Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203233343730.roa
File:                     3138382e3136342e3135342e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          aVLLqKBpXFqk1it8Ad4+bksL4GrUxp/DZl1/lf+a2DE=
Subject key identifier:   55:B0:C9:9B:EB:41:A4:89:58:F2:46:F8:38:38:2C:59:03:9F:D4:D8
Certificate issuer:       /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial:       0F220DE974291F13ADFD0E78D2E949F7FAE9B59A
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203233343730.roa
Signing time:             Thu 03 Aug 2023 10:31:54 +0000
ROA not before:           Thu 03 Aug 2023 10:26:54 +0000
ROA not after:            Thu 01 Aug 2024 10:31:54 +0000
asID:                     23470
IP address blocks:        188.164.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 09 Aug 2023 14:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:22:0d:e9:74:29:1f:13:ad:fd:0e:78:d2:e9:49:f7:fa:e9:b5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
        Validity
            Not Before: Aug  3 10:26:54 2023 GMT
            Not After : Aug  1 10:31:54 2024 GMT
        Subject: CN=55B0C99BEB41A48958F246F838382C59039FD4D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:9c:b1:48:08:eb:0c:5c:3d:68:73:23:33:
                    fd:ec:a7:60:c2:fb:19:ce:b9:f6:22:7f:d5:3e:89:
                    b3:70:d6:a4:7c:17:4a:4b:16:4b:70:03:b4:4d:b1:
                    94:81:1d:d2:3d:67:f2:52:a8:cd:37:a7:45:e9:e7:
                    f9:5a:0f:45:47:e0:4a:d1:d2:31:1d:16:4c:bb:1a:
                    01:0d:f4:2c:d9:c2:6c:bf:49:30:bc:47:6f:45:8d:
                    c7:02:fb:a2:12:c1:a1:da:26:dc:16:0a:a0:91:e3:
                    d7:5c:2e:bf:31:f1:2f:c7:fe:ab:ea:88:e6:d0:78:
                    0d:fb:dd:f1:97:1d:4c:6f:bc:d0:6a:75:8c:c0:9d:
                    38:9e:d1:59:8b:de:54:08:c5:24:5e:a8:4b:06:e8:
                    90:87:b4:55:98:b5:c9:ff:d4:10:c2:bd:ad:6a:96:
                    a4:76:de:39:c5:07:2b:08:90:e2:4a:51:ba:62:ec:
                    e8:e0:07:bc:67:5a:75:93:20:c8:b3:5e:98:8f:63:
                    cc:5f:82:e6:32:fb:2a:bd:89:6b:5e:83:e0:fc:8f:
                    70:76:e7:51:7e:7d:92:28:8b:29:e0:a7:f7:0c:25:
                    09:26:14:70:cd:e1:35:e4:32:50:9f:d2:ff:23:7e:
                    1d:41:8a:a7:55:f2:8a:06:e2:4a:29:66:03:ad:9c:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B0:C9:9B:EB:41:A4:89:58:F2:46:F8:38:38:2C:59:03:9F:D4:D8
            X509v3 Authority Key Identifier:
                keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.164.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a5:6a:50:45:2a:b9:8b:15:23:e5:5c:87:2f:c8:87:ec:bd:
         b0:60:ec:76:73:61:d1:fc:8a:3a:1d:cc:8a:06:25:6b:d3:40:
         d8:fc:be:f1:9b:ed:25:51:35:f4:e6:c4:cf:a8:95:74:12:e8:
         2c:75:77:2e:94:b4:2e:c7:8c:01:67:41:8a:e7:4d:c3:92:16:
         02:ee:4f:6f:ee:af:16:89:91:f1:a2:e9:a2:a8:5c:af:62:47:
         ee:a0:da:76:0a:98:c3:2a:7b:4e:2d:74:98:52:f3:a6:38:1b:
         e1:3c:a6:d7:87:0e:26:c2:50:f8:d6:12:e6:ac:94:40:3e:ac:
         80:24:ea:75:80:5c:fc:1a:57:df:51:2e:7c:de:36:5f:d3:95:
         7c:e4:61:b5:fb:cd:cc:62:c6:36:90:3f:6d:3a:1c:85:21:27:
         a1:f7:f5:f6:41:50:4f:1e:79:20:e8:2f:81:f0:64:8c:dd:3f:
         61:eb:a9:d6:fa:c3:a8:42:1d:d7:37:82:89:39:10:97:ed:1c:
         7e:41:20:ee:cb:97:c4:47:56:46:b2:aa:6a:fb:c0:55:d5:ff:
         f4:7f:4c:2a:ac:fc:d4:23:69:07:dd:0b:ef:d7:37:39:4e:9c:
         08:dd:90:33:d5:4a:fb:1c:7a:88:5e:df:f0:4a:6d:47:b9:a1:
         b6:6e:d3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org