:DB:13:C4:82:3C:CC:86:6E:AC:A1:52:FD:28:F8:E0:C8
            X509v3 Authority Key Identifier:
                keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35382e302f32342d3234203d3e2031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:86:00:ed:06:5f:85:71:5d:e9:05:65:8c:59:0e:8f:4d:8d:
         e2:6f:c8:3b:32:ae:4e:0b:cb:6a:75:df:b0:47:31:6a:e7:9e:
         68:a1:78:29:30:db:80:f1:4d:e7:ec:ee:10:55:68:b7:af:48:
         aa:32:2d:0f:9d:2f:4a:e0:e1:bb:27:79:28:5a:f9:bd:f7:d4:
         1c:8e:b7:8f:95:16:57:4a:20:ee:57:f2:b2:43:32:20:7f:6e:
         d6:e0:8d:cb:ba:a4:fa:99:e3:63:54:25:fb:34:19:40:e8:2d:
         70:fc:92:ed:cc:45:f4:8b:1f:ba:4f:3e:d8:3a:d9:4c:f8:67:
         78:f0:49:a1:24:5f:02:2d:23:87:ba:d4:e5:a8:a9:72:b7:a9:
         9a:7f:51:1c:21:bd:9f:bc:18:2c:7b:94:25:80:a9:1e:4f:9c:
         5a:66:fe:cf:de:b6:5d:32:e1:cf:aa:e4:55:17:5c:19:03:98:
         14:f9:43:b9:15:6c:91:f7:77:f1:35:75:c3:51:09:34:28:d4:
         21:b1:af:5b:cc:34:40:a8:0d:ce:a6:e9:cf:a6:cc:88:48:56:
         81:0c:0f:f5:65:fa:ad:bd:ca:cf:da:b6:f3:f8:9a:7d:73:cd:
         6e:86:2f:75:3b:d0:4f:65:2f:ea:99:b1:8b:b8:b4:26:f0:68:
         a8:fb:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org