Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e20383334.roa
File:                     33312e362e33392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          zxbVt1idb46W4nSQ5gCLHvzjcnV0OFNubXb9drUQwkY=
Subject key identifier:   34:B8:63:58:7E:B3:D1:2C:53:2E:C9:D1:5E:65:50:1C:70:A5:2F:8D
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       6A734733EC03353E7C804154C33F358B556E931E
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e20383334.roa
Signing time:             Wed 05 Jun 2024 00:01:58 +0000
ROA not before:           Tue 04 Jun 2024 23:56:58 +0000
ROA not after:            Wed 04 Jun 2025 00:01:58 +0000
asID:                     834
IP address blocks:        31.6.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jun 2024 15:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:73:47:33:ec:03:35:3e:7c:80:41:54:c3:3f:35:8b:55:6e:93:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Jun  4 23:56:58 2024 GMT
            Not After : Jun  4 00:01:58 2025 GMT
        Subject: CN=34B863587EB3D12C532EC9D15E65501C70A52F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:41:fc:f9:1f:83:ab:b5:81:3f:fe:2f:75:
                    b3:7e:5f:74:e0:4b:bb:c9:c1:ab:fa:93:5d:36:ee:
                    64:ca:c0:ab:06:0c:7a:ea:e3:51:55:57:bf:8d:ea:
                    fe:6c:aa:92:41:a0:29:8c:77:2c:06:88:9f:86:30:
                    3a:5f:db:f4:fd:a0:58:13:9a:1e:d0:e5:05:97:ce:
                    3f:73:a6:8d:74:21:e6:e2:d2:36:b8:a0:c9:33:14:
                    58:75:a7:6a:16:42:68:93:c8:0a:a0:96:7c:55:3e:
                    1e:43:03:6e:c7:46:f2:90:37:a5:a5:dd:7c:ec:a3:
                    0c:d9:e0:a1:c0:7f:56:e3:aa:24:27:92:c0:21:15:
                    fe:ce:d0:84:2b:51:cb:1e:18:06:f3:c0:c2:e5:eb:
                    88:90:92:4c:bc:5c:19:e2:01:d7:38:63:8f:3e:72:
                    79:77:cc:14:a5:13:d2:db:30:61:3a:3f:50:0f:59:
                    ba:8f:da:4f:84:34:2c:23:61:eb:4e:7d:d4:3f:8d:
                    9f:04:3b:c2:d8:3a:fe:5b:16:55:e9:f0:31:0f:c1:
                    f2:db:89:8e:3d:08:de:78:83:6e:69:0a:a5:68:47:
                    23:51:c8:55:97:25:b4:7f:36:8c:6d:2c:fd:e4:40:
                    1e:ac:bf:3a:4b:68:e1:68:f4:14:7a:7f:12:a8:4e:
                    7b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B8:63:58:7E:B3:D1:2C:53:2E:C9:D1:5E:65:50:1C:70:A5:2F:8D
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:56:d5:a2:b5:61:4c:ec:e5:cd:9c:d6:08:74:71:74:37:4c:
         9d:dd:44:70:f5:5b:0a:33:60:35:5d:19:d8:b7:da:ad:34:13:
         77:58:d3:1a:b9:50:84:ed:4e:b4:2c:77:19:c2:fe:e9:51:78:
         90:df:70:60:44:f1:3c:69:8b:76:69:d6:35:83:66:d1:bb:76:
         2e:50:bb:ae:79:20:b4:53:3b:27:03:02:db:13:3c:9b:dd:94:
         a0:ef:b3:aa:62:24:ad:35:91:77:44:ca:8e:d2:58:81:d6:de:
         cd:83:8f:e0:66:33:c6:66:8e:a9:5b:57:7e:6e:75:37:ce:3e:
         80:d3:06:31:46:04:bc:da:9f:24:88:2b:9c:be:a3:d0:79:c6:
         2e:8f:d0:e1:15:5d:dd:47:54:fd:f7:c1:6c:e3:49:54:a5:5c:
         c0:b7:1d:3e:32:31:11:99:78:7d:d6:82:68:f7:28:47:73:b4:
         30:83:67:f7:ef:b2:bf:01:73:fc:fe:65:a7:a3:af:6a:96:8a:
         f5:55:52:55:b1:e0:d7:f6:2b:48:48:7e:ea:f2:a7:8a:c6:5a:
         7a:dd:ab:72:44:c8:d3:f4:1c:0d:5e:2a:92:ac:85:4d:2b:bd:
         f6:1f:c0:a4:a0:8d:5d:6e:2c:1c:28:5b:41:7b:ac:62:18:f5:
         49:07:ee:12
-----BEGIN CERTIFICATE-----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Generated at Fri Jun 7 19:09:27 2024 by rpki-client on console-fra.rpki-client.org