Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e203336313133.roa
File:                     33312e362e31352e302f32342d3234203d3e203336313133.roa (raw, json)
Hash identifier:          qoKgYh8xBsxoIPJLg3VwyNJru+GIOWZkkpZwpPQX5o4=
Subject key identifier:   50:E6:C0:FE:B4:9B:3C:D9:20:46:1F:8E:86:70:24:CB:C7:47:9F:C7
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       6992B30522EC6A429A51941EA279FE6A16B51589
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e203336313133.roa
Signing time:             Fri 15 Dec 2023 11:27:23 +0000
ROA not before:           Fri 15 Dec 2023 11:22:23 +0000
ROA not after:            Fri 13 Dec 2024 11:27:23 +0000
asID:                     36113
IP address blocks:        31.6.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 04 Apr 2024 11:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:92:b3:05:22:ec:6a:42:9a:51:94:1e:a2:79:fe:6a:16:b5:15:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Dec 15 11:22:23 2023 GMT
            Not After : Dec 13 11:27:23 2024 GMT
        Subject: CN=50E6C0FEB49B3CD920461F8E867024CBC7479FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:7b:71:6e:fd:9a:86:31:fd:01:b7:1a:f2:
                    d4:e7:84:eb:4f:9e:96:5a:f1:43:e8:d3:66:57:4c:
                    be:e0:98:b4:dd:20:2d:53:d5:47:8d:71:e1:60:6a:
                    75:29:47:73:1f:32:42:ba:9f:94:93:9a:65:fe:a9:
                    bb:2b:5e:84:39:4d:2c:ab:81:00:32:b3:24:f4:1f:
                    d8:23:c7:4b:72:40:3e:72:c4:92:1f:fb:f6:77:63:
                    20:e4:72:c7:b3:0f:02:5f:a2:0d:a9:0a:28:d8:41:
                    3d:a7:9c:6b:45:1f:5c:bd:99:94:f1:87:b0:06:c9:
                    98:94:eb:d3:36:0a:e8:6b:ed:cb:ce:54:fc:a2:af:
                    a8:f8:5d:a8:37:85:ee:15:d6:d4:a7:66:2b:c8:5d:
                    e5:8e:9d:87:f8:47:2b:fb:3f:62:17:05:44:67:59:
                    81:fe:51:10:e9:a1:ec:cf:6a:a1:0b:a1:d4:32:1c:
                    0c:93:05:1d:a4:b4:e6:f7:e3:e2:93:57:00:6a:d7:
                    d4:77:f7:34:a3:a6:55:55:2f:89:05:eb:ef:05:a0:
                    d8:37:89:71:13:fc:ec:9f:7e:d4:13:3e:28:30:6c:
                    ad:8e:9d:04:76:be:80:d0:94:bf:3e:b6:92:1c:24:
                    72:93:8c:69:16:66:1e:8a:a5:19:f3:8d:21:04:50:
                    f9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E6:C0:FE:B4:9B:3C:D9:20:46:1F:8E:86:70:24:CB:C7:47:9F:C7
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e203336313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:d9:ba:9a:42:4f:8e:23:0b:7b:a2:0f:4c:a2:b8:6b:bb:44:
         de:72:c0:5a:69:bb:c3:c2:62:32:50:de:27:38:dd:6a:89:1e:
         1a:29:76:66:b4:79:3b:3f:0f:3d:a3:fa:78:c6:34:b5:66:3d:
         99:c5:05:07:da:07:a6:76:47:83:9f:54:13:1b:78:35:58:ad:
         52:be:7a:3f:48:52:23:7f:47:d8:b9:d8:eb:09:01:64:f6:cd:
         88:6f:2a:c3:7c:24:cb:61:62:45:12:b2:62:d4:29:e8:99:1c:
         d6:66:78:3d:69:11:e0:78:52:b0:84:20:6b:7e:d2:a2:88:c1:
         15:08:f9:f7:f9:e5:7e:1f:86:12:da:29:ff:92:f4:83:96:d4:
         b0:68:87:10:29:8b:c9:b0:06:30:10:f9:a7:72:93:dc:94:21:
         0f:ec:a8:f5:2f:f1:a7:4b:fd:3c:e1:12:7f:44:86:bc:58:b7:
         72:39:3a:e3:ea:be:e1:a1:0a:8a:93:73:80:e5:ef:62:86:c0:
         3f:f0:e2:32:39:67:d0:fd:80:11:f6:84:26:35:84:c5:4a:3c:
         f2:5e:5f:6b:fc:4e:65:51:db:bf:9a:05:6d:54:87:1b:c8:0f:
         f1:35:27:71:7f:77:ea:e0:24:49:38:3d:16:fa:e3:51:64:7d:
         02:1e:91:e8
-----BEGIN CERTIFICATE-----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Generated at Thu Apr 4 14:38:35 2024 by rpki-client on console-ams.rpki-client.org