Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/32332e3136342e3135322e302f32332d3234203d3e203630383538.roa
File:                     32332e3136342e3135322e302f32332d3234203d3e203630383538.roa (raw, json)
Hash identifier:          FK+4dXoKQf6T1/2YEC1PTVAsORIP3HPe+QNJhTc6XQw=
Subject key identifier:   ED:25:2C:C4:3A:66:53:F7:3D:4E:2E:87:CD:5F:D9:47:16:8A:ED:57
Certificate issuer:       /CN=d90d8aba2a75232dac0a4973b29677a14573561ef341199600
Certificate serial:       7B986C75F2425B6343E0A2AB0F6DFB336A81AD64
Authority key identifier: 44:17:C6:2B:C8:BB:64:8A:4A:97:DD:F6:50:5C:2E:44:3E:4B:35:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/32332e3136342e3135322e302f32332d3234203d3e203630383538.roa
Signing time:             Wed 22 May 2024 18:36:21 +0000
ROA not before:           Wed 22 May 2024 18:31:21 +0000
ROA not after:            Wed 21 May 2025 18:36:21 +0000
asID:                     60858
IP address blocks:        23.164.152.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 16 Jun 2024 16:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:98:6c:75:f2:42:5b:63:43:e0:a2:ab:0f:6d:fb:33:6a:81:ad:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a75232dac0a4973b29677a14573561ef341199600
        Validity
            Not Before: May 22 18:31:21 2024 GMT
            Not After : May 21 18:36:21 2025 GMT
        Subject: CN=ED252CC43A6653F73D4E2E87CD5FD947168AED57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:04:8e:00:3b:81:85:e6:d1:d8:17:8b:75:5c:
                    ed:e8:3a:9a:68:6b:1a:76:1e:9f:c6:a8:c5:9c:16:
                    00:ce:5d:98:a2:d2:c1:aa:3d:cc:c3:7d:1c:39:34:
                    ae:f6:7d:0c:c8:c9:ce:15:4a:00:8d:dc:c9:74:12:
                    2c:cc:38:58:d5:59:aa:f3:62:7c:36:1a:6c:eb:f8:
                    4b:69:56:f1:29:f5:b0:98:03:9a:b3:f6:2c:33:46:
                    5c:dd:15:95:ff:bf:0a:f9:44:6e:6a:21:ff:b3:f7:
                    89:60:fd:fa:b3:b6:82:7a:4e:6c:51:ae:4c:9c:ea:
                    f7:60:a2:8f:77:1e:32:ce:57:23:5f:e7:6b:b0:cc:
                    d6:29:94:39:b3:ed:2a:a0:0b:cd:2a:8d:ce:d2:d9:
                    62:27:c2:29:cc:8b:59:4f:1c:2d:b0:b4:fb:f4:5d:
                    fe:6c:5f:93:58:fc:3c:ce:dc:ef:d9:55:5a:b6:72:
                    da:14:53:7d:a9:b0:21:66:e7:ef:ac:fc:ce:86:18:
                    36:78:af:a1:47:96:fa:17:d7:91:a9:66:59:7a:fe:
                    24:d9:ac:0e:1d:73:90:37:22:1c:d3:ce:6a:8e:ec:
                    b8:59:59:44:eb:be:8d:d9:d7:f5:90:7a:31:35:f5:
                    42:b0:b0:b4:49:c2:d7:d0:10:86:33:82:bf:e8:4a:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:25:2C:C4:3A:66:53:F7:3D:4E:2E:87:CD:5F:D9:47:16:8A:ED:57
            X509v3 Authority Key Identifier:
                keyid:44:17:C6:2B:C8:BB:64:8A:4A:97:DD:F6:50:5C:2E:44:3E:4B:35:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/32332e3136342e3135322e302f32332d3234203d3e203630383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:ae:54:29:11:37:9c:37:a5:71:45:1d:32:f1:4f:d3:a8:b4:
         8a:55:e6:1d:ed:e5:f1:64:e7:ff:f0:cd:be:58:6e:3a:d6:a8:
         ca:59:4e:16:81:0f:14:7d:60:d2:5e:fe:a9:9b:3a:a3:d7:7f:
         7a:55:d9:39:22:83:bb:9f:0e:9e:59:56:13:a6:b3:df:e6:3a:
         8d:2f:08:55:6b:b8:0c:11:00:97:db:f9:9d:20:32:98:f2:cd:
         f5:97:45:e4:1b:e2:9d:2b:32:29:7a:e1:a4:4c:4c:de:56:9c:
         cb:de:6e:6c:e4:ed:cb:60:4a:8a:8e:9c:5b:28:1b:7d:d1:80:
         82:f0:3e:1f:ea:81:27:df:29:84:d7:3e:85:9c:e0:f7:c4:03:
         58:0b:2a:16:d8:cf:93:e5:92:e4:8f:e9:5b:7b:16:84:a4:63:
         ad:89:8d:14:c1:47:59:46:30:78:c6:e6:98:a5:e6:1b:91:21:
         a9:87:39:10:d2:9b:75:23:ed:57:44:44:b1:b0:8c:d0:d0:8b:
         b2:71:29:a9:08:40:18:49:e9:3c:00:68:42:4c:32:39:de:d5:
         c9:54:87:38:0e:c0:a1:79:c2:e6:ff:05:77:d9:2c:a8:fa:e4:
         43:d4:ce:ec:b2:b1:2d:dd:d6:b1:fe:3c:06:9f:14:a9:e8:35:
         28:96:18:d0
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIUe5hsdfJCW2ND4KKrD237M2qBrWQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTc1MjMyZGFjMGE0OTczYjI5Njc3YTE0
NTczNTYxZWYzNDExOTk2MDAwHhcNMjQwNTIyMTgzMTIxWhcNMjUwNTIxMTgzNjIx
WjAzMTEwLwYDVQQDEyhFRDI1MkNDNDNBNjY1M0Y3M0Q0RTJFODdDRDVGRDk0NzE2
OEFFRDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ASOADuBhebR
2BeLdVzt6DqaaGsadh6fxqjFnBYAzl2YotLBqj3Mw30cOTSu9n0MyMnOFUoAjdzJ
dBIszDhY1Vmq82J8Nhps6/hLaVbxKfWwmAOas/YsM0Zc3RWV/78K+URuaiH/s/eJ
YP36s7aCek5sUa5MnOr3YKKPdx4yzlcjX+drsMzWKZQ5s+0qoAvNKo3O0tliJ8Ip
zItZTxwtsLT79F3+bF+TWPw8ztzv2VVatnLaFFN9qbAhZufvrPzOhhg2eK+hR5b6
F9eRqWZZev4k2awOHXOQNyIc085qjuy4WVlE676N2df1kHoxNfVCsLC0ScLX0BCG
M4K/6EouOwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFO0lLMQ6ZlP3PU4uh81f2UcW
iu1XMB8GA1UdIwQYMBaAFEQXxivIu2SKSpfd9lBcLkQ+SzX/MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJkZTJmNjRkLWY2ZTUtNDdlMy1hNmZi
LTY4NmQ4OGU3MWFlOS8yLzQ0MTdDNjJCQzhCQjY0OEE0QTk3RERGNjUwNUMyRTQ0
M0U0QjM1RkYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2Et
NGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0y
OGFmNGRlNDMwZTIvZDkwZDhhYmEyYTc1MjMyZGFjMGE0OTczYjI5Njc3YTE0NTcz
NTYxZWYzNDExOTk2MDAuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH
MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzJkZTJmNjRkLWY2ZTUtNDdlMy1hNmZiLTY4NmQ4OGU3MWFlOS8yLzMyMzMyZTMx
MzYzNDJlMzEzNTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMDM4MzUzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEARekmDANBgkqhkiG9w0BAQsFAAOCAQEAJK5UKRE3nDelcUUdMvFP
06i0ilXmHe3l8WTn//DNvlhuOtaoyllOFoEPFH1g0l7+qZs6o9d/elXZOSKDu58O
nllWE6az3+Y6jS8IVWu4DBEAl9v5nSAymPLN9ZdF5BvinSsyKXrhpExM3lacy95u
bOTty2BKio6cWygbfdGAgvA+H+qBJ98phNc+hZzg98QDWAsqFtjPk+WS5I/pW3sW
hKRjrYmNFMFHWUYweMbmmKXmG5EhqYc5ENKbdSPtV0REsbCM0NCLsnEpqQhAGEnp
PABoQkwyOd7VyVSHOA7AoXnC5v8Fd9ksqPrkQ9TO7LKxLd3Wsf48Bp8Uqeg1KJYY
0A==
-----END CERTIFICATE-----