Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20323132303237.roa
File:                     33312e362e31332e302f32342d3234203d3e20323132303237.roa (raw, json)
Hash identifier:          tSKaQPrjoMCmMQ1aG9LMWn3O2sLiOzN96aqhP0xmYJs=
Subject key identifier:   42:D5:B2:2D:EE:F8:FA:78:14:A4:A9:06:52:B8:08:04:74:94:6B:46
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       1D0CB4812219CF010815E161C946175A41EE8950
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20323132303237.roa
Signing time:             Fri 08 Mar 2024 06:09:20 +0000
ROA not before:           Fri 08 Mar 2024 06:04:20 +0000
ROA not after:            Fri 07 Mar 2025 06:09:20 +0000
asID:                     212027
IP address blocks:        31.6.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Apr 2024 00:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0c:b4:81:22:19:cf:01:08:15:e1:61:c9:46:17:5a:41:ee:89:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Mar  8 06:04:20 2024 GMT
            Not After : Mar  7 06:09:20 2025 GMT
        Subject: CN=42D5B22DEEF8FA7814A4A90652B8080474946B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e9:7b:53:dc:08:dc:1e:c3:45:b7:91:29:4d:
                    55:bb:af:af:8b:58:85:7a:98:b5:e8:36:36:4c:89:
                    29:ca:5f:19:d9:54:a6:01:f4:31:5c:c4:30:81:54:
                    a0:9a:10:08:f6:10:23:e9:df:86:07:7a:01:7c:97:
                    b7:18:90:d3:b1:50:1c:39:85:f1:75:cd:f1:4f:1d:
                    86:c5:6d:96:ac:77:a6:22:cd:79:9c:cd:0a:61:e3:
                    02:d3:20:05:4f:6a:7d:af:79:af:c7:32:85:ef:7b:
                    ce:77:aa:87:ce:06:77:49:16:e3:5a:6d:f2:d9:a6:
                    f2:ef:7e:f8:13:e8:f2:d5:1d:aa:f2:35:02:4b:da:
                    bd:4e:41:4c:f8:65:f8:45:b6:c2:b9:86:de:a3:b6:
                    e6:c3:3d:02:ab:c9:c9:e8:a5:08:75:04:d2:67:ce:
                    ac:a2:b2:37:2b:9f:e9:d2:16:a3:2f:9c:66:55:25:
                    ee:f4:b8:fb:1a:43:00:1c:a2:65:25:a2:ff:04:5c:
                    dd:b6:46:cb:a3:f6:71:e0:40:1e:c1:8d:e8:f9:63:
                    f8:2a:4b:64:cd:03:00:f9:65:f7:43:b3:f1:e0:d1:
                    a2:cb:db:ca:66:2a:cc:23:8b:6d:98:1f:02:7c:f6:
                    fd:ed:e5:4c:c4:cc:58:74:ee:e5:54:05:1c:a3:41:
                    03:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D5:B2:2D:EE:F8:FA:78:14:A4:A9:06:52:B8:08:04:74:94:6B:46
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e20323132303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:85:64:ed:1b:59:fd:a6:30:1d:44:6e:0a:3a:99:f9:04:3f:
         76:06:d9:34:f8:cc:d4:3e:a5:35:72:f6:0d:db:84:a8:87:0c:
         96:cc:31:95:a1:85:db:f1:23:d8:1c:cc:97:1e:ce:cb:c9:09:
         ef:42:71:37:2a:40:72:cd:29:45:b4:71:87:ac:54:ec:93:55:
         82:72:90:16:94:29:c4:84:7a:56:67:7c:3c:47:7a:3f:97:06:
         98:17:7c:29:5f:d1:0b:fe:39:c2:c1:ec:ad:1c:db:64:51:e0:
         2d:a4:3a:5f:e8:ce:17:08:56:f2:9d:f0:ca:06:88:a9:0b:44:
         35:57:15:be:98:e3:7e:00:e0:17:9e:7e:53:29:5d:c4:56:78:
         02:93:fe:7d:21:8f:7d:c1:5c:57:ab:28:e5:48:73:4d:f9:87:
         e7:22:fb:ee:9f:7a:96:5b:d1:34:5d:5d:39:8f:25:1b:9c:cb:
         52:2c:49:84:1e:55:cc:1e:16:1b:ad:cf:79:2b:b9:68:00:18:
         8b:dd:ff:f3:50:bf:b3:7f:56:52:de:c1:b6:6c:65:e0:61:75:
         bd:c6:ea:86:3d:a2:04:ae:af:9b:41:c0:33:01:8e:71:2b:b7:
         d3:34:85:af:2d:77:10:dd:fd:c9:11:f0:90:ea:88:6a:a8:f9:
         0e:c6:3d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 00:57:47 2024 by rpki-client on console-fra.rpki-client.org