Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e20323130353432.roa
File:                     33312e362e35392e302f32342d3234203d3e20323130353432.roa (raw, json)
Hash identifier:          ZxdApm2nKarUN6NoR3Vu99wXGTRcY8PiXKP/maWU/Ak=
Subject key identifier:   31:04:AE:9D:D5:12:B9:70:19:E7:A5:8A:BC:5C:6B:79:5F:22:83:C6
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       749E6BB80935F90C5C13382D0324301F5B22C47D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e20323130353432.roa
Signing time:             Fri 22 Dec 2023 05:18:43 +0000
ROA not before:           Fri 22 Dec 2023 05:13:43 +0000
ROA not after:            Fri 20 Dec 2024 05:18:43 +0000
asID:                     210542
IP address blocks:        31.6.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 May 2024 00:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9e:6b:b8:09:35:f9:0c:5c:13:38:2d:03:24:30:1f:5b:22:c4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Dec 22 05:13:43 2023 GMT
            Not After : Dec 20 05:18:43 2024 GMT
        Subject: CN=3104AE9DD512B97019E7A58ABC5C6B795F2283C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:36:1d:71:72:98:c7:14:18:8d:96:b2:07:ca:
                    f7:95:1f:32:46:64:b6:81:b2:fd:b0:49:72:ba:ed:
                    7b:38:78:f1:0a:c4:c6:a2:4c:0e:69:62:c1:49:84:
                    d0:43:bc:a7:68:ad:d9:c8:0c:34:64:e5:14:4a:53:
                    a6:3e:38:15:7d:3e:36:58:3c:e9:6e:31:9f:34:e7:
                    fd:86:db:b9:dd:1d:81:99:76:82:b9:cd:80:69:41:
                    1f:f5:b7:6f:38:c4:6e:f6:7d:0b:8d:27:20:d9:32:
                    c0:d3:e5:7a:ba:73:95:70:90:89:8c:89:6b:ac:37:
                    6b:9c:82:1c:b4:fb:90:b0:7c:5e:f5:6b:25:21:5b:
                    02:58:eb:30:6d:0d:e5:13:a6:02:db:ce:ee:84:1b:
                    17:39:49:c0:5c:d8:c5:ab:f4:c1:06:7a:d2:1f:34:
                    da:a8:86:13:80:81:36:aa:f4:e4:04:ac:73:22:52:
                    19:bd:f4:74:88:51:8e:10:d1:34:17:cf:0c:a4:80:
                    ee:0f:13:3e:d2:f3:8e:8a:38:fc:46:cf:a3:6f:6a:
                    6a:e4:50:ed:9b:00:f5:4d:0c:17:4c:f2:aa:1d:94:
                    4a:fd:76:23:86:57:68:4e:d0:7d:bb:e0:44:f3:46:
                    4d:a1:eb:5e:09:68:99:9d:6c:ce:91:76:0a:41:90:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:04:AE:9D:D5:12:B9:70:19:E7:A5:8A:BC:5C:6B:79:5F:22:83:C6
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e20323130353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e9:8d:38:25:6d:5b:76:1e:98:e3:52:c3:b7:46:10:7b:1c:
         06:05:30:65:e4:4f:9b:72:59:19:ec:d2:a7:ef:99:82:f4:1b:
         d2:41:30:2f:35:87:c4:a3:31:47:fc:58:79:8e:16:8d:47:cf:
         c5:ee:d3:1d:c6:49:c3:4e:ab:ff:66:b3:f4:14:df:b2:e4:51:
         2e:75:d1:10:cc:7b:0f:0c:d4:ae:cc:a7:0d:d0:29:4e:ba:ed:
         ea:9c:e5:01:d4:95:f4:27:fb:cc:5e:5f:10:f4:de:93:28:40:
         54:c3:8f:ca:9f:a9:71:ea:d6:23:96:1b:22:35:5c:96:9c:3d:
         50:fb:14:be:c0:cc:ca:0e:7f:5f:c4:ab:ad:61:96:8f:07:79:
         08:75:52:fd:68:e5:46:cd:6f:3d:b7:23:0c:b3:63:f1:c3:37:
         90:e3:4c:29:68:19:fb:34:5f:8c:d4:08:44:04:de:f0:95:4a:
         97:53:54:bb:c1:ac:f8:52:9c:d1:b9:97:c3:f6:61:f9:58:07:
         9e:21:5b:f5:10:57:dd:87:b1:4b:e2:30:39:5a:17:b5:32:dd:
         e6:4a:e6:83:1b:13:22:70:b5:2a:38:ee:2e:fe:5e:a6:fa:d5:
         30:5d:9b:a6:4c:69:ae:cd:2a:99:65:5c:54:25:9d:0f:9b:23:
         73:c8:f4:25
-----BEGIN CERTIFICATE-----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Generated at Wed May 22 01:09:52 2024 by rpki-client on console-fra.rpki-client.org