Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33302e302f32342d3234203d3e20323132323338.roa
File:                     34362e3138332e33302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          nhvN6t4vTxtBlwSL2fo460zu5bFxa5njlgq3PCtoWss=
Subject key identifier:   08:18:84:08:7A:44:F6:AE:35:DC:B9:71:B7:9D:02:E9:E9:DB:A2:EF
Certificate issuer:       /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial:       3C6289960EAF6FF123686448EBB3E24B34AB2CAF
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33302e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 30 Jun 2023 08:46:59 +0000
ROA not before:           Fri 30 Jun 2023 08:41:59 +0000
ROA not after:            Fri 28 Jun 2024 08:46:59 +0000
asID:                     212238
IP address blocks:        46.183.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 31 Jul 2023 00:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:62:89:96:0e:af:6f:f1:23:68:64:48:eb:b3:e2:4b:34:ab:2c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
        Validity
            Not Before: Jun 30 08:41:59 2023 GMT
            Not After : Jun 28 08:46:59 2024 GMT
        Subject: CN=081884087A44F6AE35DCB971B79D02E9E9DBA2EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:64:6a:00:64:48:aa:93:95:8b:ea:2d:bc:
                    be:af:cb:2a:5d:e2:c3:76:fe:ac:6f:bc:5e:eb:89:
                    fb:60:8d:30:0b:fa:17:a7:74:72:47:ef:d0:86:71:
                    11:fa:64:1d:e4:e8:4c:90:48:30:fd:98:30:1d:87:
                    c0:2a:27:44:3c:9e:f3:e6:3e:55:61:c6:c3:44:aa:
                    89:bb:0c:1d:d7:77:b3:39:8c:85:f7:33:41:c0:c6:
                    70:46:18:d2:e6:e2:4c:ac:ad:c1:5d:3e:3b:7d:b3:
                    be:7e:85:18:3a:50:83:11:60:18:9c:3d:81:55:7f:
                    35:ea:7f:1e:ff:af:e5:2f:79:cb:92:b3:6e:1b:db:
                    57:51:81:9d:19:14:5e:da:6f:c0:04:6d:43:7f:49:
                    d8:43:8c:77:37:ed:34:50:73:34:6d:ef:6f:36:3c:
                    95:96:ab:19:cc:2a:c1:9c:e6:ce:5e:d8:2a:d6:55:
                    e5:5e:6f:64:25:f7:46:0b:9a:24:36:b9:0b:5b:1e:
                    9b:4b:bb:bd:12:69:13:93:55:45:ba:cb:8c:64:a3:
                    b9:fa:de:58:65:0f:a0:87:62:56:5a:be:43:98:0f:
                    a8:6f:64:0f:e7:a5:e9:a4:10:62:b5:eb:45:70:c5:
                    3a:01:29:53:06:26:9d:37:26:75:8c:10:df:18:54:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:18:84:08:7A:44:F6:AE:35:DC:B9:71:B7:9D:02:E9:E9:DB:A2:EF
            X509v3 Authority Key Identifier:
                keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33302e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:51:9f:b9:9c:69:d0:2b:aa:40:4e:b8:41:b1:e8:40:56:51:
         33:65:7a:45:7f:ac:de:11:71:80:ca:b5:4d:29:f4:d7:46:e5:
         fe:c6:ed:5a:72:05:bb:20:a9:20:fd:f8:1b:36:23:00:56:2a:
         1f:e3:27:45:58:9f:7a:ba:43:fc:fa:e0:af:4b:b6:b2:8a:49:
         b2:6e:63:d5:17:30:1c:bd:68:50:1e:af:99:8d:29:75:c6:b8:
         55:1c:06:75:d4:80:6d:c1:e3:e2:f2:7b:e9:9b:1f:7b:95:5e:
         54:29:59:4a:ff:2b:66:ab:5d:c4:fb:f8:73:92:59:f4:28:6b:
         d0:8e:f9:31:6b:a0:67:fd:0b:03:3f:ea:aa:53:ea:7e:dd:20:
         88:7d:e0:25:f9:8a:6b:b2:c3:50:df:cc:ab:81:7b:57:f8:2b:
         b9:78:49:e2:dc:d8:d3:3a:9d:fd:aa:6c:bc:15:3f:9c:45:6b:
         bb:ef:f1:6b:27:9e:f5:b9:79:83:cc:0e:a9:72:be:21:96:97:
         65:ad:c0:4b:d9:7e:8c:8d:77:b3:d3:40:18:0d:c8:f4:1a:66:
         e2:7c:86:9e:a5:b1:98:5d:74:03:9b:2f:41:94:9e:6a:e7:d6:
         b6:2d:67:e8:87:f9:73:2f:35:f9:7a:31:14:2e:6f:bc:48:d7:
         99:5f:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org