Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20383334.roa
File:                     3138352e3234302e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          7qIXv5CLCyCKKqTzuKQfv97kuY2NDRyBHM4Ia8dlQnQ=
Subject key identifier:   6E:75:A0:37:46:9C:C2:A9:E5:50:02:AD:96:0E:27:3E:E7:45:F1:BE
Certificate issuer:       /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial:       60A91188D79635D8A18470C3C90CF85E7285E060
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20383334.roa
Signing time:             Fri 26 Jul 2024 20:44:27 +0000
ROA not before:           Fri 26 Jul 2024 20:39:27 +0000
ROA not after:            Fri 25 Jul 2025 20:44:27 +0000
asID:                     834
IP address blocks:        185.240.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Jul 2024 23:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a9:11:88:d7:96:35:d8:a1:84:70:c3:c9:0c:f8:5e:72:85:e0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
        Validity
            Not Before: Jul 26 20:39:27 2024 GMT
            Not After : Jul 25 20:44:27 2025 GMT
        Subject: CN=6E75A037469CC2A9E55002AD960E273EE745F1BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:e9:40:e3:2c:8d:97:16:bd:2f:04:c8:05:
                    94:36:bc:60:83:32:89:39:00:c5:22:3a:f5:3c:2f:
                    e3:ae:69:e9:db:ed:bd:bf:a8:b9:96:84:74:19:dc:
                    9f:26:b5:a3:c3:18:4e:0a:23:31:36:ef:6b:39:a3:
                    1f:c8:ce:95:92:e4:a5:b6:1c:76:70:d4:3a:2e:0b:
                    93:85:9e:31:df:8f:c3:b7:1a:cd:ce:39:86:d9:1e:
                    52:c8:38:5f:8d:30:9d:9b:35:19:15:63:8d:0e:07:
                    85:db:ea:e2:7b:6e:85:a2:f3:97:0d:ee:3e:9f:07:
                    d7:2e:ab:ea:52:04:c7:ad:0a:11:ec:c6:cb:18:fa:
                    fc:88:27:95:bf:5b:1d:2b:09:17:3d:37:07:62:30:
                    3b:b5:05:31:9f:6b:0d:23:d5:91:7e:fc:76:35:5f:
                    70:a6:ca:5f:d7:42:60:71:2f:e5:58:8c:bd:70:86:
                    52:20:19:85:52:6a:8d:1e:f3:70:b6:51:e3:37:8a:
                    d1:46:43:fa:39:a4:40:42:31:21:db:e2:6f:e2:6b:
                    f1:ac:b6:61:2b:3a:0e:a5:30:0f:04:be:61:74:32:
                    21:62:28:f9:78:1e:e1:23:3d:88:90:40:f0:0b:18:
                    c0:89:9a:13:ac:dc:15:fd:ab:0e:d7:c3:08:31:a6:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:75:A0:37:46:9C:C2:A9:E5:50:02:AD:96:0E:27:3E:E7:45:F1:BE
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ec:ce:f3:cd:79:43:94:b0:cf:ce:a2:ce:32:95:3d:19:10:
         fb:86:70:a2:69:06:00:75:7d:b0:ba:43:e3:b6:59:4e:b4:6f:
         42:ec:fc:7d:42:92:47:01:7a:8e:7c:cb:0c:ba:f7:8f:5f:b0:
         19:ab:97:b0:89:2d:f5:7f:3f:0c:b1:86:9d:e7:10:44:c2:27:
         7d:8b:c0:5b:cc:e2:34:5a:ff:1f:df:73:e8:aa:1e:11:2b:23:
         e4:7e:28:5f:5d:98:08:9c:2f:da:f8:d1:6d:82:a9:34:a6:24:
         c7:dd:eb:f6:36:2b:30:90:c5:23:b4:c0:58:0d:11:d4:71:5f:
         2c:4b:7a:da:a0:9c:d5:11:68:e3:eb:5a:ed:69:15:52:28:38:
         5b:f6:7e:8f:eb:b9:1f:84:6b:fd:b6:ab:6e:f0:d8:9a:9c:20:
         d0:a9:dd:3c:c5:62:d1:78:d8:d9:ad:ce:5d:b3:9e:9e:9b:eb:
         ec:58:48:ce:85:16:b7:76:03:ea:42:d9:c3:f6:2f:9b:f2:39:
         af:4a:ba:a8:a3:aa:4b:3a:7b:0f:0f:50:ed:fe:85:59:dd:1e:
         e0:ee:ed:ab:29:8f:ff:7f:b9:59:52:1e:68:7b:05:b9:ff:fb:
         e7:a8:3f:0b:d5:cb:bc:93:bd:9d:92:74:47:35:f2:69:6c:92:
         8d:0f:b5:55
-----BEGIN CERTIFICATE-----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Generated at Sat Jul 27 02:44:50 2024 by rpki-client on console-fra.rpki-client.org