Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35332e302f32342d3234203d3e20333937363330.roa
File:                     33312e362e35332e302f32342d3234203d3e20333937363330.roa (raw, json)
Hash identifier:          sxYFpIv0oeJ9saxmooCGW4xqvHHEYbkqQlXgYMs3hng=
Subject key identifier:   E5:D4:93:A2:CC:B8:8F:C8:86:CB:2C:FC:B5:2F:13:5D:81:49:31:0A
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       42BB2EB2666A3AE1A9EC8D949CEE2FFF371264EC
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35332e302f32342d3234203d3e20333937363330.roa
Signing time:             Tue 15 Oct 2024 15:43:25 +0000
ROA not before:           Tue 15 Oct 2024 15:38:25 +0000
ROA not after:            Tue 14 Oct 2025 15:43:25 +0000
asID:                     397630
IP address blocks:        31.6.53.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 00:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bb:2e:b2:66:6a:3a:e1:a9:ec:8d:94:9c:ee:2f:ff:37:12:64:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Oct 15 15:38:25 2024 GMT
            Not After : Oct 14 15:43:25 2025 GMT
        Subject: CN=E5D493A2CCB88FC886CB2CFCB52F135D8149310A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:37:e3:e7:ea:67:d8:76:e9:e0:60:b6:31:
                    b1:ca:54:5e:7b:79:57:5c:84:3d:d0:a1:05:df:d4:
                    19:3b:70:9d:04:d1:79:c2:02:24:9f:b3:1f:25:0b:
                    ed:13:4f:53:be:ab:84:5f:c5:f3:49:d9:db:08:94:
                    49:cd:08:50:4d:2a:e1:1d:da:f4:d7:c4:c1:28:5f:
                    0b:ca:cb:0c:ad:cc:e1:fb:59:03:ea:d1:0a:99:22:
                    14:63:21:ba:1f:c0:b8:bb:d0:36:d1:26:7b:a6:26:
                    75:ed:ec:0b:c4:93:55:59:54:25:72:51:1a:7e:65:
                    f7:d6:a8:4c:2f:a5:d5:06:78:72:27:d6:b3:28:17:
                    cc:da:77:40:47:62:5d:20:62:67:96:3e:1c:5c:31:
                    7f:19:b5:6e:7f:1b:74:31:20:02:b9:fe:24:39:b6:
                    ce:53:ae:a6:fa:64:47:09:30:18:94:fa:40:5a:8c:
                    a9:38:a8:02:81:e7:a5:09:19:da:6d:04:6c:6b:40:
                    7a:6b:89:48:58:7b:16:74:55:b0:9c:e9:2d:74:28:
                    21:f8:47:e9:7e:50:b4:3f:b1:69:3d:9b:a0:3e:26:
                    91:93:28:13:c1:94:9c:d1:6d:26:b9:ec:25:9e:58:
                    cc:ea:db:60:f0:93:8e:9f:26:1f:c0:46:7d:05:a8:
                    24:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D4:93:A2:CC:B8:8F:C8:86:CB:2C:FC:B5:2F:13:5D:81:49:31:0A
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35332e302f32342d3234203d3e20333937363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:a8:14:23:32:c2:50:00:9f:28:5e:27:27:3b:13:4d:31:19:
         87:4e:3a:27:87:44:a0:ef:fe:21:80:ac:7f:b7:ac:31:80:8f:
         b5:85:6c:10:1c:96:ef:8e:03:bf:ec:20:4d:aa:16:f5:12:75:
         41:08:91:1c:95:02:a4:fc:ba:6d:f2:07:d2:12:78:aa:c3:a6:
         6d:1a:50:f0:70:a3:04:fb:d0:21:e3:18:8e:ab:9e:3f:07:9b:
         a2:ff:f6:aa:38:12:96:ef:83:af:6d:26:44:01:60:c4:b6:2a:
         dd:8c:b0:40:68:3d:a7:26:38:92:2b:7b:ff:a7:5a:6a:eb:6c:
         d5:1c:35:33:f5:df:e6:68:18:09:54:1c:4d:24:04:22:2f:5e:
         c4:4c:1f:42:c4:ed:14:85:72:a6:98:f6:ec:a1:f3:b8:78:0f:
         37:4b:f8:05:a5:10:83:be:ea:28:f9:90:e9:19:a0:d6:93:6b:
         71:a2:95:e4:9f:20:00:8f:75:14:fa:e4:5b:81:ad:3f:3e:ab:
         55:8b:bf:5a:c9:a9:0e:7c:f0:b4:14:67:ae:58:fe:ab:38:76:
         cd:bc:01:60:bc:58:b8:12:35:be:46:2a:7b:e7:4b:b5:7e:34:
         4f:05:89:33:42:f4:a2:7c:44:b0:ec:bf:7e:f1:c4:90:55:fd:
         8c:b4:87:ce
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUQrsusmZqOuGp7I2UnO4v/zcSZOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDEwMTUxNTM4MjVaFw0yNTEwMTQxNTQzMjVaMDMxMTAvBgNV
BAMTKEU1RDQ5M0EyQ0NCODhGQzg4NkNCMkNGQ0I1MkYxMzVEODE0OTMxMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/Tfj5+pn2Hbp4GC2MbHKVF57
eVdchD3QoQXf1Bk7cJ0E0XnCAiSfsx8lC+0TT1O+q4RfxfNJ2dsIlEnNCFBNKuEd
2vTXxMEoXwvKywytzOH7WQPq0QqZIhRjIbofwLi70DbRJnumJnXt7AvEk1VZVCVy
URp+ZffWqEwvpdUGeHIn1rMoF8zad0BHYl0gYmeWPhxcMX8ZtW5/G3QxIAK5/iQ5
ts5Trqb6ZEcJMBiU+kBajKk4qAKB56UJGdptBGxrQHpriUhYexZ0VbCc6S10KCH4
R+l+ULQ/sWk9m6A+JpGTKBPBlJzRbSa57CWeWMzq22Dwk46fJh/ARn0FqCSJAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU5dSTosy4j8iGyyz8tS8TXYFJMQowHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzMyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzczNjMzMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBjUw
DQYJKoZIhvcNAQELBQADggEBAB6oFCMywlAAnyheJyc7E00xGYdOOieHRKDv/iGA
rH+3rDGAj7WFbBAclu+OA7/sIE2qFvUSdUEIkRyVAqT8um3yB9ISeKrDpm0aUPBw
owT70CHjGI6rnj8Hm6L/9qo4Epbvg69tJkQBYMS2Kt2MsEBoPacmOJIre/+nWmrr
bNUcNTP13+ZoGAlUHE0kBCIvXsRMH0LE7RSFcqaY9uyh87h4DzdL+AWlEIO+6ij5
kOkZoNaTa3GileSfIACPdRT65FuBrT8+q1WLv1rJqQ588LQUZ65Y/qs4ds28AWC8
WLgSNb5GKnvnS7V+NE8FiTNC9KJ8RLDsv37xxJBV/Yy0h84=
-----END CERTIFICATE-----
Generated at Thu Nov 14 01:58:08 2024 by rpki-client on console-fra.rpki-client.org