Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33302e302f32342d3234203d3e20383334.roa
File:                     34362e3138332e33302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          lz7WVTySxVtXeU653lrdLWJPi13HHt8NmxUiiXjAzdE=
Subject key identifier:   4B:FB:24:3A:5C:4C:B7:6D:9C:2C:12:CD:B1:9D:17:13:58:2F:6F:8B
Certificate issuer:       /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial:       11245E807BB10034177CEF1C7F943D25834DCBBF
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33302e302f32342d3234203d3e20383334.roa
Signing time:             Mon 31 Jul 2023 00:00:12 +0000
ROA not before:           Sun 30 Jul 2023 23:55:12 +0000
ROA not after:            Mon 29 Jul 2024 00:00:12 +0000
asID:                     834
IP address blocks:        46.183.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 01 Aug 2023 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:24:5e:80:7b:b1:00:34:17:7c:ef:1c:7f:94:3d:25:83:4d:cb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
        Validity
            Not Before: Jul 30 23:55:12 2023 GMT
            Not After : Jul 29 00:00:12 2024 GMT
        Subject: CN=4BFB243A5C4CB76D9C2C12CDB19D1713582F6F8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:d1:8b:b8:4e:52:17:b6:ee:b1:42:cb:00:
                    40:4c:fb:6b:cc:90:02:52:54:22:0b:81:47:81:b2:
                    22:ce:1c:7b:88:61:ec:d3:e6:81:cb:0a:0e:e5:91:
                    4b:06:58:e2:db:7e:b7:ff:db:96:71:11:20:35:99:
                    98:20:01:6e:dd:0d:9d:82:cb:92:63:90:5b:0e:0e:
                    f4:a7:b7:fd:c0:71:cd:33:dd:d0:93:6a:5f:5a:c5:
                    5c:18:e6:4c:31:51:d0:61:3e:8f:5e:e2:38:cd:92:
                    e7:40:08:35:70:22:d8:98:cf:23:d5:96:3c:ef:b9:
                    81:7e:f3:46:bb:f2:e4:3a:81:92:fc:18:e4:7e:df:
                    c7:51:46:f6:47:eb:dd:0a:46:d8:86:18:4c:80:d8:
                    18:fe:46:41:94:b5:a3:d2:48:73:65:ac:58:73:ab:
                    2d:a3:5a:88:f2:da:9c:2f:ee:7d:6e:15:7d:ff:6b:
                    91:f2:a3:fd:e5:9d:e1:d2:ae:73:c4:4f:f8:f1:0a:
                    2c:73:7a:6e:e5:75:87:0e:29:e8:44:0b:80:74:5a:
                    f0:bf:96:a1:ad:10:9b:77:a7:09:12:d9:77:2f:ef:
                    3c:83:e5:1f:90:03:25:be:be:0b:a4:8c:05:72:73:
                    1c:7e:f0:48:df:c6:d0:dc:c4:b6:7e:7f:d7:cb:ac:
                    7e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FB:24:3A:5C:4C:B7:6D:9C:2C:12:CD:B1:9D:17:13:58:2F:6F:8B
            X509v3 Authority Key Identifier:
                keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:19:22:0c:b7:76:69:60:34:7a:37:28:9f:59:64:4e:a2:2b:
         0e:96:c5:3a:d5:d9:23:05:26:2b:3b:c8:e6:11:50:f7:99:de:
         9e:bc:83:2d:b7:94:c5:34:62:3f:14:d6:7c:54:5e:92:73:30:
         3c:51:8e:18:26:fa:ae:76:1d:c0:77:db:f5:c4:2e:d7:55:fd:
         e3:49:a2:fc:4f:14:34:ed:7d:78:23:06:4a:19:90:2f:41:e5:
         85:02:d7:b9:77:b6:7d:5b:ff:3d:b6:d2:45:ee:86:b3:93:6b:
         69:86:21:84:22:b6:d8:82:64:c1:24:27:4b:87:aa:5c:f1:e3:
         ed:f8:1e:66:e9:02:31:a5:80:06:1f:57:4e:a7:d8:52:f7:53:
         08:75:c3:5a:40:00:91:3e:e6:70:50:a6:32:57:bf:99:db:a7:
         cc:7d:fd:52:c4:2b:a1:68:07:5f:84:62:d7:89:9f:cb:a4:e5:
         5b:25:9c:13:5f:c1:ce:98:6d:2d:35:24:71:15:f7:ef:7a:1e:
         13:09:f5:ce:e7:c1:73:0d:99:62:c5:6a:78:99:ce:e3:6a:a8:
         45:dc:1f:57:6e:ae:ea:20:10:68:9c:f8:0a:ca:97:26:94:a7:
         38:fd:d1:18:c0:b6:e5:c9:1c:18:7e:46:7f:ab:b4:11:2c:2b:
         1c:f4:1c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:55 2024 by rpki-client on console-ams.rpki-client.org