Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32362e302f32342d3234203d3e20383334.roa
File:                     33312e362e32362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          TEjkPdorcjFGJ0OTCEObZl9A3Tu3x7raGoIEMXC/bpY=
Subject key identifier:   83:27:C5:06:7E:F6:E7:4C:6C:09:83:8E:C6:BB:89:3F:80:EC:A6:14
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       0757AB0678BF2C22386D346238BEE705CCB79EE6
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32362e302f32342d3234203d3e20383334.roa
Signing time:             Thu 14 Nov 2024 00:02:13 +0000
ROA not before:           Wed 13 Nov 2024 23:57:13 +0000
ROA not after:            Thu 13 Nov 2025 00:02:13 +0000
asID:                     834
IP address blocks:        31.6.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 16:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:57:ab:06:78:bf:2c:22:38:6d:34:62:38:be:e7:05:cc:b7:9e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Nov 13 23:57:13 2024 GMT
            Not After : Nov 13 00:02:13 2025 GMT
        Subject: CN=8327C5067EF6E74C6C09838EC6BB893F80ECA614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:84:87:bf:ae:04:4d:87:c3:76:d2:f8:fb:
                    38:c3:4a:fe:bb:79:0e:4e:85:13:b3:f2:de:66:21:
                    77:95:ef:67:ff:3f:a5:31:cf:ba:ea:c8:cf:b7:55:
                    d7:8b:3b:53:16:2f:ed:b6:99:5d:cb:ef:e8:e9:ea:
                    5c:2d:47:dd:32:7c:22:9f:9d:52:50:12:17:cf:be:
                    35:f8:d7:d3:85:45:6a:2e:bb:41:d6:26:79:1b:bc:
                    4c:79:50:59:3a:be:05:1d:20:51:c7:e9:3e:0f:a6:
                    97:83:a5:b1:f2:28:57:8f:a9:60:40:56:a3:90:1a:
                    8f:fd:66:86:08:b1:bc:8a:39:6e:7f:d7:cb:14:83:
                    55:d5:64:63:98:eb:5e:c9:ae:3b:ce:fd:d8:28:56:
                    f1:02:dd:fb:f7:21:e8:0d:d6:fe:a1:75:01:5a:da:
                    66:59:88:e2:02:f0:4a:33:b4:ba:47:2f:84:90:a2:
                    13:0b:02:72:cf:e2:12:7e:8d:c0:c5:a9:a0:dd:0c:
                    26:88:8c:b7:b7:6e:89:a1:c7:fb:5c:c6:c5:8c:ec:
                    dd:08:bd:50:94:9c:df:7a:0c:c7:76:a0:ff:2c:37:
                    13:76:30:ca:fa:b6:aa:81:a5:9e:c1:67:7d:77:c8:
                    d3:8a:fb:00:92:ac:9c:a8:5c:c5:1d:78:74:19:93:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:27:C5:06:7E:F6:E7:4C:6C:09:83:8E:C6:BB:89:3F:80:EC:A6:14
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:c1:1a:8b:96:94:72:2f:8a:33:82:b8:90:22:58:a6:e3:cd:
         91:e9:c4:99:01:fd:d8:93:24:9b:6a:97:12:42:b8:e8:33:ad:
         de:0e:24:4f:1c:db:52:96:44:ef:8b:f8:fe:8d:f7:dc:53:2f:
         a1:64:41:98:98:e3:60:69:b3:4b:76:f6:86:de:ec:85:90:d6:
         66:62:d5:c5:70:23:a1:b7:18:ae:a3:81:07:28:e8:ba:01:41:
         ac:5b:0c:ce:af:02:1a:41:46:c1:e9:dd:1d:75:0a:69:0e:9a:
         e5:ef:95:ba:d5:21:20:8f:5a:98:f1:fc:8d:26:bb:80:d0:79:
         cd:a2:07:b8:18:fd:6e:37:35:a6:d9:da:dc:fc:ef:0b:50:3c:
         20:1f:0a:1f:65:2f:40:8f:40:5e:7f:23:33:84:cb:c4:bf:a9:
         ab:c3:fd:97:a6:b0:2d:0a:66:f1:5c:72:30:9a:2f:f3:10:68:
         09:8f:f7:43:d2:48:13:57:bf:68:03:5f:5b:20:df:48:c6:4f:
         af:4c:c8:44:f3:8a:0d:ce:53:d2:56:89:cf:70:4e:fa:fe:e4:
         7d:02:59:2c:39:9c:ec:57:8c:f7:53:ed:4c:78:e3:92:d8:16:
         8f:20:00:f4:b8:4c:e6:57:09:04:05:ca:31:ff:7b:d0:dd:6f:
         57:5d:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 20:03:55 2024 by rpki-client on console-ams.rpki-client.org