Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233332e302f32342d3234203d3e20323135323837.roa
File:                     3139332e32342e3233332e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier:          mkLDAi9FBCMWu1pXCGyfFKUZk9hccADLTDtiMKQVXc4=
Subject key identifier:   4F:EB:FB:28:1C:79:BE:94:07:A2:AB:12:C4:7D:05:2C:95:6F:FF:46
Certificate issuer:       /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial:       3E60063FD4D98D5831A1AECB97122F35348CEA4C
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233332e302f32342d3234203d3e20323135323837.roa
Signing time:             Sun 28 Jul 2024 13:11:23 +0000
ROA not before:           Sun 28 Jul 2024 13:06:23 +0000
ROA not after:            Sun 27 Jul 2025 13:11:23 +0000
asID:                     215287
IP address blocks:        193.24.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 00:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:60:06:3f:d4:d9:8d:58:31:a1:ae:cb:97:12:2f:35:34:8c:ea:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
        Validity
            Not Before: Jul 28 13:06:23 2024 GMT
            Not After : Jul 27 13:11:23 2025 GMT
        Subject: CN=4FEBFB281C79BE9407A2AB12C47D052C956FFF46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:cd:af:2b:f4:10:d5:0d:9b:b5:06:c4:fa:
                    0e:27:af:ae:d6:c8:87:73:e3:72:41:8e:24:31:b6:
                    d4:f4:fc:f2:ae:d2:4a:94:df:bc:11:1c:39:b9:9b:
                    57:12:b3:47:f5:f8:63:49:3c:6a:15:b6:18:9c:ea:
                    e4:7a:e6:2e:b0:9d:48:06:55:e4:57:8e:dd:12:c4:
                    08:ee:c6:65:b3:b0:86:3e:9d:9e:00:b4:ff:70:54:
                    7c:8d:0a:40:a8:69:84:ea:a4:08:9a:05:71:39:d7:
                    51:57:0e:2d:38:a3:36:c2:a8:e0:e5:bf:e4:07:81:
                    c0:17:51:e0:4b:6d:42:02:39:49:13:6a:e8:eb:1f:
                    cf:1d:01:a6:4e:92:53:b5:2a:92:35:83:8b:39:b1:
                    70:d1:9a:f4:e6:81:05:ee:1c:a2:b4:83:56:53:22:
                    69:44:02:c8:9f:1f:4b:de:9b:58:1c:7e:53:04:1d:
                    79:93:49:79:a8:10:02:36:50:02:36:dc:da:94:f7:
                    90:05:99:1b:ab:7d:81:9b:f9:89:75:08:31:cf:1e:
                    7a:ed:36:4b:6c:11:f0:69:c5:4d:49:20:c0:c4:97:
                    7b:a8:35:90:e5:e8:aa:c6:93:9a:ce:2b:08:e9:b8:
                    d1:f0:55:7e:cd:ba:ed:5f:76:00:b6:5b:97:0b:a4:
                    1e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EB:FB:28:1C:79:BE:94:07:A2:AB:12:C4:7D:05:2C:95:6F:FF:46
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233332e302f32342d3234203d3e20323135323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f7:77:56:aa:1f:b0:3c:0b:d4:a7:97:6c:1c:29:d1:47:f6:
         5b:30:e1:4d:01:77:32:da:a8:6b:43:c4:ee:4c:b4:7b:66:d1:
         0f:79:4c:a1:f6:e5:f2:0b:ac:88:87:70:a3:60:23:b9:db:a9:
         c9:db:9c:67:1d:71:bb:e4:b5:e2:65:1e:77:9e:9d:10:a0:21:
         cd:ac:6b:c4:03:a4:1c:14:b7:4d:a1:01:69:50:cc:c6:f6:3c:
         07:7d:47:a9:f0:bb:98:bc:34:86:ac:a1:e4:06:68:d7:a5:89:
         06:f5:3c:7f:a9:77:b0:0d:7c:73:7e:03:de:cb:74:41:4a:47:
         b5:ac:3f:df:0d:4e:55:f0:64:f1:0d:a5:94:bb:f8:3d:51:28:
         26:3c:d5:4a:22:60:96:22:3f:a5:d2:dd:ec:fe:5b:61:8b:11:
         c1:dc:41:3b:80:3e:6c:48:17:9e:6f:f9:81:28:92:e3:52:c9:
         f7:10:a3:65:2c:2a:79:b0:f3:42:95:5c:0f:2b:a9:83:33:e3:
         90:4d:eb:6d:15:3e:ec:b8:53:a4:fe:ec:fb:5c:49:d1:00:31:
         f4:83:52:70:d4:b5:dc:59:ea:00:52:7c:7f:4e:b9:db:91:6d:
         14:e5:33:1a:5d:d6:83:84:ae:ee:07:b9:f8:9b:19:3e:67:9e:
         73:42:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 02:25:43 2024 by rpki-client on console-ams.rpki-client.org