Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38302e302f32332d3233203d3e20383334.roa
File:                     34352e39352e38302e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier:          N65swe4BFXQMFtftN6/6+vmENzDbDeBa01NLodTxzhI=
Subject key identifier:   6B:6A:A6:48:9C:8B:2E:70:28:D4:09:6B:0B:2B:28:33:09:BB:2D:5D
Certificate issuer:       /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial:       5188C9E51CD5360E45A1CF7B2E86A66D11CCF873
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38302e302f32332d3233203d3e20383334.roa
Signing time:             Thu 18 Jul 2024 12:04:17 +0000
ROA not before:           Thu 18 Jul 2024 11:59:17 +0000
ROA not after:            Thu 17 Jul 2025 12:04:17 +0000
asID:                     834
IP address blocks:        45.95.80.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 12:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:88:c9:e5:1c:d5:36:0e:45:a1:cf:7b:2e:86:a6:6d:11:cc:f8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
        Validity
            Not Before: Jul 18 11:59:17 2024 GMT
            Not After : Jul 17 12:04:17 2025 GMT
        Subject: CN=6B6AA6489C8B2E7028D4096B0B2B283309BB2D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:57:89:2d:1b:60:00:29:73:d0:ef:7b:3b:
                    5e:89:d7:72:fe:6a:e0:5b:18:cb:28:48:33:5f:32:
                    f5:2f:be:ef:5a:f2:a8:d6:4c:da:38:3b:db:fc:96:
                    f5:c1:06:84:60:44:6b:84:ad:75:15:73:60:18:9f:
                    f8:b2:3f:0d:c7:ef:74:88:9d:e6:f7:9c:27:64:fb:
                    45:a9:7f:7e:bb:0f:71:2e:8f:4d:bf:75:c1:87:3e:
                    40:33:c3:93:a9:76:64:ac:06:a6:36:ae:65:16:8d:
                    79:b5:25:fb:74:57:44:cf:0a:f1:92:d5:ae:d1:28:
                    ff:fe:2e:27:46:cc:2e:f5:13:71:e4:8a:ec:92:98:
                    a3:5f:ed:6b:74:4a:3e:4f:33:5d:17:e5:fb:5f:95:
                    10:13:cd:40:0a:77:7d:12:19:17:4f:e1:2c:de:b3:
                    fa:11:75:59:7c:43:fa:d6:bb:f0:c2:7e:1c:a6:93:
                    8a:82:e3:85:4b:df:40:0f:d8:2b:87:04:65:a7:71:
                    cd:1b:ed:ec:fb:ef:5d:72:9d:3e:65:2a:2d:ba:af:
                    05:64:1c:10:3c:e5:85:5a:22:ad:25:dc:82:38:db:
                    cd:6c:6e:a0:7c:71:c5:ba:2c:a3:ef:fd:31:81:75:
                    6c:d9:a3:77:82:f6:94:82:dc:46:8f:e9:ff:1b:45:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6A:A6:48:9C:8B:2E:70:28:D4:09:6B:0B:2B:28:33:09:BB:2D:5D
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38302e302f32332d3233203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:37:3d:f0:5c:9f:80:fa:60:c3:25:a8:89:a9:6b:05:13:d1:
         08:70:aa:83:a3:de:bf:08:dc:96:76:db:ac:56:38:3c:5e:73:
         48:a3:fd:24:b4:c6:38:60:6a:26:ef:81:e6:aa:80:77:8d:bd:
         d6:46:56:d0:20:74:3e:89:5b:41:d3:83:08:d5:52:e3:4d:57:
         40:df:c5:e5:10:fb:b8:96:d5:be:e4:a7:4b:4d:ad:34:ed:df:
         88:fd:a7:83:8e:69:61:89:85:71:c9:3e:a3:23:58:71:85:a8:
         07:db:94:99:0b:9b:16:32:cb:fa:66:83:9c:9e:5f:81:5e:27:
         42:d0:a2:8c:46:21:e6:fd:1e:66:1b:48:e2:a7:ee:f2:21:e3:
         94:c5:5d:ac:b8:da:08:87:c6:16:ab:c4:0b:31:a7:13:31:1e:
         b3:bc:25:47:4b:61:96:54:ed:4b:eb:a2:b0:98:0b:7b:2c:f0:
         57:df:01:ad:a8:86:40:b9:ad:a6:79:ea:83:5e:a7:4b:96:87:
         c0:c1:5c:68:57:4c:b0:c6:7e:bd:ff:16:bb:7e:a5:97:30:7f:
         0a:e0:02:34:b7:53:2c:43:fc:12:f4:ed:24:4a:7e:5c:56:e0:
         f5:0d:c4:0c:52:b0:68:85:04:f5:7e:ee:4d:46:e6:47:52:0e:
         12:71:2e:f2
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 25 14:55:53 2024 by rpki-client on console-fra.rpki-client.org