Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/32332e3136342e3135322e302f32342d3234203d3e203236353631.roa
File:                     32332e3136342e3135322e302f32342d3234203d3e203236353631.roa (raw, json)
Hash identifier:          TzRUM6/QQnxZcooxSqPwO5FL32o8S7rm0nT3Pmi8o1g=
Subject key identifier:   0F:41:43:B4:ED:1A:12:3D:09:5B:E7:7C:E8:85:BC:09:B8:8A:48:AF
Certificate issuer:       /CN=d90d8aba2a75232dac0a4973b29677a14573561ef341199600
Certificate serial:       6FCCA6A316F80B9891C25BE92834616B2492F344
Authority key identifier: 44:17:C6:2B:C8:BB:64:8A:4A:97:DD:F6:50:5C:2E:44:3E:4B:35:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/32332e3136342e3135322e302f32342d3234203d3e203236353631.roa
Signing time:             Mon 24 Jun 2024 09:52:01 +0000
ROA not before:           Mon 24 Jun 2024 09:47:01 +0000
ROA not after:            Mon 23 Jun 2025 09:52:01 +0000
asID:                     26561
IP address blocks:        23.164.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 16:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cc:a6:a3:16:f8:0b:98:91:c2:5b:e9:28:34:61:6b:24:92:f3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a75232dac0a4973b29677a14573561ef341199600
        Validity
            Not Before: Jun 24 09:47:01 2024 GMT
            Not After : Jun 23 09:52:01 2025 GMT
        Subject: CN=0F4143B4ED1A123D095BE77CE885BC09B88A48AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:d2:70:f1:2a:65:8b:42:59:57:b2:cd:4b:
                    4d:57:1d:c1:bf:8e:6f:b5:ee:d9:d8:c9:e8:1c:9f:
                    25:89:df:26:7b:25:10:87:53:2a:41:ba:02:27:6a:
                    c4:fa:33:be:c7:04:bc:6b:2e:1b:1d:fe:6f:11:d9:
                    19:76:1f:ec:16:21:ec:be:34:56:b6:4c:cc:f0:54:
                    38:1c:4b:96:6f:b2:08:aa:d0:78:43:38:b2:80:bc:
                    c4:4e:16:c6:4f:18:28:59:2a:b9:00:10:e4:ad:8b:
                    08:6a:dc:c4:f0:58:6a:bd:2f:13:22:72:75:7d:9a:
                    59:f9:28:4b:39:b5:54:ce:d8:07:fe:f9:54:7b:07:
                    10:60:e2:f2:45:6e:b5:5c:e2:ac:f3:d4:e9:76:29:
                    59:14:4a:26:85:04:fc:67:10:aa:81:b1:65:d7:4c:
                    e6:9f:c0:13:86:2e:09:15:7c:b9:8f:78:8e:4e:8f:
                    5e:19:6c:94:a8:61:7b:13:24:7e:cf:a9:25:fa:49:
                    1f:d3:11:e8:b5:83:d0:cd:83:f7:08:61:7e:7a:49:
                    70:a9:3f:f2:03:f3:d0:fc:4e:34:8d:de:a8:e7:f9:
                    8a:f9:e7:a5:a6:48:f5:07:2a:a4:fd:5a:27:44:8e:
                    ff:58:e1:31:d4:50:36:e2:e6:0e:99:c8:92:3c:df:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:41:43:B4:ED:1A:12:3D:09:5B:E7:7C:E8:85:BC:09:B8:8A:48:AF
            X509v3 Authority Key Identifier:
                keyid:44:17:C6:2B:C8:BB:64:8A:4A:97:DD:F6:50:5C:2E:44:3E:4B:35:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/32332e3136342e3135322e302f32342d3234203d3e203236353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a3:35:b0:7e:39:cf:28:87:7e:63:89:4b:a5:c7:a7:ce:ae:
         5e:73:fe:9a:ae:f1:03:6e:cc:5f:75:4e:bb:81:d5:39:b0:9b:
         51:69:48:dc:3a:b9:83:69:03:90:87:6c:d4:52:b2:d3:93:a2:
         2a:9a:30:9e:1e:f0:d1:b0:19:ce:1e:c1:05:0c:80:07:ca:bd:
         e5:81:c4:d9:dc:ba:5e:6d:5d:b4:27:7e:26:37:3b:33:ee:37:
         f6:b7:8d:96:70:8f:bd:29:76:c3:ad:b2:44:c7:a4:71:2c:b6:
         cf:cf:34:3e:24:f0:f1:56:b2:e5:7b:af:0f:49:33:ad:ef:59:
         2b:70:ec:20:70:49:f9:a2:4d:4b:8e:9d:49:a0:21:c2:82:a7:
         d9:b9:9e:38:aa:51:11:8e:13:6a:6e:b1:bf:e5:1c:06:44:cb:
         6c:bc:cf:45:da:b1:92:51:8f:4a:f3:f6:86:ae:d0:a8:bf:f2:
         21:11:c2:27:8b:7c:60:eb:a8:64:d6:96:14:67:8a:a2:94:61:
         e1:d8:c6:44:ba:10:b4:0d:a5:e4:0f:ce:11:cb:9c:95:7a:61:
         a6:d6:4a:b9:70:5d:d3:04:2b:fb:96:54:03:39:6b:94:ac:8a:
         a7:f6:aa:9b:28:e7:cd:01:a8:f4:b0:0d:e5:04:13:e7:60:7d:
         aa:fe:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----