Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32352e302f32342d3234203d3e203432303535.roa
File:                     34362e3138332e32352e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier:          AFETc7nmz9ss6sBg04x/Lsli13L4rmBRUFZV54+j1QI=
Subject key identifier:   55:6B:C2:7C:C0:03:82:37:1A:27:3F:D7:82:F8:CE:33:7A:E0:AF:74
Certificate issuer:       /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial:       5AF31E4839D478B0F8F6E26F555963CA76E027E6
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32352e302f32342d3234203d3e203432303535.roa
Signing time:             Tue 03 Oct 2023 15:18:42 +0000
ROA not before:           Tue 03 Oct 2023 15:13:42 +0000
ROA not after:            Tue 01 Oct 2024 15:18:42 +0000
asID:                     42055
IP address blocks:        46.183.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Oct 2023 08:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f3:1e:48:39:d4:78:b0:f8:f6:e2:6f:55:59:63:ca:76:e0:27:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
        Validity
            Not Before: Oct  3 15:13:42 2023 GMT
            Not After : Oct  1 15:18:42 2024 GMT
        Subject: CN=556BC27CC00382371A273FD782F8CE337AE0AF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:ab:24:47:00:6d:dc:d4:58:92:15:3a:05:
                    87:b7:a8:cb:a6:0d:4a:91:e0:de:ad:9e:df:08:01:
                    96:65:e0:59:1e:d8:f2:99:75:53:b8:4c:1d:2c:f0:
                    99:8e:dd:1b:db:38:45:8a:3a:c8:85:11:96:33:c3:
                    81:04:6a:f2:f8:fe:09:db:74:c3:eb:4f:db:0e:c0:
                    c9:bb:e0:97:1f:a4:1e:62:f9:c8:45:e9:e5:67:0e:
                    90:35:41:63:56:f1:67:a4:90:bc:14:c3:e1:f6:20:
                    c9:37:ee:88:2a:42:8d:08:c2:bc:cc:36:25:31:69:
                    a0:98:82:05:6c:de:ee:83:dc:9a:9d:dc:ef:23:72:
                    a6:d7:25:bb:6f:b1:87:5a:bd:ce:41:84:9a:e0:b8:
                    89:58:fe:f0:79:80:22:6b:db:27:2c:7c:e5:1c:18:
                    0e:c1:9f:bd:31:ae:01:b0:e2:26:8b:a0:a1:fe:c4:
                    d6:74:43:69:8a:30:4e:47:7c:fd:ed:86:81:8b:dd:
                    a8:39:d3:6b:9a:de:11:d8:a9:98:a1:a9:4e:4e:59:
                    ca:7d:88:f4:24:db:99:ac:74:b4:23:95:83:26:32:
                    68:d5:cc:2f:91:a9:14:5a:fd:3d:7e:59:5f:d2:f3:
                    54:c7:5c:10:73:5f:91:bf:20:43:93:7e:67:cc:3e:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6B:C2:7C:C0:03:82:37:1A:27:3F:D7:82:F8:CE:33:7A:E0:AF:74
            X509v3 Authority Key Identifier:
                keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32352e302f32342d3234203d3e203432303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:83:2c:db:c3:eb:34:5b:6f:7d:fa:7e:9a:d1:c0:aa:72:af:
         4c:66:82:f7:b8:d4:24:b2:59:54:95:db:e3:60:a5:ed:5b:1b:
         82:67:ea:48:84:b2:fc:c9:78:1e:08:bc:05:26:62:9f:d1:35:
         c4:74:f4:cc:bf:ba:8d:f9:03:ff:9b:a8:14:71:01:45:b1:ea:
         9c:81:24:8e:10:fb:ab:9e:2c:94:b8:60:f3:1c:8c:cc:a6:8e:
         c5:ed:81:b9:a7:88:2e:b0:3e:8b:13:5d:67:9f:a4:c8:7d:45:
         c6:cf:15:31:c4:63:67:5d:04:8d:e0:83:ed:83:ee:51:b2:38:
         7d:27:2f:bf:94:b8:5d:7c:9e:54:f4:33:4a:c6:7c:79:07:20:
         66:1d:9c:e3:ba:5a:d9:3f:c0:da:e4:11:bc:1b:79:50:c4:29:
         41:8f:eb:12:d9:19:4a:88:f8:81:ce:c6:59:62:16:36:22:6b:
         eb:71:4d:00:4a:c2:4d:9d:f5:48:bc:1c:57:cc:9b:76:b2:4d:
         1f:bf:76:ed:0f:79:2b:a8:9a:9d:1d:74:f2:c5:e2:3c:e3:32:
         9d:50:e0:44:db:85:07:6f:36:7e:ed:bd:d2:4b:0b:51:11:bb:
         f2:7e:bf:d4:00:f3:5c:6a:d5:6b:ce:b2:58:b6:0c:6c:4e:2f:
         ad:7c:20:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org