Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203233343730.roa
File:                     33312e362e31332e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          2/TNA4NoE2VtXqm94Zb9Q7nsi2CKUSpOjoYSVDEKpx4=
Subject key identifier:   55:88:75:A4:21:2C:A6:85:47:C6:07:A3:46:52:2D:FB:FB:5E:DD:B9
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       52A272537DE2E180F98B84522E293C5EE842EA62
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203233343730.roa
Signing time:             Sun 04 Feb 2024 15:53:34 +0000
ROA not before:           Sun 04 Feb 2024 15:48:34 +0000
ROA not after:            Sun 02 Feb 2025 15:53:34 +0000
asID:                     23470
IP address blocks:        31.6.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Mar 2024 10:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a2:72:53:7d:e2:e1:80:f9:8b:84:52:2e:29:3c:5e:e8:42:ea:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Feb  4 15:48:34 2024 GMT
            Not After : Feb  2 15:53:34 2025 GMT
        Subject: CN=558875A4212CA68547C607A346522DFBFB5EDDB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:ea:b2:96:e2:a2:80:c4:f5:a1:60:cc:85:
                    fc:60:b2:06:a4:a2:69:4d:d2:01:44:02:61:91:2e:
                    08:b3:d4:84:1e:86:db:61:55:75:af:1c:44:7b:00:
                    03:df:e1:53:1b:5d:95:33:4c:ea:ac:b8:b4:ea:12:
                    31:b4:e4:12:2a:23:9b:16:20:9f:4d:df:db:09:75:
                    40:73:3f:a5:8e:2b:27:37:de:3e:f5:78:0e:79:04:
                    60:f8:65:54:69:55:2e:e0:5b:1c:cf:c5:b2:e9:52:
                    39:70:6b:42:40:02:b6:56:2f:67:78:71:92:35:fd:
                    df:8b:a0:f4:d0:20:95:6e:30:1c:f7:fa:2f:1f:17:
                    f5:bc:5e:fe:f2:43:5a:af:96:b0:34:f6:aa:ab:11:
                    fb:69:6e:fa:df:23:38:3c:c8:de:74:3b:48:20:42:
                    8c:cb:01:7a:44:b2:44:8f:d6:1a:fa:c5:84:ca:4b:
                    85:44:17:bc:7d:5e:1f:b7:43:26:ae:28:e9:61:70:
                    3c:79:4b:8c:be:cc:d0:ff:f5:36:18:45:fe:fc:ab:
                    04:c9:7f:8a:69:05:f3:d0:84:bc:94:f5:5e:8c:66:
                    e8:52:c4:c2:79:ee:32:97:af:4f:ef:2c:4e:00:26:
                    5f:b0:04:88:12:40:3c:b2:1f:a3:a9:22:ed:c2:56:
                    5a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:88:75:A4:21:2C:A6:85:47:C6:07:A3:46:52:2D:FB:FB:5E:DD:B9
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:bc:46:b0:d3:7e:db:c2:f0:13:47:2d:15:21:de:15:7f:8b:
         4d:ba:29:83:0f:2b:f2:8e:62:1a:ab:73:cb:e9:4e:22:be:14:
         23:1b:ce:c5:3e:04:9a:7c:50:5a:92:04:6b:ea:21:2d:bb:17:
         c9:2b:6e:7c:0d:50:df:4a:46:06:0f:73:e8:77:20:e4:04:d9:
         5a:3e:a0:e4:29:46:d9:b7:4f:8f:16:14:12:7f:05:ba:f9:43:
         86:3d:0c:ee:0c:f2:c5:bf:61:06:05:6c:f7:6d:a5:e3:7c:18:
         f6:10:f0:98:c1:42:0f:25:62:b1:a6:9e:37:8c:11:a6:22:47:
         d8:6d:f8:d9:b0:4c:46:8e:be:97:cd:fe:6a:22:98:8d:c1:54:
         d9:04:01:b7:55:49:91:b4:e2:63:51:aa:d5:69:e9:69:0d:53:
         a8:8e:c1:ef:e5:f3:6c:df:1d:26:4c:0b:ab:a9:a5:7a:c1:73:
         58:5c:b5:37:55:e9:12:7f:f8:8d:6b:21:54:15:d7:64:e6:5a:
         2a:a7:bc:2b:c2:34:f9:98:2b:ca:f4:94:3b:ef:70:cd:61:f0:
         d4:7a:8e:8a:51:cd:94:3c:ec:64:96:70:8f:14:ec:2d:dc:21:
         2f:91:46:ef:05:f9:23:ee:35:58:da:00:a6:6d:a7:96:5c:4c:
         90:0f:0a:68
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUUqJyU33i4YD5i4RSLik8XuhC6mIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDAyMDQxNTQ4MzRaFw0yNTAyMDIxNTUzMzRaMDMxMTAvBgNV
BAMTKDU1ODg3NUE0MjEyQ0E2ODU0N0M2MDdBMzQ2NTIyREZCRkI1RUREQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDOqyluKigMT1oWDMhfxgsgak
omlN0gFEAmGRLgiz1IQehtthVXWvHER7AAPf4VMbXZUzTOqsuLTqEjG05BIqI5sW
IJ9N39sJdUBzP6WOKyc33j71eA55BGD4ZVRpVS7gWxzPxbLpUjlwa0JAArZWL2d4
cZI1/d+LoPTQIJVuMBz3+i8fF/W8Xv7yQ1qvlrA09qqrEftpbvrfIzg8yN50O0gg
QozLAXpEskSP1hr6xYTKS4VEF7x9Xh+3QyauKOlhcDx5S4y+zND/9TYYRf78qwTJ
f4ppBfPQhLyU9V6MZuhSxMJ57jKXr0/vLE4AJl+wBIgSQDyyH6OpIu3CVloVAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUVYh1pCEspoVHxgejRlIt+/te3bkwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMxMzMyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYNMA0G
CSqGSIb3DQEBCwUAA4IBAQBJvEaw037bwvATRy0VId4Vf4tNuimDDyvyjmIaq3PL
6U4ivhQjG87FPgSafFBakgRr6iEtuxfJK258DVDfSkYGD3PodyDkBNlaPqDkKUbZ
t0+PFhQSfwW6+UOGPQzuDPLFv2EGBWz3baXjfBj2EPCYwUIPJWKxpp43jBGmIkfY
bfjZsExGjr6Xzf5qIpiNwVTZBAG3VUmRtOJjUarVaelpDVOojsHv5fNs3x0mTAur
qaV6wXNYXLU3VekSf/iNayFUFddk5loqp7wrwjT5mCvK9JQ773DNYfDUeo6KUc2U
POxklnCPFOwt3CEvkUbvBfkj7jVY2gCmbaeWXEyQDwpo
Generated at Tue Mar 5 12:43:32 2024 by rpki-client on console-fra.rpki-client.org