Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20323135323837.roa
File:                     33312e362e32352e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier:          1jLbP01IM+1YAw+5StErmGMR9bvEXAuuQB3SRjIgl8M=
Subject key identifier:   C6:30:B3:B6:49:B3:63:C7:19:A2:C0:BD:18:A6:96:AE:F5:FF:56:D6
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       6BB29D0A8BA9E4D6984E72E5AF2FB7E823F09D4A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20323135323837.roa
Signing time:             Mon 22 Jul 2024 16:04:15 +0000
ROA not before:           Mon 22 Jul 2024 15:59:15 +0000
ROA not after:            Mon 21 Jul 2025 16:04:15 +0000
asID:                     215287
IP address blocks:        31.6.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b2:9d:0a:8b:a9:e4:d6:98:4e:72:e5:af:2f:b7:e8:23:f0:9d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Jul 22 15:59:15 2024 GMT
            Not After : Jul 21 16:04:15 2025 GMT
        Subject: CN=C630B3B649B363C719A2C0BD18A696AEF5FF56D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:59:0a:d1:5c:28:1f:30:24:41:3c:41:84:
                    b4:6e:3c:93:52:d8:e3:b3:0f:c7:94:ff:20:06:25:
                    0e:4f:25:15:0d:eb:5e:2d:7a:cb:ab:8f:5a:08:dc:
                    e5:7a:18:97:45:18:46:72:ef:92:0e:0f:2c:d7:9a:
                    b4:c0:52:e8:92:3e:ad:7a:2e:29:9b:fd:5e:ef:42:
                    44:f0:50:51:a4:31:a1:6b:26:ed:9b:2e:57:40:6c:
                    29:c3:16:f8:85:62:22:a7:15:84:c9:fb:2f:8b:83:
                    7e:6d:26:64:6c:03:69:74:fd:19:d1:b8:f9:1a:e1:
                    f7:bf:ed:04:da:77:30:a3:29:61:fe:64:c4:2d:93:
                    f6:f7:4e:41:68:93:8c:37:ad:a6:d2:02:18:d8:9b:
                    ba:2f:37:93:8d:ce:82:a7:73:23:6d:a4:20:af:9d:
                    1f:eb:32:8a:a2:e6:c6:f3:d9:63:b6:56:3b:ba:66:
                    61:2f:c9:61:aa:27:0e:a3:d0:a4:fe:47:22:81:0e:
                    0a:78:da:7e:a8:b9:76:6f:09:93:e2:77:95:7c:da:
                    88:63:b2:ab:8b:8a:cf:fb:a8:68:b0:69:f1:eb:56:
                    fd:de:52:2f:43:c4:49:2e:00:08:f7:b9:46:c2:3f:
                    a1:c4:c8:ab:c8:21:2b:80:69:b6:0b:79:6f:9f:af:
                    0e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:30:B3:B6:49:B3:63:C7:19:A2:C0:BD:18:A6:96:AE:F5:FF:56:D6
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20323135323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:5b:b1:10:31:e5:e7:84:95:46:c6:4f:fe:bf:b4:64:e9:
         90:43:9b:ab:e1:a4:8c:9d:bc:e0:71:c2:3a:ef:87:fb:80:04:
         55:e0:19:9c:4e:94:d1:84:06:fc:80:8a:63:5c:6e:31:8c:34:
         7d:76:13:79:73:46:6d:0b:1f:25:2d:8c:ed:44:be:ea:17:38:
         6c:43:df:50:25:72:52:2d:0e:b2:19:a1:04:3c:10:47:14:b5:
         67:db:6b:a1:bd:d2:53:ac:f3:6e:c3:3f:8a:81:20:29:43:16:
         9f:39:f3:87:75:51:05:0b:a3:05:59:a6:21:19:db:83:d4:ea:
         0d:d3:5c:87:cf:d3:08:63:90:e8:fb:bb:70:44:cf:da:7d:4a:
         21:d3:2f:5e:45:85:d5:81:09:24:59:7b:38:bb:e9:26:1c:41:
         3d:8a:03:25:58:99:e4:7c:26:0f:3a:04:ef:9a:6a:97:20:d2:
         ef:c6:99:27:e9:c2:44:17:08:49:81:3a:7e:bd:f9:86:a1:62:
         6a:90:f9:02:e3:a4:44:09:a5:2b:51:28:23:ee:87:82:d2:8e:
         c5:a9:3b:93:91:11:fa:7b:3d:35:b0:c6:b2:e1:ff:59:18:16:
         3d:76:ae:43:58:af:38:fe:12:ca:e0:60:48:2b:64:d9:07:71:
         7d:10:88:f3
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 22 02:29:03 2024 by rpki-client on console-ams.rpki-client.org