Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32302e302f32342d3234203d3e20383334.roa
File:                     33312e362e32302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          1EL87F724q+jHPQHj35HnnHxKC8YrqBlbcfb3Fx3CiU=
Subject key identifier:   EE:2A:DE:84:70:44:34:A2:4C:93:F1:F5:65:6E:F6:C1:8E:55:FC:E0
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       23D79C0D279B1F2CEBF5325632AD4F368FE86614
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32302e302f32342d3234203d3e20383334.roa
Signing time:             Thu 29 Feb 2024 05:22:18 +0000
ROA not before:           Thu 29 Feb 2024 05:17:18 +0000
ROA not after:            Thu 27 Feb 2025 05:22:18 +0000
asID:                     834
IP address blocks:        31.6.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 12:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d7:9c:0d:27:9b:1f:2c:eb:f5:32:56:32:ad:4f:36:8f:e8:66:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Feb 29 05:17:18 2024 GMT
            Not After : Feb 27 05:22:18 2025 GMT
        Subject: CN=EE2ADE84704434A24C93F1F5656EF6C18E55FCE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4f:0f:6c:9d:62:69:4a:13:96:51:b3:77:77:
                    30:8e:e6:79:7f:a6:82:64:0b:d1:3d:ef:62:17:2f:
                    cb:d5:fc:28:b6:4f:0c:0e:51:11:23:24:e4:ed:bb:
                    e9:f2:b5:e5:81:c2:e3:a2:f5:78:2e:c0:39:a1:1c:
                    10:1a:6f:fb:65:42:11:62:7e:17:57:05:25:c8:5e:
                    a8:a0:ea:2e:9e:03:bb:d7:19:29:bf:cd:23:a6:eb:
                    d3:5a:01:b7:18:1b:08:37:fd:d6:a0:57:8c:7c:d1:
                    b4:2e:ec:17:16:84:44:7b:ee:df:ea:76:37:cd:f1:
                    0c:06:8b:38:f1:3d:0d:ed:d8:ba:a2:03:0c:1c:fe:
                    88:ca:11:eb:94:c1:0e:1e:46:7a:96:df:ee:71:4d:
                    b7:a4:8c:61:4a:e7:11:7e:11:ed:e4:e9:38:fd:cd:
                    b1:9d:2e:4b:c2:f6:7d:33:dc:80:66:de:b7:0c:f3:
                    17:9b:49:36:49:a1:08:bd:bd:8b:62:ab:20:a5:64:
                    c0:ef:cd:5b:67:8e:bf:f6:4a:20:02:2f:be:18:2e:
                    75:e7:41:9e:7a:03:1a:ea:72:cf:d6:e0:36:c6:86:
                    54:fe:80:28:23:32:f7:5d:a9:45:39:e5:7e:35:1c:
                    44:c1:c1:76:aa:ec:51:de:83:fb:a2:12:11:53:f1:
                    b8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2A:DE:84:70:44:34:A2:4C:93:F1:F5:65:6E:F6:C1:8E:55:FC:E0
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:6f:49:0b:ff:eb:9b:0e:d7:a8:b2:e3:f9:df:70:cf:cb:
         c8:48:38:8a:cb:e5:a4:ff:79:37:0c:ee:c6:c3:c7:60:17:4a:
         fa:aa:85:e8:2c:7f:2a:5d:86:30:a6:6a:8c:7f:92:01:f0:06:
         e9:ca:45:7b:41:7a:12:e5:d6:3b:17:22:9d:45:e4:ef:38:d7:
         be:17:12:3c:d2:53:66:bd:3c:f9:f8:cd:e4:47:ac:ff:3d:62:
         13:76:58:2a:f9:28:a9:74:6d:d5:e5:e1:f2:f7:8d:7b:68:8c:
         16:32:79:90:62:e6:32:81:c3:ad:5c:57:13:87:25:43:8d:84:
         a7:49:fb:1b:d2:2a:bc:53:e3:ea:f4:b6:e1:0a:c8:16:90:81:
         cd:37:36:27:a7:28:18:d3:51:8a:8b:f3:9a:f0:b2:46:af:c6:
         68:1f:7e:b0:7d:3d:79:25:01:5b:56:62:6a:15:3a:cc:6e:53:
         2c:76:a7:d8:99:26:d3:f7:93:dd:d3:01:98:83:97:f4:d2:cf:
         7a:17:5b:89:34:bf:20:15:9f:df:db:20:6e:98:0c:18:0e:b6:
         2d:46:63:a7:04:28:31:08:22:cd:cf:59:28:28:20:2b:16:37:
         3d:1e:97:c1:31:20:33:ce:f6:35:4d:3a:d0:40:47:08:f8:a6:
         a6:92:bb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:00:27 2024 by rpki-client on console-fra.rpki-client.org