Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32332d3234203d3e20383334.roa
File:                     33312e362e36322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          kEj68x/OjTI8ABBluYJsQNoAoF3MSY7OnxFKhMjsWqk=
Subject key identifier:   3E:05:AA:09:09:1D:1A:BB:0C:B2:5B:CC:27:9F:88:DF:07:C8:C8:13
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       3F10B8D72FD17D6A07B246C5C4F0F8FF75D3DB70
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32332d3234203d3e20383334.roa
Signing time:             Wed 19 Jun 2024 00:02:13 +0000
ROA not before:           Tue 18 Jun 2024 23:57:13 +0000
ROA not after:            Wed 18 Jun 2025 00:02:13 +0000
asID:                     834
IP address blocks:        31.6.62.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 15:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:10:b8:d7:2f:d1:7d:6a:07:b2:46:c5:c4:f0:f8:ff:75:d3:db:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Jun 18 23:57:13 2024 GMT
            Not After : Jun 18 00:02:13 2025 GMT
        Subject: CN=3E05AA09091D1ABB0CB25BCC279F88DF07C8C813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:55:27:6d:51:34:21:e8:08:b6:d7:1f:dc:
                    91:0c:d0:8b:89:77:f5:88:79:36:ff:9d:05:78:fb:
                    62:45:90:3c:0b:48:b1:ae:ef:32:ad:0a:6a:9e:ab:
                    38:98:e7:e6:45:60:da:09:9f:50:73:a0:b3:3c:5e:
                    df:27:4b:1f:30:bf:ec:6d:c0:66:c9:f9:09:ba:a7:
                    66:c6:43:96:24:a4:85:8d:3a:9e:5c:b4:89:26:b2:
                    91:a6:92:2e:c1:34:06:50:20:95:a8:c2:6b:f7:ff:
                    04:64:13:70:d2:3d:6f:86:59:a0:c7:93:87:4b:7d:
                    fc:c4:ef:6b:96:a6:2d:c4:dc:d3:4f:ac:bf:e5:dd:
                    93:9e:d3:a0:a1:87:3d:0f:d2:97:f8:6d:f0:ff:af:
                    3c:5e:9f:45:97:f2:fe:e7:f2:1e:b1:1a:f7:87:93:
                    7e:64:b3:df:34:f2:e5:a0:23:04:0c:78:a3:1d:a5:
                    b1:d7:29:ec:e6:af:51:0b:6d:d5:ae:c4:dc:44:9b:
                    10:76:ad:cd:f6:c1:48:ab:58:16:05:39:24:c6:2c:
                    10:26:3a:76:12:3b:53:d2:4e:45:a3:3a:e0:5d:ac:
                    4d:57:15:44:c2:93:6a:11:4a:69:31:63:c6:b5:d2:
                    f4:55:81:2d:55:e4:c5:3c:f1:c3:86:fe:2f:26:4f:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:05:AA:09:09:1D:1A:BB:0C:B2:5B:CC:27:9F:88:DF:07:C8:C8:13
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:d3:7d:5b:2c:7d:4a:61:72:1e:32:48:23:3c:14:9d:bf:
         fd:4d:1c:5d:1d:b2:30:b3:60:29:fc:77:fe:ff:36:0f:eb:b9:
         2a:c1:d6:e0:5d:18:98:36:ec:f9:26:5e:64:23:a3:52:73:97:
         71:e5:65:02:5a:d5:cb:7e:1d:39:d2:68:f8:a6:3f:1c:45:65:
         08:03:53:5b:1f:64:6e:95:86:8f:10:fb:15:d7:5c:fc:bc:48:
         96:28:30:96:95:cf:ec:81:fc:c0:a3:7d:9d:81:73:3a:fc:9c:
         6d:d6:b7:43:55:60:6c:d4:04:e2:06:fe:9c:36:c8:ec:5e:cf:
         83:83:8c:49:51:76:06:cc:83:4b:a9:e9:57:f9:f2:f3:77:5a:
         1c:84:3d:7f:02:bd:0f:ac:df:fd:1b:78:29:8b:5e:39:a4:e4:
         2d:93:b2:af:51:ec:6f:2d:db:ed:fc:d7:7f:2d:6c:f4:93:a9:
         08:89:b3:e2:61:66:84:4c:0b:6e:e8:c0:ef:95:14:df:01:f6:
         e5:da:30:01:ef:98:b7:2d:a2:2d:ba:6d:48:63:d8:ee:64:ee:
         39:00:b0:44:48:5f:ce:ab:54:06:04:77:fd:00:0c:56:67:be:
         65:e9:cd:3d:c8:49:7d:77:05:11:0b:c3:a7:80:db:66:5d:ad:
         40:41:30:f2
-----BEGIN CERTIFICATE-----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Generated at Fri Jun 21 20:20:17 2024 by rpki-client on console-ams.rpki-client.org