Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20333937363330.roa
File:                     33312e362e35322e302f32342d3234203d3e20333937363330.roa (raw, json)
Hash identifier:          /S3i8UlMzE4OVsVPoxuoRTc6kLcIz/GwoBE27OQVJhQ=
Subject key identifier:   7B:F0:46:7B:75:88:D3:4C:43:78:04:9B:11:CB:ED:11:57:4E:B9:B3
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       37E4EE4804D75216E2D5D7D99B88EB33E65D1A72
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20333937363330.roa
Signing time:             Tue 15 Oct 2024 15:43:25 +0000
ROA not before:           Tue 15 Oct 2024 15:38:25 +0000
ROA not after:            Tue 14 Oct 2025 15:43:25 +0000
asID:                     397630
IP address blocks:        31.6.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 00:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e4:ee:48:04:d7:52:16:e2:d5:d7:d9:9b:88:eb:33:e6:5d:1a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Oct 15 15:38:25 2024 GMT
            Not After : Oct 14 15:43:25 2025 GMT
        Subject: CN=7BF0467B7588D34C4378049B11CBED11574EB9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:79:99:45:89:ee:0c:79:b6:f3:28:e5:b9:
                    8e:66:23:5c:43:56:0c:21:e8:b1:c0:e1:a0:0a:25:
                    a3:2a:88:cc:17:83:58:5a:01:1f:ec:ec:ca:97:b3:
                    3d:68:23:2d:a1:45:bf:d7:23:f8:75:c8:8f:f1:83:
                    d4:32:1c:7b:1c:3b:3c:7b:ca:eb:5d:5d:54:6e:09:
                    9f:ae:ff:4e:ad:aa:28:5a:15:78:64:44:2c:e6:7d:
                    53:b9:86:eb:a9:ed:5d:39:46:19:11:0a:8b:c2:36:
                    cf:6b:50:c1:1d:3b:ed:62:59:95:0f:bb:96:21:55:
                    43:82:22:a5:e8:6c:8f:17:a7:23:c3:d3:ab:b0:a7:
                    87:52:9d:bd:56:36:1a:b4:17:63:45:b2:e3:85:00:
                    14:e8:00:ed:4f:11:97:d8:4f:72:f3:6f:6b:c6:1d:
                    4b:ee:9a:a2:8e:d9:12:c9:ab:4a:b8:13:83:a1:6a:
                    a1:4a:f1:ad:3d:2d:48:35:5e:30:24:e3:af:7c:26:
                    9d:e7:72:64:28:23:ec:d7:1f:a3:90:89:d5:29:5e:
                    c3:fb:1a:2c:58:f4:05:a0:02:3c:74:42:58:b2:2a:
                    e5:86:02:a7:e8:00:c6:fb:05:f0:c1:43:a9:a5:ee:
                    01:a2:cf:32:c1:94:01:cd:93:2c:37:0a:bb:5a:51:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F0:46:7B:75:88:D3:4C:43:78:04:9B:11:CB:ED:11:57:4E:B9:B3
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20333937363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:42:fe:27:49:a8:dc:94:13:72:68:48:56:f3:78:2d:21:5e:
         be:30:e1:a8:ff:5b:59:56:fb:8f:06:81:1c:f8:80:6d:a3:ec:
         61:47:62:ba:13:96:96:25:7a:c8:57:0b:c9:54:1f:ef:ed:40:
         04:eb:17:ea:4a:0d:ed:42:d3:7c:ff:71:34:86:33:d2:f4:78:
         3e:5f:23:bd:57:6d:af:78:f2:41:04:5a:42:27:85:64:d4:99:
         01:17:db:ca:c3:1e:be:1f:a2:1f:cc:e1:c8:ca:02:9a:5e:f2:
         ac:9d:bc:63:c2:bd:1e:c3:2b:d8:6c:d9:75:4b:80:be:ec:1d:
         c1:b4:04:81:26:39:45:84:4a:aa:39:b5:39:54:4f:ca:30:aa:
         1d:bb:bd:84:af:39:1d:b4:a7:71:f4:68:71:3c:8e:30:d2:96:
         09:bd:69:c3:09:a7:f4:d5:b3:c1:0c:b3:b6:ac:97:58:97:b6:
         0c:d2:e5:e0:fc:d9:83:05:d5:ea:df:ff:5f:62:a4:d3:85:1f:
         c1:9e:3b:dd:62:02:e5:71:24:d2:05:e9:f4:ee:0d:da:56:cb:
         14:72:2d:9a:32:7b:37:c2:0d:0f:2b:29:c6:dc:12:12:6f:eb:
         b2:93:40:2e:a5:57:86:20:a0:45:4b:20:71:ca:d4:9b:03:98:
         26:d4:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 02:32:56 2024 by rpki-client on console-ams.rpki-client.org