Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32362e302f32342d3234203d3e203432303535.roa
File:                     34362e3138332e32362e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier:          uC+qLekBm3KRa+8rtgvFb0Re1zVo3maA+9nNiEHcDZE=
Subject key identifier:   9F:56:A0:B3:A9:D0:0A:C2:46:A7:ED:3F:F2:EC:6D:9A:46:12:31:37
Certificate issuer:       /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial:       40A518A47D57F9929B30F97F5A790AF68DAFC12D
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32362e302f32342d3234203d3e203432303535.roa
Signing time:             Tue 03 Oct 2023 15:18:48 +0000
ROA not before:           Tue 03 Oct 2023 15:13:48 +0000
ROA not after:            Tue 01 Oct 2024 15:18:48 +0000
asID:                     42055
IP address blocks:        46.183.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Oct 2023 08:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a5:18:a4:7d:57:f9:92:9b:30:f9:7f:5a:79:0a:f6:8d:af:c1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
        Validity
            Not Before: Oct  3 15:13:48 2023 GMT
            Not After : Oct  1 15:18:48 2024 GMT
        Subject: CN=9F56A0B3A9D00AC246A7ED3FF2EC6D9A46123137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:f5:ed:45:2f:88:fa:25:91:36:f4:d0:1e:
                    0e:07:b8:3f:eb:65:2d:23:38:46:6c:73:51:d1:0a:
                    f2:6f:d0:23:5c:cb:9d:bb:46:99:69:cd:af:28:f1:
                    f9:e2:96:a7:6d:5c:a6:20:e8:70:ea:6f:78:02:0f:
                    86:09:c1:6d:ef:f4:76:ac:05:69:db:cb:f7:7f:05:
                    02:5c:41:37:8e:10:78:35:b6:73:2d:25:1c:33:8c:
                    5f:9c:3f:4b:98:8d:59:a5:bb:cb:1a:a4:30:cf:6d:
                    a6:64:41:3c:82:88:ec:c3:76:50:43:94:40:48:77:
                    eb:3d:de:7e:0d:6f:9b:fe:0d:8f:6d:c5:d3:f0:87:
                    8a:7e:ad:4b:ee:40:b5:41:12:86:68:f0:a8:a0:a2:
                    c7:16:eb:a2:33:e9:df:d5:19:4b:ab:be:5e:3c:12:
                    e3:41:6b:c0:72:5a:90:7d:c0:46:e7:15:0c:4c:33:
                    72:44:b0:a5:3c:96:2a:93:fb:48:0c:1d:e3:52:e8:
                    ff:03:33:58:22:18:6e:43:ad:3f:9c:eb:1a:65:1d:
                    96:ce:36:d2:e1:4f:fb:71:65:9d:44:b8:ab:fb:47:
                    45:54:a7:df:80:ae:b9:fa:6c:9f:ed:50:2b:0c:6a:
                    c3:26:3c:06:26:a3:06:bc:4a:d2:34:e4:ac:79:b8:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:56:A0:B3:A9:D0:0A:C2:46:A7:ED:3F:F2:EC:6D:9A:46:12:31:37
            X509v3 Authority Key Identifier:
                keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32362e302f32342d3234203d3e203432303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:b9:f1:e1:fc:97:16:26:16:4f:a3:0e:b6:f7:27:43:71:53:
         52:d9:be:49:b9:d4:68:99:c3:e7:d1:30:c1:d6:7c:52:72:ed:
         2f:56:e4:50:9f:10:44:e7:18:8e:3b:3f:3a:29:a9:a6:93:c7:
         b3:b5:f3:7f:30:45:99:32:da:c2:94:f3:d7:a1:ad:66:c9:99:
         d6:49:7e:89:68:12:2b:b2:47:54:d9:06:c3:e2:6e:c9:3c:25:
         1b:8b:d4:87:f0:fe:74:49:59:6a:d3:f0:98:39:24:38:e4:ab:
         b5:e6:d7:06:37:cc:44:53:21:ec:33:4f:1b:07:c6:be:9a:31:
         4f:5a:bc:7b:7e:fb:25:cd:94:a4:85:b7:cf:2e:5d:9b:f4:fc:
         f8:2b:0a:9a:b8:03:35:a1:39:68:1e:3f:f8:76:1f:15:de:af:
         b5:76:41:2c:8b:4f:31:e3:70:96:da:71:1f:45:06:ef:f6:2e:
         d1:40:c8:af:98:aa:77:e8:e1:d4:9b:3e:53:66:18:f0:19:39:
         e5:6c:75:44:cd:3d:da:53:95:91:cd:2b:cd:c6:4a:06:61:fb:
         13:6f:63:26:0d:89:bb:da:41:96:15:02:7f:9f:94:a2:5e:4d:
         35:2f:2e:fc:07:5e:3e:28:05:61:d6:4f:cd:00:5a:f8:83:d3:
         c1:ae:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:55 2024 by rpki-client on console-ams.rpki-client.org