Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231352e302f32342d3234203d3e20383334.roa
File:                     3138352e3130302e3231352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          5DXBw42TEDkun9vm91mjdpAo1ICIX5b6eX5Ay3zVxmI=
Subject key identifier:   21:98:84:1C:44:69:5C:E0:58:D7:88:7B:4F:73:B4:CC:02:41:42:28
Certificate issuer:       /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial:       7ACEBFD3CF5D6AB2805EBFDDBD480143165D8292
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231352e302f32342d3234203d3e20383334.roa
Signing time:             Thu 11 Apr 2024 00:02:01 +0000
ROA not before:           Wed 10 Apr 2024 23:57:01 +0000
ROA not after:            Thu 10 Apr 2025 00:02:01 +0000
asID:                     834
IP address blocks:        185.100.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ce:bf:d3:cf:5d:6a:b2:80:5e:bf:dd:bd:48:01:43:16:5d:82:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
        Validity
            Not Before: Apr 10 23:57:01 2024 GMT
            Not After : Apr 10 00:02:01 2025 GMT
        Subject: CN=2198841C44695CE058D7887B4F73B4CC02414228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:13:a2:e9:c8:38:b4:db:f1:c1:85:01:a0:
                    b4:6b:e7:aa:f8:96:f5:92:fb:8d:f3:e4:7a:fd:1f:
                    fb:c3:4d:8b:b1:0c:44:39:c2:22:e2:2a:93:5c:d7:
                    a7:ce:f9:8e:d0:a3:04:c6:9f:a8:b9:12:9c:ad:8d:
                    7b:66:26:f3:11:07:2c:77:d9:46:46:ee:81:17:8b:
                    d8:84:76:5e:87:7a:23:38:95:f4:23:d7:30:06:03:
                    71:35:0d:02:81:92:80:fc:83:e5:56:f5:a4:47:6e:
                    27:04:88:de:15:d0:c7:5e:3e:6d:e5:6c:4d:e7:25:
                    e7:d1:4d:7e:f7:77:de:44:79:ca:94:22:16:37:d6:
                    53:84:f3:42:d3:e0:55:a7:0c:9f:2d:7a:9f:bf:75:
                    9f:8c:15:26:af:95:d5:6b:af:1b:01:90:8c:f6:1a:
                    ff:8b:56:11:18:9c:30:34:2b:80:f9:29:50:6d:ab:
                    6c:cb:ea:78:a5:38:37:2d:bb:ea:9f:fb:31:1d:a4:
                    b0:d1:6f:fa:ad:ca:20:39:09:d0:0f:fb:3f:82:f2:
                    87:d2:48:37:29:d9:4d:47:78:5a:9e:61:3c:e7:2f:
                    3c:12:46:de:61:a0:b2:bd:61:e0:4c:31:0f:2b:2a:
                    fd:ff:42:19:da:0b:bc:70:8a:57:92:6f:0e:7d:fc:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:98:84:1C:44:69:5C:E0:58:D7:88:7B:4F:73:B4:CC:02:41:42:28
            X509v3 Authority Key Identifier:
                keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.100.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:80:78:93:08:c7:1a:ad:8f:d8:c7:cc:d5:53:7e:08:7b:6a:
         d8:eb:5c:75:24:af:82:29:0f:2e:c7:bc:0a:61:9f:b1:61:77:
         b1:ea:fb:9d:86:f6:e5:bf:95:43:a2:c5:7e:b2:18:65:c1:7e:
         fc:27:9e:dc:7b:95:61:ce:19:31:36:c9:5c:f2:df:a4:63:7a:
         c4:fb:07:f6:5b:4b:6f:eb:21:f0:53:2c:67:96:a9:82:aa:b9:
         b3:8f:2b:5f:c3:87:99:29:0f:d6:43:67:11:41:67:ed:4a:5d:
         85:66:27:cf:66:73:ee:3a:39:34:78:ae:3d:7d:3a:84:54:fb:
         55:eb:23:67:64:41:20:a9:8d:ab:8a:85:2a:31:04:ca:77:84:
         33:47:bd:65:64:3d:3d:e7:9d:fb:b4:71:9e:b7:6c:b3:0f:ca:
         74:6a:e0:53:7e:46:b9:4c:f9:9b:0c:dd:c9:6d:84:c3:84:e8:
         10:34:59:39:47:4d:7a:95:64:bd:47:60:93:33:9a:0c:b0:ed:
         a8:af:2e:b7:dc:8d:83:43:9c:64:56:0e:9b:2e:6e:38:53:63:
         3e:22:b2:cf:7a:96:e7:ea:a6:4e:87:29:21:2c:66:ef:a1:21:
         28:54:fb:e4:ea:b2:57:e8:3e:c2:a0:e8:0c:1a:ee:43:a7:6a:
         c5:da:1f:42
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUes6/089darKAXr/dvUgBQxZdgpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNDA0MTAyMzU3MDFaFw0yNTA0MTAwMDAyMDFaMDMxMTAvBgNV
BAMTKDIxOTg4NDFDNDQ2OTVDRTA1OEQ3ODg3QjRGNzNCNENDMDI0MTQyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYBOi6cg4tNvxwYUBoLRr56r4
lvWS+43z5Hr9H/vDTYuxDEQ5wiLiKpNc16fO+Y7QowTGn6i5EpytjXtmJvMRByx3
2UZG7oEXi9iEdl6HeiM4lfQj1zAGA3E1DQKBkoD8g+VW9aRHbicEiN4V0MdePm3l
bE3nJefRTX73d95EecqUIhY31lOE80LT4FWnDJ8tep+/dZ+MFSavldVrrxsBkIz2
Gv+LVhEYnDA0K4D5KVBtq2zL6nilODctu+qf+zEdpLDRb/qtyiA5CdAP+z+C8ofS
SDcp2U1HeFqeYTznLzwSRt5hoLK9YeBMMQ8rKv3/QhnaC7xwileSbw59/KYrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUIZiEHERpXOBY14h7T3O0zAJBQigwHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzEzODM1MmUzMTMwMzAyZTMy
MzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlk
1zANBgkqhkiG9w0BAQsFAAOCAQEAdoB4kwjHGq2P2MfM1VN+CHtq2OtcdSSvgikP
Lse8CmGfsWF3ser7nYb25b+VQ6LFfrIYZcF+/Cee3HuVYc4ZMTbJXPLfpGN6xPsH
9ltLb+sh8FMsZ5apgqq5s48rX8OHmSkP1kNnEUFn7UpdhWYnz2Zz7jo5NHiuPX06
hFT7VesjZ2RBIKmNq4qFKjEEyneEM0e9ZWQ9Peed+7Rxnrdssw/KdGrgU35GuUz5
mwzdyW2Ew4ToEDRZOUdNepVkvUdgkzOaDLDtqK8ut9yNg0OcZFYOmy5uOFNjPiKy
z3qW5+qmTocpISxm76EhKFT75OqyV+g+wqDoDBruQ6dqxdofQg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org