Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313431393638.roa
File:                     33312e362e31342e302f32342d3234203d3e20313431393638.roa (raw, json)
Hash identifier:          qOOC/RlB2kmWvQ+PrSObLlLxKoG7pCGjL8gvdwZugJw=
Subject key identifier:   7E:70:4A:4A:58:46:CD:1B:73:3B:4D:EF:3F:8B:29:9D:F0:A3:D2:D9
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       6D44D68472BD27791DA6D5D8D498F4AB7B49503B
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313431393638.roa
Signing time:             Thu 30 May 2024 12:45:20 +0000
ROA not before:           Thu 30 May 2024 12:40:20 +0000
ROA not after:            Thu 29 May 2025 12:45:20 +0000
asID:                     141968
IP address blocks:        31.6.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 06:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:44:d6:84:72:bd:27:79:1d:a6:d5:d8:d4:98:f4:ab:7b:49:50:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: May 30 12:40:20 2024 GMT
            Not After : May 29 12:45:20 2025 GMT
        Subject: CN=7E704A4A5846CD1B733B4DEF3F8B299DF0A3D2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:34:24:e6:90:29:73:6e:ef:c3:6d:21:5b:
                    14:18:6a:9c:2a:89:ec:59:c0:d7:62:dd:cf:30:b3:
                    7a:44:3c:36:13:6e:84:8a:81:55:e5:de:f0:eb:53:
                    bd:50:6e:82:e2:94:9e:0c:8b:d2:da:0e:fd:69:67:
                    56:89:9b:5d:7c:f2:7c:e4:65:ad:27:5f:8c:03:51:
                    cd:cb:40:57:e7:6e:60:ac:46:6f:22:db:a4:08:6d:
                    3a:97:de:98:f3:5e:3e:95:d4:f8:9b:99:16:6f:c5:
                    f1:9f:09:12:b3:3e:f5:99:3f:de:40:dc:e6:d3:a8:
                    58:ec:eb:12:1d:96:67:96:fa:d9:3b:e5:0e:1f:ee:
                    96:53:54:cd:b8:43:92:38:34:7d:9a:a1:e5:85:cb:
                    7f:ac:7d:f8:be:94:51:2f:95:23:c6:3c:a9:0c:4d:
                    e2:ea:7a:c4:65:09:35:ea:c0:4f:3e:75:76:20:a2:
                    12:31:92:b1:fe:76:6a:c2:bd:43:24:49:d3:02:80:
                    b4:64:74:dd:b2:22:33:97:0c:30:c8:41:78:f5:e5:
                    11:7d:3a:5e:4d:96:62:a7:37:de:7b:ac:ff:f6:b4:
                    57:ba:bc:39:9a:a1:b5:f8:e7:16:11:38:e8:c3:2b:
                    18:54:a8:d3:3d:a3:80:a5:6f:b2:33:20:60:f0:20:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:70:4A:4A:58:46:CD:1B:73:3B:4D:EF:3F:8B:29:9D:F0:A3:D2:D9
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:8d:ab:c5:5b:56:a3:6f:f2:d3:49:86:7b:6a:a9:21:16:e6:
         f0:8c:11:88:4c:31:e3:bd:fc:6d:40:6a:ce:02:61:58:01:29:
         5e:b6:a9:0a:18:95:ad:5e:72:bd:d5:1c:77:19:e5:07:4c:c3:
         e9:f7:8e:7b:18:7d:2d:dc:4d:f6:79:21:3e:20:6a:a1:52:8b:
         b7:d2:83:f9:a3:99:b4:6a:fa:84:af:ed:ec:b6:9e:5c:97:4d:
         76:4e:32:f9:8d:73:25:cb:df:ae:ee:4b:59:68:ad:81:91:71:
         e2:76:fb:58:14:45:95:be:ba:a4:92:06:dc:e8:ae:3a:0c:33:
         d3:4b:6f:88:26:0b:83:eb:ac:fe:25:02:78:fa:a2:a0:65:70:
         23:66:ed:25:6f:a7:1d:57:f0:14:32:e6:96:ee:b8:06:dd:7a:
         2b:c3:67:c7:b8:27:0d:db:63:d3:7b:1e:c8:29:32:2f:78:bf:
         e9:a6:ed:27:57:03:f3:9f:62:a7:0c:9b:b9:3a:54:12:7d:0f:
         e1:f1:41:54:81:fe:f2:ee:53:56:39:55:fd:12:f2:aa:ff:51:
         ca:5b:0b:59:6b:10:b2:0e:19:6e:82:c4:2b:9a:2e:32:f3:28:
         92:9a:d8:e5:da:cc:02:ef:58:6d:93:5b:c6:be:7b:32:92:c6:
         77:bb:9b:df
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUbUTWhHK9J3kdptXY1Jj0q3tJUDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA1MzAxMjQwMjBaFw0yNTA1MjkxMjQ1MjBaMDMxMTAvBgNV
BAMTKDdFNzA0QTRBNTg0NkNEMUI3MzNCNERFRjNGOEIyOTlERjBBM0QyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYyjQk5pApc27vw20hWxQYapwq
iexZwNdi3c8ws3pEPDYTboSKgVXl3vDrU71QboLilJ4Mi9LaDv1pZ1aJm1188nzk
Za0nX4wDUc3LQFfnbmCsRm8i26QIbTqX3pjzXj6V1PibmRZvxfGfCRKzPvWZP95A
3ObTqFjs6xIdlmeW+tk75Q4f7pZTVM24Q5I4NH2aoeWFy3+sffi+lFEvlSPGPKkM
TeLqesRlCTXqwE8+dXYgohIxkrH+dmrCvUMkSdMCgLRkdN2yIjOXDDDIQXj15RF9
Ol5NlmKnN957rP/2tFe6vDmaobX45xYROOjDKxhUqNM9o4Clb7IzIGDwIO5PAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUfnBKSlhGzRtzO03vP4spnfCj0tkwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMxMzQyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBg4w
DQYJKoZIhvcNAQELBQADggEBAIWNq8VbVqNv8tNJhntqqSEW5vCMEYhMMeO9/G1A
as4CYVgBKV62qQoYla1ecr3VHHcZ5QdMw+n3jnsYfS3cTfZ5IT4gaqFSi7fSg/mj
mbRq+oSv7ey2nlyXTXZOMvmNcyXL367uS1lorYGRceJ2+1gURZW+uqSSBtzorjoM
M9NLb4gmC4PrrP4lAnj6oqBlcCNm7SVvpx1X8BQy5pbuuAbdeivDZ8e4Jw3bY9N7
HsgpMi94v+mm7SdXA/OfYqcMm7k6VBJ9D+HxQVSB/vLuU1Y5Vf0S8qr/UcpbC1lr
ELIOGW6CxCuaLjLzKJKa2OXazALvWG2TW8a+ezKSxne7m98=
Generated at Sun Jun 30 09:53:53 2024 by rpki-client on console-ams.rpki-client.org