Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e3131322e302f32302d3230203d3e203136353039.roa
File:                     3134372e37392e3131322e302f32302d3230203d3e203136353039.roa (raw, json)
Hash identifier:          SKaAN3NgaHvIyr4KG7NvASz8f5Rb/0m2NZnovzgfstU=
Subject key identifier:   5D:D3:08:2C:25:24:19:3C:91:06:8A:4F:BF:BF:74:F7:D6:70:DD:A6
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       221EE00CE8C364696464906F00CF56E42A7E2125
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e3131322e302f32302d3230203d3e203136353039.roa
Signing time:             Sat 30 Mar 2024 23:47:39 +0000
ROA not before:           Sat 30 Mar 2024 23:42:39 +0000
ROA not after:            Sat 29 Mar 2025 23:47:39 +0000
asID:                     16509
IP address blocks:        147.79.112.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 06 Apr 2024 11:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1e:e0:0c:e8:c3:64:69:64:64:90:6f:00:cf:56:e4:2a:7e:21:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Mar 30 23:42:39 2024 GMT
            Not After : Mar 29 23:47:39 2025 GMT
        Subject: CN=5DD3082C2524193C91068A4FBFBF74F7D670DDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:88:9a:bc:6e:86:bc:ad:1c:38:fb:47:ce:1f:
                    36:2b:d9:8e:1a:97:22:75:93:b1:8d:7d:fb:ec:7a:
                    10:73:d0:e5:cf:84:fa:41:29:bc:08:8b:96:2d:9e:
                    83:17:3b:57:5a:6d:98:a3:b3:52:7e:9c:22:22:dc:
                    18:94:7b:02:2d:d1:ad:bc:fd:e3:0d:9a:11:23:ea:
                    77:44:49:33:c6:26:b6:f2:f4:42:37:61:61:a1:17:
                    ac:f1:e3:5f:ce:5f:c8:1a:71:c3:b9:a5:e3:23:18:
                    5a:07:23:9f:60:52:f5:e6:f9:44:5c:5a:2d:44:70:
                    6a:31:12:75:7f:9d:9c:f0:38:df:bf:c6:92:b7:a6:
                    95:ae:e5:e4:5f:71:a5:ab:70:0e:28:65:98:ee:b5:
                    97:25:f5:de:35:c5:5b:17:81:5f:a3:5a:d8:6e:db:
                    8f:7a:66:64:91:34:dc:93:43:a8:d6:15:e1:06:d7:
                    fd:a0:69:f0:1b:d1:de:b1:72:cf:ab:28:53:c8:8b:
                    bf:83:e1:c8:53:65:d0:c9:51:8a:0d:84:3c:bc:09:
                    38:0d:56:93:f6:52:60:a1:b0:8e:16:4a:06:fc:4e:
                    c9:82:1c:a9:8a:9b:8f:e8:99:93:6a:63:4a:4b:26:
                    c1:7d:76:85:ab:51:b8:e1:fa:3b:dd:92:95:03:6b:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D3:08:2C:25:24:19:3C:91:06:8A:4F:BF:BF:74:F7:D6:70:DD:A6
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134372e37392e3131322e302f32302d3230203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.79.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:5c:3f:91:82:c8:fb:9c:f1:12:97:50:03:8a:f6:ea:5c:
         c0:43:7c:53:44:b5:d4:65:32:84:ec:28:83:0d:72:84:25:86:
         86:84:ce:e2:90:6f:0a:1d:e1:b2:d5:0a:ea:e6:22:1e:41:63:
         9a:c6:0b:03:99:47:9b:ea:53:3c:0c:a2:4d:73:9f:8f:bb:cf:
         99:55:91:f1:5b:7a:3e:cb:5b:b4:ac:07:d2:1c:59:c3:64:80:
         cc:41:63:c4:a0:25:29:bf:e0:2f:3f:a2:05:d0:da:a2:bf:3f:
         40:58:e2:5a:84:db:a1:4d:e6:05:72:20:82:67:4e:b8:ab:a4:
         5f:48:31:25:9f:e2:a6:51:0e:dd:72:af:e5:4c:10:74:0b:5b:
         fb:c8:d1:08:65:7b:57:b4:be:e8:84:e8:ea:5c:00:06:72:df:
         03:02:3a:39:7e:a4:d6:28:6e:70:91:95:3b:3f:ba:16:63:48:
         ef:4c:73:46:11:83:d4:14:9c:06:9b:e8:37:b4:72:85:8c:81:
         db:cc:25:be:86:ba:90:5d:8d:49:2d:bb:31:49:7b:71:5a:62:
         44:02:1e:ab:91:af:33:85:75:b7:47:12:79:b2:e8:1d:45:7d:
         c6:ee:29:c8:ad:e0:2c:4c:40:58:f9:8e:fc:08:ae:fd:a8:3c:
         b9:c6:be:01
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUIh7gDOjDZGlkZJBvAM9W5Cp+ISUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDAzMzAyMzQyMzlaFw0yNTAzMjkyMzQ3MzlaMDMxMTAvBgNV
BAMTKDVERDMwODJDMjUyNDE5M0M5MTA2OEE0RkJGQkY3NEY3RDY3MEREQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoiJq8boa8rRw4+0fOHzYr2Y4a
lyJ1k7GNffvsehBz0OXPhPpBKbwIi5YtnoMXO1dabZijs1J+nCIi3BiUewIt0a28
/eMNmhEj6ndESTPGJrby9EI3YWGhF6zx41/OX8gaccO5peMjGFoHI59gUvXm+URc
Wi1EcGoxEnV/nZzwON+/xpK3ppWu5eRfcaWrcA4oZZjutZcl9d41xVsXgV+jWthu
2496ZmSRNNyTQ6jWFeEG1/2gafAb0d6xcs+rKFPIi7+D4chTZdDJUYoNhDy8CTgN
VpP2UmChsI4WSgb8TsmCHKmKm4/omZNqY0pLJsF9doWrUbjh+jvdkpUDawQNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUXdMILCUkGTyRBopPv79099Zw3aYwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDM3MmUzNzM5MmUzMTMx
MzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
k09wMA0GCSqGSIb3DQEBCwUAA4IBAQCT8lw/kYLI+5zxEpdQA4r26lzAQ3xTRLXU
ZTKE7CiDDXKEJYaGhM7ikG8KHeGy1Qrq5iIeQWOaxgsDmUeb6lM8DKJNc5+Pu8+Z
VZHxW3o+y1u0rAfSHFnDZIDMQWPEoCUpv+AvP6IF0Nqivz9AWOJahNuhTeYFciCC
Z064q6RfSDEln+KmUQ7dcq/lTBB0C1v7yNEIZXtXtL7ohOjqXAAGct8DAjo5fqTW
KG5wkZU7P7oWY0jvTHNGEYPUFJwGm+g3tHKFjIHbzCW+hrqQXY1JLbsxSXtxWmJE
Ah6rka8zhXW3RxJ5sugdRX3G7inIreAsTEBY+Y78CK79qDy5xr4B
-----END CERTIFICATE-----