Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e203433323630.roa
File:                     33312e362e34382e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          uo2YWLC7CwiW1t5F/3MI6hvZktyQMM8+ARpQJjG6HTw=
Subject key identifier:   0A:ED:BC:A4:57:E3:58:B6:B4:68:4A:7E:42:3B:61:95:8A:11:B8:A4
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       3E541713DE9291C532DC4B459184FFF2DB9A7CD8
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e203433323630.roa
Signing time:             Fri 19 Jan 2024 21:35:57 +0000
ROA not before:           Fri 19 Jan 2024 21:30:57 +0000
ROA not after:            Fri 17 Jan 2025 21:35:57 +0000
asID:                     43260
IP address blocks:        31.6.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:54:17:13:de:92:91:c5:32:dc:4b:45:91:84:ff:f2:db:9a:7c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Jan 19 21:30:57 2024 GMT
            Not After : Jan 17 21:35:57 2025 GMT
        Subject: CN=0AEDBCA457E358B6B4684A7E423B61958A11B8A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c5:e3:bd:ee:9b:ca:6b:e7:a3:45:13:f2:2b:
                    c8:c5:8f:57:02:d4:4c:d9:d5:a3:fe:77:28:f3:75:
                    44:6f:a5:3a:16:d9:c0:7e:0b:b5:b2:24:fc:be:39:
                    8f:dc:6a:47:7a:e5:fb:95:ec:0f:49:af:68:ef:24:
                    70:f7:06:d3:06:61:15:32:45:00:bb:55:f8:c5:39:
                    f6:83:23:3c:24:f1:41:43:e8:a1:9b:e3:7c:08:b8:
                    86:fd:bb:12:50:d8:bb:c3:d5:be:f7:c4:c4:f8:48:
                    23:65:d0:13:36:ff:60:b3:01:d9:a2:1e:f8:e2:ab:
                    59:fe:f8:a9:60:6b:38:3d:b2:a3:ee:9e:ee:08:ed:
                    51:29:fb:03:5f:49:3f:81:6d:34:26:33:3f:da:fd:
                    12:ee:35:52:52:02:a6:40:12:92:82:64:dd:35:6c:
                    01:26:19:88:11:2e:0c:4a:41:01:40:ac:f9:5f:0d:
                    a0:70:f3:ee:30:e7:79:a6:41:c1:e5:e0:66:6c:14:
                    05:d8:a9:be:43:0c:29:9f:be:dd:6b:b8:11:81:47:
                    3b:21:21:4f:2f:e9:55:26:5d:a1:72:31:a6:fb:62:
                    9e:c5:b7:6e:4a:62:0d:44:8e:b6:c0:61:f4:1c:54:
                    22:54:50:5d:fc:90:1f:a8:4d:c0:01:95:b6:d0:d3:
                    d8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:ED:BC:A4:57:E3:58:B6:B4:68:4A:7E:42:3B:61:95:8A:11:B8:A4
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:bf:c2:66:ba:42:2a:b9:a2:08:c1:3b:01:66:4e:7a:5f:52:
         3e:92:e0:2b:55:13:27:ae:e0:ce:04:7a:3e:30:da:ff:41:14:
         04:d9:23:b3:02:f2:0e:89:cd:3c:98:6f:07:b0:56:99:91:69:
         92:a8:d9:9f:06:48:ed:ef:d4:d5:d1:ed:66:0f:79:e4:19:ea:
         ac:62:da:b9:50:1f:a3:41:c7:d7:f8:6a:35:f3:77:1d:0d:56:
         37:f4:88:2d:a1:78:7f:93:91:39:14:aa:32:d1:48:f8:53:cd:
         c3:e3:f1:c5:7d:41:a0:7a:90:00:cd:16:46:3b:97:6a:fa:df:
         1a:74:4f:58:63:7a:90:9d:4f:5c:50:87:77:a0:c2:8a:5f:5d:
         7b:c0:3b:4a:83:6b:95:f7:be:fa:a3:51:87:6e:43:0f:72:10:
         25:57:e1:a6:44:02:99:54:8a:8e:89:bc:1c:d2:b0:4d:82:76:
         65:25:1b:b8:27:15:f9:90:45:29:e7:80:0d:64:5d:2c:09:b5:
         fa:40:60:e3:5a:ba:c5:fd:03:bd:90:a6:11:ce:cc:ca:6e:2b:
         17:ac:90:a7:c2:57:9b:80:9b:94:95:72:65:82:26:b0:66:fc:
         a8:1e:a2:17:5a:15:05:45:fb:37:40:f0:26:44:b4:94:26:b3:
         9b:9c:3d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 01:35:58 2024 by rpki-client on console-ams.rpki-client.org