Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32342d3234203d3e203537303433.roa
File:                     34362e3138332e32342e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier:          EThALvokvohaJ8jPEXFWuTG3FwqmeRupWO6PudvGR9k=
Subject key identifier:   5E:BE:F0:DF:75:89:C4:B6:1D:E8:81:3C:5A:AF:C4:BC:5A:1C:DB:93
Certificate issuer:       /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial:       53BF3D8EA8AEB228B4E8680681155B09742B2440
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32342d3234203d3e203537303433.roa
Signing time:             Tue 19 Sep 2023 10:11:11 +0000
ROA not before:           Tue 19 Sep 2023 10:06:11 +0000
ROA not after:            Tue 17 Sep 2024 10:11:11 +0000
asID:                     57043
IP address blocks:        46.183.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 02 Oct 2023 16:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bf:3d:8e:a8:ae:b2:28:b4:e8:68:06:81:15:5b:09:74:2b:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
        Validity
            Not Before: Sep 19 10:06:11 2023 GMT
            Not After : Sep 17 10:11:11 2024 GMT
        Subject: CN=5EBEF0DF7589C4B61DE8813C5AAFC4BC5A1CDB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:2c:db:95:2b:4b:0f:9d:48:21:5e:d8:bc:
                    4d:19:73:1a:0b:b7:bf:2b:eb:54:dd:5f:0a:25:76:
                    d3:d9:f1:70:4b:b7:e4:6f:cb:a7:90:cc:7c:6a:7e:
                    23:e6:69:03:40:91:a4:11:da:08:11:34:a2:b8:84:
                    89:12:4e:fe:e2:28:11:fe:92:82:b9:c8:c7:d2:76:
                    d1:09:ea:f5:d5:e2:5f:7e:c0:08:11:ff:ab:8a:ff:
                    c7:f0:25:a0:d7:c8:8f:88:88:a0:fc:cc:45:3f:45:
                    23:a5:4d:0f:99:d4:17:21:89:c6:7a:3e:97:a8:4f:
                    bf:01:d5:1a:62:f7:2d:45:9b:92:e6:9d:b6:6a:f4:
                    13:45:7a:91:97:13:34:10:3f:8d:37:0a:eb:71:09:
                    6c:20:3f:4c:00:cf:05:f0:69:29:1f:87:d1:29:85:
                    85:f5:4d:93:a9:0e:f1:87:79:c7:26:29:2e:12:a6:
                    77:f8:87:48:d8:6c:a9:82:57:79:67:fa:0b:9f:9d:
                    ce:e2:49:1f:95:cc:b4:4c:74:ef:a3:01:2a:eb:90:
                    d3:7a:4c:06:94:b3:29:0a:b2:14:9a:15:d3:3e:5d:
                    a1:91:3f:ef:64:a5:d8:ed:92:0f:59:14:eb:96:67:
                    a2:65:04:02:93:a1:0b:04:cf:53:b1:ec:53:ab:0a:
                    29:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BE:F0:DF:75:89:C4:B6:1D:E8:81:3C:5A:AF:C4:BC:5A:1C:DB:93
            X509v3 Authority Key Identifier:
                keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32342d3234203d3e203537303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:8b:0b:57:8d:05:48:59:a2:56:93:ee:b4:a7:01:7b:98:30:
         0b:f3:5f:0f:49:3d:be:28:6d:2f:83:46:a4:ec:24:2d:cd:b3:
         8f:a1:10:2d:4a:f4:02:04:98:03:0d:a6:39:46:94:5c:16:d7:
         76:3b:ab:76:a5:ff:2c:8e:a9:06:4a:29:e7:41:f6:7f:30:7a:
         6d:f5:4b:a1:b1:49:a0:0e:0f:ee:02:d3:e6:b9:cd:35:45:a6:
         7f:d2:d5:5e:2e:59:43:2a:d8:75:d7:cf:9a:48:03:90:c0:71:
         0e:c4:0c:aa:d0:e2:0b:92:bf:07:41:9a:fa:f5:07:56:89:f3:
         74:fe:0c:3c:eb:f4:be:fa:1f:f5:1e:3b:21:4b:cf:92:08:c7:
         86:d7:d9:c8:0a:5f:1d:be:88:4d:23:2c:75:e6:df:df:16:75:
         dd:f4:13:66:9e:06:b9:ab:bf:0b:36:03:63:ea:3c:53:15:2a:
         72:4b:b4:d3:a6:c0:94:80:a3:9a:bc:0a:d5:86:41:3c:5e:3e:
         b8:35:d8:4e:62:e3:cf:17:0a:1c:d4:58:3b:28:af:ec:3b:43:
         df:ea:5d:c9:bd:5b:0e:45:20:c1:20:9e:78:51:58:33:91:da:
         eb:c5:56:19:da:d5:ba:bd:b2:3b:bf:6c:f2:76:34:91:a5:88:
         28:60:bc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:55 2024 by rpki-client on console-ams.rpki-client.org