Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138332e302f32342d3234203d3e20383334.roa
File:                     3137382e3230382e3138332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          V5y935lzUirsYlCHT+1YCvBJK7BsSfVNk6dMAbV5vMw=
Subject key identifier:   2B:59:1C:AE:C0:0B:77:80:29:8E:73:7C:E8:70:D1:C5:D9:B3:27:FF
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       1C63CC9A1365624877DD03D5298059275A8C78B1
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138332e302f32342d3234203d3e20383334.roa
Signing time:             Thu 14 Nov 2024 18:03:14 +0000
ROA not before:           Thu 14 Nov 2024 17:58:14 +0000
ROA not after:            Thu 13 Nov 2025 18:03:14 +0000
asID:                     834
IP address blocks:        178.208.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 19:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:63:cc:9a:13:65:62:48:77:dd:03:d5:29:80:59:27:5a:8c:78:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Nov 14 17:58:14 2024 GMT
            Not After : Nov 13 18:03:14 2025 GMT
        Subject: CN=2B591CAEC00B7780298E737CE870D1C5D9B327FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:24:8a:78:bd:fa:ba:37:b2:b4:1e:df:be:4d:
                    fc:ff:3a:c1:2a:7b:ad:f3:47:c9:c9:9a:0f:c5:a8:
                    cb:7a:94:52:31:00:23:87:e6:77:58:be:ad:2b:47:
                    80:2e:b9:7a:28:ce:29:5e:fe:f5:ec:40:d6:22:bf:
                    87:bf:b1:30:56:e2:57:5f:65:68:de:54:94:b6:41:
                    d7:02:b3:f9:13:83:c9:5e:67:7e:56:73:10:0f:41:
                    3a:69:78:e1:27:8c:08:63:f5:1b:e5:76:ac:d1:c2:
                    c6:24:f2:b7:3f:78:1b:9e:61:d8:66:ff:af:ae:d2:
                    b5:f0:74:e6:44:42:a6:db:a7:98:79:07:f7:12:09:
                    e6:e6:ad:71:c7:c4:f6:6b:c9:f1:81:70:c0:2a:8d:
                    ae:86:32:5d:df:7c:17:c7:55:54:c6:01:36:74:2d:
                    d7:b6:19:c4:cd:e4:dc:dc:f9:cf:fd:78:39:98:8e:
                    27:7e:f8:b2:ab:7d:06:6b:f5:e5:23:23:e5:6a:34:
                    40:83:ac:ab:d2:62:fd:f1:11:d5:d9:8a:63:d4:ca:
                    64:b8:ea:8f:8b:29:f8:77:c4:96:0b:82:af:16:f8:
                    d2:ab:80:ca:b1:94:50:d3:a8:a4:85:56:7b:db:ae:
                    32:78:0f:16:c3:39:8c:b4:3b:a5:34:e7:e6:ef:75:
                    79:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:59:1C:AE:C0:0B:77:80:29:8E:73:7C:E8:70:D1:C5:D9:B3:27:FF
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.208.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:0a:f6:72:53:29:af:1a:09:f1:1f:02:5c:6a:d0:e2:36:11:
         78:b5:53:2a:68:8b:90:ed:1f:b8:65:83:19:68:ec:90:5b:27:
         6c:8e:2b:38:98:68:c3:5c:78:ee:4a:91:ea:f6:d3:ec:91:9f:
         96:e7:1c:c0:9f:24:fe:e0:f4:d1:b7:d6:aa:15:f8:32:c6:99:
         e6:b6:18:a8:52:56:b8:b0:e8:29:14:43:45:ba:6f:38:16:0c:
         c3:c5:15:d6:28:45:b4:39:d9:14:4c:cc:bb:63:9a:46:ee:34:
         8a:be:d1:6e:5a:4f:2e:a2:2b:a6:ee:26:ec:59:d9:11:d5:1f:
         36:cc:37:02:53:93:02:e8:2a:a9:8a:cf:1b:e7:a4:5e:d4:50:
         43:c7:2e:00:3f:97:d9:1f:55:21:a1:85:8d:55:76:f0:89:18:
         d5:74:ed:95:d2:11:83:49:83:17:43:8b:bf:40:6c:86:0d:f2:
         f0:0e:fd:d0:19:a0:7b:37:65:ff:5a:25:af:5c:c6:80:5b:3b:
         30:44:50:a1:87:01:9c:cb:26:0e:9a:4d:08:1b:0e:a2:fc:27:
         b7:62:07:04:83:28:30:ff:17:e7:fe:33:83:9c:d5:a2:5a:3e:
         eb:d5:bd:03:45:bb:a4:f4:86:3a:3a:c2:b8:99:ba:91:23:3e:
         fd:6c:a0:ec
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 14 21:58:15 2024 by rpki-client on console-ams.rpki-client.org