Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3234203d3e20383334.roa
File:                     3139332e32342e3233322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          CM421QaCU+Ms2RXUyB97Mz1OvxJCC0nkybSuJoVBwNQ=
Subject key identifier:   92:1A:CE:57:3C:86:D7:E1:D3:E4:AA:83:F6:EE:D9:34:AB:83:DE:D1
Certificate issuer:       /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial:       422A21D595B861EBB8407AE736BE2C7494C3EC4A
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3234203d3e20383334.roa
Signing time:             Tue 01 Oct 2024 10:45:48 +0000
ROA not before:           Tue 01 Oct 2024 10:40:48 +0000
ROA not after:            Tue 30 Sep 2025 10:45:48 +0000
asID:                     834
IP address blocks:        193.24.232.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 11:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2a:21:d5:95:b8:61:eb:b8:40:7a:e7:36:be:2c:74:94:c3:ec:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
        Validity
            Not Before: Oct  1 10:40:48 2024 GMT
            Not After : Sep 30 10:45:48 2025 GMT
        Subject: CN=921ACE573C86D7E1D3E4AA83F6EED934AB83DED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:6f:58:6c:b5:4e:0d:78:55:51:7f:23:af:
                    f8:3c:28:b5:fb:f7:b1:92:35:80:cc:40:7d:ba:1e:
                    4f:2f:7f:1b:6b:f5:7d:1a:e8:ff:5c:c8:20:79:cb:
                    db:1e:2d:d7:e9:7b:51:55:d3:5a:92:52:66:2a:38:
                    2b:68:ab:2c:47:fb:47:63:d4:11:22:f7:d3:50:a0:
                    ce:f8:bf:2e:08:43:d0:7c:7e:c3:e8:4e:b6:b4:9e:
                    c2:e1:33:3e:77:d2:69:f3:ed:00:32:de:62:93:91:
                    fc:2a:bb:83:96:d5:45:89:b1:aa:2e:2c:6c:9b:5f:
                    9d:72:f7:64:36:6e:a2:d9:2c:2c:5c:04:37:58:8c:
                    d2:2d:cf:72:09:98:c0:81:6a:62:53:98:8e:7e:15:
                    32:2f:27:1f:9f:43:94:22:b6:51:a2:65:a3:2c:12:
                    fb:55:f7:3e:67:ad:e8:49:71:8f:58:88:77:8e:c2:
                    2c:13:6a:03:23:6a:54:03:ed:9a:da:84:08:2a:81:
                    5f:2a:10:ff:c2:0f:d3:ba:ec:88:bb:06:a1:78:24:
                    db:a9:25:6c:00:3e:d0:68:15:d2:e2:42:b4:92:cd:
                    b1:35:b8:06:c8:97:db:d6:d8:b0:56:e7:50:ad:d3:
                    06:c6:66:83:06:0a:fc:57:8f:39:03:9a:a0:33:42:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1A:CE:57:3C:86:D7:E1:D3:E4:AA:83:F6:EE:D9:34:AB:83:DE:D1
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:f7:d0:82:59:e2:81:44:79:f0:3d:0e:42:cc:87:36:1c:24:
         3f:39:97:e4:17:53:28:8b:98:af:7e:17:fd:a8:99:a5:24:1f:
         42:a3:f2:cf:38:6c:71:88:6a:d8:01:f6:08:e2:5b:03:d7:16:
         3b:b3:07:eb:f1:e8:37:75:21:d7:e4:ad:6b:97:48:4e:bf:db:
         7e:9b:67:47:45:f7:7c:5d:fd:81:c8:71:ee:05:bd:be:fc:98:
         e5:2c:d4:21:e9:fc:0f:09:9f:e5:93:65:68:93:3f:9d:d5:49:
         eb:4f:88:61:8b:58:d3:5b:5a:54:00:2a:bf:cb:b4:76:46:f7:
         34:66:ca:3e:c1:f2:0d:8b:23:f5:95:70:17:6f:77:87:d3:7b:
         ba:6c:f7:0c:0a:37:30:56:31:14:49:cd:0f:84:0c:53:cb:16:
         47:46:15:e6:e6:5f:51:73:8e:da:3c:89:37:a7:54:ef:cb:50:
         0f:fe:3e:b7:42:4d:4b:ab:20:d0:4e:a8:62:44:dd:9d:94:4e:
         e8:2b:69:8e:c6:02:dd:9b:43:63:6e:e2:5c:ec:38:62:80:44:
         f6:97:cb:6b:bf:bf:df:bd:36:b4:dc:99:7b:93:c0:cf:4b:b5:
         aa:d1:60:74:1b:cb:bd:6e:4c:6c:8e:58:14:17:6f:4f:d8:fb:
         b0:72:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 19:10:56 2024 by rpki-client on console-ams.rpki-client.org