Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215817.roa
File:                     AS215817.roa (raw, json)
Hash identifier:          hZLfwkj54nP/TCfJ/jPvUYlQAoyXhBJ3r3AtHNRsj/g=
Subject key identifier:   32:17:EE:7F:00:06:D3:14:1E:87:BC:F6:DE:A8:25:FA:85:D1:12:BA
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       24D7AA5142577D54A20DF659B7AB7A3EA2BCF180
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215817.roa
Signing time:             Tue 25 Jun 2024 06:33:29 +0000
ROA not before:           Tue 25 Jun 2024 06:28:29 +0000
ROA not after:            Tue 24 Jun 2025 06:33:29 +0000
asID:                     215817
IP address blocks:        179.61.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 19 Aug 2024 00:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d7:aa:51:42:57:7d:54:a2:0d:f6:59:b7:ab:7a:3e:a2:bc:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Jun 25 06:28:29 2024 GMT
            Not After : Jun 24 06:33:29 2025 GMT
        Subject: CN=3217EE7F0006D3141E87BCF6DEA825FA85D112BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:18:19:0a:6e:9a:b4:d0:0a:f9:64:5e:ad:
                    31:fd:c6:5e:d0:d8:7b:d2:8c:3b:74:54:cc:1d:5d:
                    d9:c2:db:a8:44:a0:f0:2d:a8:85:f2:d8:be:e1:3e:
                    54:71:d5:85:12:e5:76:9b:ab:b8:32:d0:30:f2:8d:
                    5c:f9:06:b4:7e:47:89:c4:c2:c5:de:04:a7:6d:c7:
                    06:40:6c:55:1b:79:c8:39:0f:73:34:20:5a:0d:e9:
                    9f:25:aa:18:ce:14:97:68:a9:fa:0a:80:5f:50:dc:
                    58:32:44:f0:a0:a2:86:d8:3a:2d:08:99:c8:cb:cd:
                    6d:30:f7:69:b7:cc:33:21:e3:6b:21:58:e0:db:79:
                    9f:a9:c3:2d:85:bd:69:2e:81:c9:65:43:10:04:af:
                    66:3a:67:1b:b5:d8:cc:73:e0:fa:6b:01:ce:67:cf:
                    40:72:3d:f3:d3:17:18:fb:e9:84:a2:b3:6f:ec:e2:
                    31:2c:60:41:1f:4d:8d:81:12:19:19:61:e2:ba:bf:
                    08:f4:f1:9f:92:97:12:15:3e:13:16:93:3a:c0:fc:
                    a1:0b:61:5a:60:98:e2:c3:3a:ac:0f:1a:26:14:ec:
                    7e:d2:d9:43:ce:08:52:fa:ab:fd:fb:a7:28:29:61:
                    b1:dd:16:21:c3:34:dd:c6:c3:a3:4f:0f:57:fc:54:
                    ca:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:17:EE:7F:00:06:D3:14:1E:87:BC:F6:DE:A8:25:FA:85:D1:12:BA
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215817.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:3f:f6:2c:b8:0c:3c:4b:e8:24:ab:e7:a2:b5:27:c7:a4:
         53:d3:50:49:b3:0b:46:78:46:e6:eb:60:7b:b7:e6:52:9f:81:
         81:27:be:b5:7b:fd:9f:90:d7:27:28:ad:b5:74:a2:48:48:dd:
         db:ef:ed:78:4f:ab:24:7c:80:9a:a8:19:41:4f:fc:7f:91:a9:
         88:f9:9c:a8:04:7e:c3:d2:c1:be:4d:22:d3:fe:1a:d7:bb:22:
         76:25:7c:12:a2:9c:6e:19:4e:4f:36:54:be:e9:76:77:7a:fc:
         38:ce:3b:90:5b:09:ed:44:c6:d9:96:98:41:9e:d3:ed:9e:c7:
         2b:31:f4:69:7b:24:cd:6b:68:70:c4:5f:6c:6e:21:43:e3:f5:
         55:29:4d:a5:aa:42:e2:cc:58:78:2a:47:51:d9:99:d5:25:fd:
         92:d9:3e:02:f6:8b:34:59:ce:4c:66:95:f4:2f:bf:81:c6:66:
         bd:d6:1c:e3:cb:95:95:1f:26:c4:e0:d4:df:fb:a4:7b:ed:2b:
         43:e9:02:d0:6c:dc:68:b8:01:ae:2c:21:80:66:0c:36:d7:34:
         4f:c7:a8:89:59:f1:de:bd:62:38:9d:f2:13:b0:a4:a2:ee:c7:
         b0:be:2e:78:e0:1e:e9:3f:fd:81:ff:9a:70:75:8c:9e:23:13:
         25:86:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 02:27:08 2024 by rpki-client on console-ams.rpki-client.org