Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e312e302f32342d3234203d3e20383334.roa
File:                     33312e362e312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          FELIedNV8fHgthsMtYXSZCvAvkYyuunZQJeoiGyV0+w=
Subject key identifier:   4B:83:C0:31:A9:D4:13:AE:1F:6A:C8:78:1A:3A:00:D1:B3:99:FA:41
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       0FB61CF06AB37259B7A9228B3C92D5789B07D4AB
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e312e302f32342d3234203d3e20383334.roa
Signing time:             Sun 03 Dec 2023 11:20:06 +0000
ROA not before:           Sun 03 Dec 2023 11:15:06 +0000
ROA not after:            Sun 01 Dec 2024 11:20:06 +0000
asID:                     834
IP address blocks:        31.6.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b6:1c:f0:6a:b3:72:59:b7:a9:22:8b:3c:92:d5:78:9b:07:d4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Dec  3 11:15:06 2023 GMT
            Not After : Dec  1 11:20:06 2024 GMT
        Subject: CN=4B83C031A9D413AE1F6AC8781A3A00D1B399FA41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:42:f6:a0:df:72:21:e9:15:28:e8:d0:28:2c:
                    fd:76:44:76:6c:99:d6:2f:6d:a1:4e:74:a6:dc:98:
                    73:93:82:a8:34:f3:fa:b1:a2:dd:0f:e3:5f:8f:a3:
                    51:05:48:8f:9d:73:c6:71:e1:46:43:c8:6d:53:d3:
                    28:24:2c:19:f2:04:13:48:6a:11:24:09:21:ea:39:
                    b2:ae:e5:d2:39:8e:18:7b:c6:9f:9a:67:4b:6d:07:
                    25:42:62:12:3a:9d:85:bb:a7:c1:12:d2:e6:2f:ef:
                    4a:df:19:ce:ee:c9:86:bb:c9:39:cc:85:2c:bc:e4:
                    4b:88:b0:c6:a9:8c:b4:ac:40:56:c3:16:14:6f:c1:
                    7f:ba:46:cf:57:7a:8f:47:1c:7d:ba:f3:e6:c2:45:
                    69:87:ff:52:e4:32:ec:bb:00:4d:07:d4:c2:6b:32:
                    1e:1f:33:4d:87:5e:cc:42:05:99:c4:68:d0:75:7c:
                    4d:4d:42:c4:6c:94:5e:93:f9:3a:a4:f2:0e:dd:f5:
                    5c:ee:a9:07:41:fe:91:28:85:b9:a5:51:08:a0:30:
                    60:a9:a6:52:6f:37:6e:8a:d3:db:34:1a:0f:0e:5d:
                    67:cc:2e:5f:07:92:38:22:f9:66:65:dc:e6:d9:10:
                    fa:b1:11:05:07:20:a3:b4:4f:28:c2:c7:8b:d7:56:
                    82:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:83:C0:31:A9:D4:13:AE:1F:6A:C8:78:1A:3A:00:D1:B3:99:FA:41
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:39:95:14:f8:2c:46:07:30:72:05:38:87:88:a6:3b:a7:02:
         88:a2:e1:54:07:ab:b2:e7:dd:98:ab:57:a1:5d:7d:73:74:15:
         95:5e:90:c6:0c:d2:f3:9b:f9:ec:27:06:88:8e:ba:c4:b7:4f:
         8e:65:d5:83:e1:da:cd:cb:f0:de:fb:bd:dd:67:0d:87:f1:75:
         14:53:1c:8b:11:dd:cc:c1:5a:f3:48:92:ea:cc:93:68:da:2f:
         a7:60:8c:39:b2:80:05:c8:4d:aa:b9:11:23:aa:cc:32:07:f3:
         16:04:78:31:84:7a:4b:6d:92:57:9f:85:36:d2:b0:b9:a2:fe:
         ff:b5:03:67:61:c3:e8:5f:79:db:34:ec:47:3c:fd:96:20:26:
         86:b4:6c:ab:47:00:9d:c4:6a:1a:cc:32:11:c5:3d:41:b6:e2:
         1d:50:93:68:e2:1e:f7:85:9e:15:2c:20:06:9e:2c:e9:59:3d:
         b9:e8:e6:ff:8d:d9:01:46:05:f6:88:b6:d7:41:03:25:1b:c4:
         f3:66:eb:5b:03:59:9f:83:d7:a6:4f:dc:ba:fa:b8:8b:84:04:
         68:7d:9c:80:9a:a9:f7:a3:c2:42:a3:a8:32:7c:72:c2:de:1b:
         f8:b1:9c:31:95:7c:e2:a0:0d:e5:f0:5c:80:3a:fc:9a:f8:4b:
         40:45:92:ec
-----BEGIN CERTIFICATE-----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Generated at Thu Dec 14 07:05:11 2023 by rpki-client on console-ams.rpki-client.org