Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32342d3234203d3e20383334.roa
File:                     34362e3138332e32342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          zgLNAu1IYga1vr6cL/HbVs1iYOyWlvi+78jGXzqEH1w=
Subject key identifier:   27:4E:28:B5:99:2B:24:99:B8:8D:34:7D:96:DE:98:F8:2B:F6:79:6C
Certificate issuer:       /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial:       728E023589780C788AEB67366F6A46EC3EEE94B9
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32342d3234203d3e20383334.roa
Signing time:             Thu 20 Jun 2024 17:45:52 +0000
ROA not before:           Thu 20 Jun 2024 17:40:52 +0000
ROA not after:            Thu 19 Jun 2025 17:45:52 +0000
asID:                     834
IP address blocks:        46.183.24.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 26 Jun 2024 06:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8e:02:35:89:78:0c:78:8a:eb:67:36:6f:6a:46:ec:3e:ee:94:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
        Validity
            Not Before: Jun 20 17:40:52 2024 GMT
            Not After : Jun 19 17:45:52 2025 GMT
        Subject: CN=274E28B5992B2499B88D347D96DE98F82BF6796C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:a3:16:e4:34:0e:40:5f:34:17:59:e7:ec:
                    35:53:e3:38:25:9f:65:b9:20:4c:cc:61:68:c2:c3:
                    fe:1a:d6:a2:9d:37:11:cb:97:15:57:d1:24:40:5c:
                    3d:ac:f5:18:96:56:ff:58:74:ea:31:36:cd:79:75:
                    57:14:fa:46:10:0c:56:cf:48:55:ca:61:11:9e:6c:
                    81:7f:4a:17:53:a2:1b:c1:e5:08:3f:0f:73:e3:e3:
                    6b:01:78:93:90:34:55:95:fd:79:bb:fc:e9:3b:a0:
                    91:c6:9f:eb:fc:e6:dd:41:8e:1e:bc:a8:26:88:bc:
                    fb:4b:2e:88:2a:8c:1b:62:30:3e:2c:fb:53:80:87:
                    2e:e9:19:6f:f0:0e:f0:d2:a0:76:7d:85:fc:9c:5e:
                    bf:f1:0e:d8:37:ae:89:50:81:5f:3d:ea:2f:8e:98:
                    bd:7f:53:c7:82:65:9a:06:6f:fb:ce:d8:61:f5:42:
                    c3:60:52:5a:3a:a8:8e:61:2e:c2:bb:5c:74:55:fe:
                    06:f2:2f:c3:d1:1f:9b:f4:70:18:0a:b6:8c:50:34:
                    48:92:15:ee:01:f5:25:d3:b5:1f:84:a8:f0:95:5e:
                    54:07:09:ad:eb:4b:b4:ed:ba:fb:67:83:51:3a:fc:
                    8c:c6:e7:c2:d8:07:71:50:20:df:4e:69:a4:e5:cf:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4E:28:B5:99:2B:24:99:B8:8D:34:7D:96:DE:98:F8:2B:F6:79:6C
            X509v3 Authority Key Identifier:
                keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:77:81:43:73:8c:76:18:d3:37:16:24:6c:4f:09:df:ac:4b:
         1d:66:89:4c:a0:e4:9b:96:06:9a:7a:c2:15:f8:f7:61:3a:79:
         c4:4b:44:7d:e9:80:72:a2:a1:09:d4:2a:60:16:a2:b6:b2:6c:
         ee:aa:49:e2:01:8c:ce:b6:4f:d2:a7:f0:a2:c4:c2:a7:e6:1f:
         fc:f9:2e:e6:3c:88:d9:15:f9:d9:a5:8b:eb:63:42:d5:26:98:
         7a:bb:51:01:67:67:45:17:36:22:a8:a8:3c:79:5a:a3:ee:1f:
         e4:cf:37:60:fa:ce:95:6a:e8:c3:6d:c5:05:82:6e:b0:59:31:
         4b:7d:9c:3a:45:cc:c4:68:67:cf:38:e2:6f:9c:b9:ee:07:a5:
         86:a2:4a:6a:f8:94:ed:d1:1b:7a:45:f0:03:c2:4d:7f:7f:8c:
         e4:8a:69:e4:09:bd:9f:4e:f8:ed:07:65:36:93:4a:4f:b4:39:
         ed:81:58:c4:6f:ec:94:e4:10:4d:ed:45:94:b7:d9:e5:a8:2b:
         54:9d:ab:77:e1:1c:53:06:09:11:52:c5:fe:7a:fe:93:d9:4b:
         b4:be:12:a9:2e:38:f3:c9:56:61:03:00:3c:79:26:08:a2:11:
         b3:0f:c6:f9:c2:f4:7e:e1:6d:b3:5a:30:36:f5:94:b0:0b:1d:
         a8:c6:17:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:16 2025 by rpki-client