Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20383334.roa
File:                     33312e362e35312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Lh8gj7xxc7rZc+WJETwkLnWiAkbFeOjRIavrm/gvC9c=
Subject key identifier:   51:92:EC:C1:90:9C:A5:20:30:BF:CD:9D:B3:17:63:C3:34:BD:99:FD
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       586E6EDB91B3A9FC5CADD440261FDE4DBDEB18FD
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20383334.roa
Signing time:             Mon 18 Nov 2024 08:32:53 +0000
ROA not before:           Mon 18 Nov 2024 08:27:53 +0000
ROA not after:            Mon 17 Nov 2025 08:32:53 +0000
asID:                     834
IP address blocks:        31.6.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 02:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6e:6e:db:91:b3:a9:fc:5c:ad:d4:40:26:1f:de:4d:bd:eb:18:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Nov 18 08:27:53 2024 GMT
            Not After : Nov 17 08:32:53 2025 GMT
        Subject: CN=5192ECC1909CA52030BFCD9DB31763C334BD99FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:bc:5f:7a:52:4f:ab:93:33:d2:97:bb:8c:
                    b6:77:d9:63:60:d7:66:d4:0f:84:4d:69:87:d3:aa:
                    1b:cf:fb:5e:09:8f:55:d5:54:3f:12:1a:45:72:cc:
                    33:ac:88:b9:2a:00:71:f1:25:b2:9e:35:fa:20:a1:
                    ef:bf:61:5d:7e:4a:96:3a:61:57:96:1b:d3:b2:60:
                    c9:54:eb:a8:cb:bd:04:de:2a:16:cd:9e:f2:a4:4f:
                    d7:2d:ae:cf:d9:66:a6:e5:ea:c3:5d:5d:a4:b2:1b:
                    cf:87:ac:83:b9:42:ae:c3:41:6c:4e:2c:7d:5d:ce:
                    21:96:42:ed:e9:8f:3f:56:1e:41:23:7c:6e:2b:96:
                    b2:7d:b0:1d:19:ab:60:58:d7:c0:d2:6c:82:2c:f6:
                    6c:ac:c0:58:c4:f0:b4:c3:3a:a8:4b:c3:f8:b4:83:
                    1c:0b:37:40:be:96:06:43:b6:fb:96:3b:94:a8:67:
                    b3:18:95:be:c2:10:98:99:bd:e8:18:31:30:37:6b:
                    49:66:93:5b:f0:98:e2:1a:f9:27:be:a7:ab:c7:b5:
                    9b:87:7b:39:3d:ba:1b:5f:28:c1:25:5a:77:3c:de:
                    9e:99:fa:28:89:8b:2d:f1:1f:85:58:61:5e:ed:5b:
                    8d:a9:aa:f8:87:96:5f:d0:5d:94:85:f7:1d:f2:2e:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:92:EC:C1:90:9C:A5:20:30:BF:CD:9D:B3:17:63:C3:34:BD:99:FD
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e2:5c:1a:dc:5e:f6:11:71:a3:42:97:b3:dd:d2:ce:7b:d5:
         f1:c7:13:2e:a9:00:c8:d6:b2:ab:cc:b5:bc:96:1c:3c:6e:b3:
         08:4e:1b:88:8b:9e:43:b5:68:41:61:71:41:fe:dc:7f:27:3c:
         2b:b7:b1:f1:89:e9:2a:4c:19:0e:6c:3a:ce:fa:44:60:4f:7a:
         17:e3:7a:ee:7b:12:dc:0c:4a:91:93:bd:a4:0f:ad:9b:ea:cb:
         3c:4c:c7:c9:23:fb:a3:ba:c3:20:8a:fe:16:2e:8e:48:10:8e:
         d0:af:aa:95:ed:37:b4:21:23:76:8f:74:b4:90:f3:f9:33:0c:
         2b:7e:62:56:1a:ea:b1:c0:c7:a1:fb:51:52:0e:37:0a:90:39:
         73:f6:6a:24:98:57:8b:5b:ef:15:4f:7e:51:b7:f7:d8:b7:6e:
         02:73:1d:7c:67:6f:ad:64:fd:bb:a8:2e:e4:8d:8a:f9:29:48:
         95:a7:2e:f0:24:a6:b5:41:53:7e:d3:59:3c:44:eb:a2:3f:6a:
         0e:cd:8b:b7:b8:9c:ae:b5:5c:a4:f1:d9:81:52:d0:7d:b5:5f:
         00:76:d0:32:5f:a3:8f:5e:cf:86:f3:00:c8:0d:33:e1:00:45:
         f5:9c:3d:f4:14:6d:85:1f:8b:fc:0f:6b:f0:f8:27:99:6b:c8:
         10:e0:1b:c5
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUWG5u25GzqfxcrdRAJh/eTb3rGP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDExMTgwODI3NTNaFw0yNTExMTcwODMyNTNaMDMxMTAvBgNV
BAMTKDUxOTJFQ0MxOTA5Q0E1MjAzMEJGQ0Q5REIzMTc2M0MzMzRCRDk5RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS67xfelJPq5Mz0pe7jLZ32WNg
12bUD4RNaYfTqhvP+14Jj1XVVD8SGkVyzDOsiLkqAHHxJbKeNfogoe+/YV1+SpY6
YVeWG9OyYMlU66jLvQTeKhbNnvKkT9ctrs/ZZqbl6sNdXaSyG8+HrIO5Qq7DQWxO
LH1dziGWQu3pjz9WHkEjfG4rlrJ9sB0Zq2BY18DSbIIs9myswFjE8LTDOqhLw/i0
gxwLN0C+lgZDtvuWO5SoZ7MYlb7CEJiZvegYMTA3a0lmk1vwmOIa+Se+p6vHtZuH
ezk9uhtfKMElWnc83p6Z+iiJiy3xH4VYYV7tW42pqviHll/QXZSF9x3yLmEPAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUUZLswZCcpSAwv82dsxdjwzS9mf0wHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzEyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBjMwDQYJKoZI
hvcNAQELBQADggEBACviXBrcXvYRcaNCl7Pd0s571fHHEy6pAMjWsqvMtbyWHDxu
swhOG4iLnkO1aEFhcUH+3H8nPCu3sfGJ6SpMGQ5sOs76RGBPehfjeu57EtwMSpGT
vaQPrZvqyzxMx8kj+6O6wyCK/hYujkgQjtCvqpXtN7QhI3aPdLSQ8/kzDCt+YlYa
6rHAx6H7UVIONwqQOXP2aiSYV4tb7xVPflG399i3bgJzHXxnb61k/buoLuSNivkp
SJWnLvAkprVBU37TWTxE66I/ag7Ni7e4nK61XKTx2YFS0H21XwB20DJfo49ez4bz
AMgNM+EARfWcPfQUbYUfi/wPa/D4J5lryBDgG8U=
Generated at Thu Nov 21 04:11:44 2024 by rpki-client on console-ams.rpki-client.org