Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e203539383935.roa
File:                     33312e362e34372e302f32342d3234203d3e203539383935.roa (raw, json)
Hash identifier:          aFI/TyHt6wmid1s0i0iyNvXv1FGwHF4p04XPNGYq0/U=
Subject key identifier:   9D:4D:A6:38:C0:4B:6D:87:12:A5:D2:98:23:F7:94:1C:24:EE:03:23
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       285192A7BEEBB1E1952D251BA371D0177D223207
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e203539383935.roa
Signing time:             Sun 24 Mar 2024 20:35:48 +0000
ROA not before:           Sun 24 Mar 2024 20:30:48 +0000
ROA not after:            Sun 23 Mar 2025 20:35:48 +0000
asID:                     59895
IP address blocks:        31.6.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:51:92:a7:be:eb:b1:e1:95:2d:25:1b:a3:71:d0:17:7d:22:32:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Mar 24 20:30:48 2024 GMT
            Not After : Mar 23 20:35:48 2025 GMT
        Subject: CN=9D4DA638C04B6D8712A5D29823F7941C24EE0323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:04:90:b9:2c:de:ab:01:83:ee:81:27:85:
                    41:f2:74:4c:e2:a4:bf:47:a4:ee:13:80:4d:67:3b:
                    14:50:cb:03:b0:41:dd:ae:20:df:04:c5:08:26:77:
                    f8:11:74:7f:aa:8e:1e:40:c3:86:00:bd:a0:ef:c9:
                    c3:0d:80:57:33:56:87:e5:3d:95:4a:b3:4e:92:59:
                    86:02:a4:82:5c:8a:dc:4c:1f:03:68:3a:f6:7c:c9:
                    aa:53:26:d2:8c:93:3a:77:58:d4:b5:dc:0d:e6:4d:
                    e8:af:fc:f9:1a:74:9c:04:4d:a2:c2:fb:a7:b1:16:
                    7b:24:0a:19:42:e9:d5:af:72:b6:3f:41:da:b1:fb:
                    63:b9:70:c3:3b:4e:ad:9b:06:6e:70:92:5c:3c:94:
                    64:29:93:13:05:49:68:b2:d9:a9:3a:87:c6:a2:76:
                    e9:8c:b8:30:ec:9b:3d:c3:04:b9:15:dc:4b:cb:87:
                    37:31:db:3f:bc:d1:55:45:c2:ae:92:8f:7f:b3:26:
                    c9:03:f7:fd:9f:fd:23:29:6e:4a:25:d6:dd:50:4b:
                    12:81:f1:a8:6d:0e:ff:ea:42:bf:0b:7d:2a:90:9c:
                    91:f9:db:b4:87:56:25:43:e2:46:2f:c5:d6:ce:f3:
                    aa:ed:b7:21:04:14:99:ed:f9:de:7e:62:85:d6:21:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4D:A6:38:C0:4B:6D:87:12:A5:D2:98:23:F7:94:1C:24:EE:03:23
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34372e302f32342d3234203d3e203539383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:88:33:69:f3:ba:e2:31:09:58:58:0f:0b:a8:7b:f4:9f:4f:
         f5:b5:40:f0:6d:d0:38:9b:b2:15:1d:a4:20:d6:19:3b:b5:fa:
         91:06:bb:ea:e8:ff:11:1f:8e:25:81:24:34:cd:ec:db:53:79:
         d8:50:8a:3d:03:09:da:d4:9e:cc:a5:ec:58:9f:11:34:9d:cb:
         9a:15:da:9a:0d:c8:1e:1d:f1:ce:ac:a8:51:68:67:08:06:34:
         36:3e:8c:29:48:88:d9:27:f1:a2:ac:82:63:9e:f9:24:64:59:
         73:bd:2c:8a:e1:5b:7a:15:d3:89:b9:48:b4:7f:76:8e:7c:ac:
         c6:62:8e:95:f3:6c:5f:79:40:00:cf:cd:32:3a:71:97:3f:5d:
         65:b0:4f:d6:b5:89:d8:cc:d2:70:30:e6:68:c5:40:f5:20:f3:
         02:52:62:dd:2e:fe:dc:2a:2a:c6:f7:b6:e1:30:b6:58:37:c7:
         4b:20:8e:a7:2b:08:3f:f9:7f:22:f3:f3:b9:0d:02:b1:d8:d1:
         ab:b7:96:16:ea:97:85:93:aa:89:bb:8f:74:52:fa:13:cf:81:
         e4:2f:47:8e:17:a4:22:77:fb:89:87:48:80:c1:24:7b:c5:c6:
         69:5b:74:2b:be:f5:61:91:14:00:1a:54:23:c4:a8:f0:95:a7:
         c0:b3:8b:72
-----BEGIN CERTIFICATE-----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Generated at Wed Apr 24 02:19:32 2024 by rpki-client on console-fra.rpki-client.org