Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e20323132323338.roa
File:                     33312e362e36332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          mpyR0rqsvdgZghjxdvk0AQ6NKJLbSGPmwGdHwqvCPS8=
Subject key identifier:   53:0B:94:21:32:D2:64:72:98:23:C1:8E:D4:C2:89:F2:F1:A1:8C:A9
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       5B6C13D334DCC8373CE917DA2DF7A282A7EADFBF
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 28 Jun 2024 14:40:55 +0000
ROA not before:           Fri 28 Jun 2024 14:35:55 +0000
ROA not after:            Fri 27 Jun 2025 14:40:55 +0000
asID:                     212238
IP address blocks:        31.6.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 09:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6c:13:d3:34:dc:c8:37:3c:e9:17:da:2d:f7:a2:82:a7:ea:df:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Jun 28 14:35:55 2024 GMT
            Not After : Jun 27 14:40:55 2025 GMT
        Subject: CN=530B942132D264729823C18ED4C289F2F1A18CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:dc:cc:8f:0b:69:e9:6e:57:8a:79:ec:2b:
                    08:81:d2:79:0a:3a:33:cb:6e:41:34:8c:0e:8d:b3:
                    d5:f0:9d:a2:79:88:a4:7a:26:b5:08:4f:67:ae:56:
                    d3:cf:42:01:44:d0:94:fe:94:69:97:d5:16:3a:7c:
                    62:19:3d:53:7a:d8:82:43:f2:1d:38:c5:aa:74:84:
                    b8:a2:e2:45:f3:9d:13:c1:d4:9e:1a:ba:f7:1e:f5:
                    60:21:d4:e2:f3:7a:28:80:dd:07:ad:d3:a7:1f:b6:
                    90:31:43:2c:db:a6:24:59:eb:8b:22:ab:11:3b:3d:
                    f3:c5:c0:95:7b:16:30:19:4a:6e:d8:69:07:38:68:
                    1f:07:6e:ef:d8:3f:bc:2e:d3:a9:55:c9:b0:36:3e:
                    02:9d:a8:f2:1f:69:9c:cf:89:55:b7:30:b4:c3:c0:
                    8d:5c:e8:60:3b:d0:88:f9:89:0c:3e:ef:2a:21:ca:
                    0d:5c:9e:1a:56:bf:76:ec:8e:d7:87:94:85:5e:68:
                    a0:d2:73:2e:c6:e7:c7:35:3f:1e:df:ec:b3:05:40:
                    f4:43:27:28:bd:ae:34:48:c0:92:b8:28:85:f4:f1:
                    ad:83:e9:47:14:5d:c5:61:e2:8a:fc:b9:f0:fd:11:
                    98:87:97:a6:be:f8:db:ac:11:4b:5f:10:4f:3a:7c:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0B:94:21:32:D2:64:72:98:23:C1:8E:D4:C2:89:F2:F1:A1:8C:A9
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:9f:46:46:ab:3f:a7:f9:04:3d:14:b5:08:4c:8e:99:c2:11:
         01:41:d5:6e:74:5d:70:92:ac:3c:27:60:33:53:53:22:83:d9:
         50:64:a9:70:27:af:3c:b3:f0:14:74:b1:4c:6e:4e:ae:fe:54:
         8d:71:3a:83:d8:77:5c:cb:b0:27:31:11:9c:fa:9e:21:cb:51:
         ce:20:8d:03:93:c0:d1:ae:18:9f:f3:cc:1d:7c:df:3b:f3:50:
         47:fc:7d:94:38:19:3c:ae:c4:df:0a:4b:89:4d:93:9f:d2:34:
         8d:22:9c:2a:e7:f0:09:ec:5f:e3:45:90:60:d6:11:42:6b:d2:
         fc:37:cc:06:ad:ee:47:cb:f2:68:25:2d:d1:a8:d5:22:b9:77:
         9d:7f:93:50:4e:ea:0b:58:22:fa:e4:00:3f:72:7e:3e:31:c3:
         e9:93:52:28:e6:d9:ea:bd:a7:ac:2a:45:35:70:fa:40:01:dc:
         6d:e3:d2:cf:cf:0e:31:f8:ef:3e:1f:96:9a:13:8f:b6:9f:74:
         0a:28:f4:ac:d9:f6:4c:95:f0:fd:42:da:9a:1a:b0:67:1f:33:
         eb:14:ff:f0:41:cc:30:0a:07:1a:fd:f6:ae:1e:8f:f6:b7:6e:
         11:c9:2b:c0:e6:b5:67:bd:87:65:90:74:9f:23:94:cc:5a:61:
         82:9b:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 13:32:30 2024 by rpki-client on console-ams.rpki-client.org