Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32332d3234203d3e20383334.roa
File:                     3137382e3230382e3138322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          97tMUBFogiyxKWzlEmLYf68Nd7LNii9agfXZgmnQDuk=
Subject key identifier:   83:13:E1:ED:44:88:D5:6F:D2:0A:61:55:7B:14:16:AD:35:18:62:92
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       50C191D546BDD16AA5B6181C802995391EB75B06
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32332d3234203d3e20383334.roa
Signing time:             Thu 14 Nov 2024 00:02:09 +0000
ROA not before:           Wed 13 Nov 2024 23:57:09 +0000
ROA not after:            Thu 13 Nov 2025 00:02:09 +0000
asID:                     834
IP address blocks:        178.208.182.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c1:91:d5:46:bd:d1:6a:a5:b6:18:1c:80:29:95:39:1e:b7:5b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Nov 13 23:57:09 2024 GMT
            Not After : Nov 13 00:02:09 2025 GMT
        Subject: CN=8313E1ED4488D56FD20A61557B1416AD35186292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:40:5d:ba:80:7d:40:f8:7e:16:04:8b:d1:
                    b7:91:01:25:3b:25:fb:f2:f5:12:46:16:9c:94:6f:
                    15:47:5b:cc:e2:c5:de:fe:7a:55:fc:93:a9:29:3f:
                    e4:3e:e0:d6:66:ef:cf:69:7c:ce:1a:3f:d8:dd:99:
                    2b:66:04:64:83:30:e5:1d:11:c4:e0:9d:71:ac:8e:
                    7f:8e:9d:4d:b9:c4:1f:59:33:58:17:72:96:d9:c9:
                    18:a9:1f:d5:d1:e4:9d:e6:1e:1d:7f:45:12:30:f2:
                    83:90:43:f6:61:b1:c3:99:03:c1:cd:b6:03:03:19:
                    06:06:2e:b6:2b:4c:f6:7a:52:84:e2:de:37:be:a7:
                    6b:ed:3d:03:10:1a:62:e5:45:f6:4a:06:84:55:90:
                    7d:ec:64:52:e0:f2:96:b9:dc:01:14:ba:99:5b:9d:
                    27:3f:07:ac:a2:65:36:9e:7c:64:24:7e:4f:70:39:
                    38:5c:ed:02:4b:3d:ba:83:e7:fb:20:86:8b:32:c7:
                    10:5e:e0:82:bd:d2:6b:a2:a9:f2:3f:ba:fb:f7:5e:
                    19:19:25:25:58:a0:32:f2:4c:bd:6a:e6:73:8a:35:
                    05:d3:a9:6a:74:16:eb:5c:14:ec:df:85:f8:d0:52:
                    9f:a5:86:1d:da:1f:da:11:96:4d:c5:54:ed:41:81:
                    41:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:13:E1:ED:44:88:D5:6F:D2:0A:61:55:7B:14:16:AD:35:18:62:92
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.208.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:65:cc:c8:39:00:5d:0c:eb:71:49:04:ec:cc:83:e5:e1:71:
         45:92:f8:9e:45:f5:6d:df:59:cb:83:ed:e1:23:06:a0:ac:3c:
         07:4f:b5:dc:a6:e6:30:a8:7f:39:c2:04:fe:a2:19:41:dc:13:
         68:d1:ef:e4:a9:5c:d9:38:ba:0f:f7:64:b3:ab:e3:8f:59:28:
         4d:30:50:c6:b5:67:04:59:ac:da:92:12:e9:82:79:b4:ed:73:
         2e:e9:17:e6:ac:63:82:80:f9:ef:2a:7a:c6:12:f1:7d:a8:8d:
         7c:f8:87:76:ee:6c:4d:b4:a4:ef:15:ad:1f:1c:c5:fe:24:1b:
         85:4d:f2:c6:bb:c5:ff:f0:58:1d:84:40:85:ad:d4:2d:15:7a:
         fa:29:42:33:6d:10:99:1c:48:9f:45:62:26:c9:94:7f:cc:74:
         19:2d:08:cf:a5:3f:87:6c:37:c9:d8:70:83:77:9d:24:3c:b4:
         b4:c7:ba:c9:e5:b0:39:29:8b:53:d9:ea:99:2b:9e:ee:4d:e5:
         73:9b:3d:53:db:46:16:49:ed:15:3d:79:d0:ba:80:67:97:df:
         ca:06:2e:f4:57:68:39:73:4b:03:c2:96:97:26:e2:47:dc:68:
         44:a3:da:1f:2a:ef:20:5a:25:cc:e9:33:7b:eb:98:20:fa:2f:
         8c:9e:33:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 20:09:25 2024 by rpki-client on console-fra.rpki-client.org