Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230352e302f32342d3234203d3e203631333137.roa
File:                     3139342e3135302e3230352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          t6d8lBzbC82NaJ7KaJllbdj/gRvbpSIxsPN36JvF6Ak=
Subject key identifier:   3F:89:93:DB:CB:23:5A:51:C9:E6:EC:9D:A0:11:46:E7:60:A2:28:33
Certificate issuer:       /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial:       4BB019EF9455081A22B20C8EB8A5523D37123ED7
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230352e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 31 May 2023 14:23:49 +0000
ROA not before:           Wed 31 May 2023 14:18:49 +0000
ROA not after:            Wed 29 May 2024 14:23:49 +0000
asID:                     61317
IP address blocks:        194.150.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b0:19:ef:94:55:08:1a:22:b2:0c:8e:b8:a5:52:3d:37:12:3e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
        Validity
            Not Before: May 31 14:18:49 2023 GMT
            Not After : May 29 14:23:49 2024 GMT
        Subject: CN=3F8993DBCB235A51C9E6EC9DA01146E760A22833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:da:85:74:5e:ef:c5:d3:cc:b9:e0:25:b2:
                    9b:a2:31:b7:42:9f:70:2b:1e:08:00:ed:c4:95:e2:
                    28:f7:00:a5:79:b6:45:4f:08:95:58:e2:dc:47:01:
                    38:d7:48:ee:56:e2:56:51:cc:4f:bd:a2:47:03:e5:
                    ef:0b:fe:d2:55:16:6a:8d:2c:29:5a:92:61:06:32:
                    c3:e2:d1:93:85:1c:de:44:ab:07:cf:9e:49:ca:e1:
                    1b:8e:1b:f6:68:a2:6b:1f:67:09:a6:70:13:1f:c6:
                    c3:06:03:36:e8:92:ac:be:e4:96:35:c0:07:15:20:
                    da:a1:cb:c2:c2:3e:d9:b4:9d:7c:2a:f8:9b:80:9b:
                    46:30:41:fb:57:c8:4a:0a:ac:59:20:5a:ed:7c:96:
                    08:b1:1e:d1:fd:48:9b:69:6f:f3:c1:c3:18:72:82:
                    92:e1:cf:63:29:27:25:17:79:eb:23:39:62:d6:98:
                    41:29:27:01:94:5d:70:bc:f9:60:8a:b2:70:1d:e8:
                    75:46:a7:63:b4:c4:f9:9f:fd:0c:a0:77:8b:a0:29:
                    d9:ba:9b:b8:ca:cd:6e:7d:cc:4e:96:a1:b2:27:9f:
                    a0:ff:97:fa:c0:b3:70:04:4f:df:9f:c4:6a:d2:a1:
                    cc:ce:70:9c:a9:8a:06:f0:67:66:b2:1f:f2:bc:14:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:89:93:DB:CB:23:5A:51:C9:E6:EC:9D:A0:11:46:E7:60:A2:28:33
            X509v3 Authority Key Identifier:
                keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:ca:3a:f1:21:86:bf:c5:0a:98:b2:a8:f6:13:fd:13:be:
         73:88:19:83:2f:6f:1b:ad:ab:6c:3e:ed:53:0d:e1:b5:79:cd:
         9f:a9:38:84:52:6c:f2:ac:52:59:4d:1c:35:0a:a3:14:31:a1:
         69:2d:ce:88:62:01:39:39:df:6a:5c:17:6d:77:a1:1e:94:0f:
         76:d1:6a:ea:8f:fa:09:23:a4:3c:0e:c9:31:59:b4:c0:ac:1f:
         6e:42:cf:5d:6c:b2:73:58:4b:f2:e1:f1:26:36:46:bc:c8:4c:
         b7:a3:5c:41:56:fb:e6:c9:dd:61:22:93:ca:42:68:d9:83:43:
         2a:a5:a6:33:aa:2c:2a:12:ba:93:11:22:4f:ce:8d:40:da:5e:
         b2:fd:97:ff:d5:19:94:63:bb:5e:88:ee:d3:27:f9:8e:56:91:
         fb:88:ec:6b:1d:09:af:16:e5:8e:2d:5f:ad:26:20:71:de:80:
         23:15:95:cb:f1:de:a8:80:97:f8:96:37:71:1c:09:b1:8e:26:
         93:6f:d4:20:06:b4:65:4e:90:d2:d6:5a:fe:b5:97:64:c7:d3:
         15:0a:ac:1f:84:9a:d5:3f:84:eb:ad:0f:de:72:19:ff:b8:4f:
         e1:a4:4f:6c:a0:b1:6e:b5:82:7d:d5:fe:8d:bf:a5:58:c3:f7:
         0d:4e:53:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:44 2023 by rpki-client on console-ams.rpki-client.org