Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231372e302f32342d3234203d3e20343030383636.roa
File:                     34352e3133322e3231372e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier:          BBCm46lkdPjtKQxTw6GYepnn0nWogqN3qq7+VVKvG18=
Subject key identifier:   E0:90:F2:FC:13:72:0C:20:12:C9:A3:AF:92:8E:DE:1B:9A:42:51:3D
Certificate issuer:       /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial:       0D8E598D0E05DB0AD5337F340D8CF9A2FD6CFD43
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231372e302f32342d3234203d3e20343030383636.roa
Signing time:             Mon 10 Jun 2024 09:29:08 +0000
ROA not before:           Mon 10 Jun 2024 09:24:08 +0000
ROA not after:            Mon 09 Jun 2025 09:29:08 +0000
asID:                     400866
IP address blocks:        45.132.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 00:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8e:59:8d:0e:05:db:0a:d5:33:7f:34:0d:8c:f9:a2:fd:6c:fd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
        Validity
            Not Before: Jun 10 09:24:08 2024 GMT
            Not After : Jun  9 09:29:08 2025 GMT
        Subject: CN=E090F2FC13720C2012C9A3AF928EDE1B9A42513D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:ee:e3:88:5a:de:d5:4e:a9:62:a0:7d:4f:
                    67:60:a8:48:bb:e0:90:fd:1e:8f:c1:5b:16:8b:65:
                    1b:66:f5:5d:44:d9:a3:f1:70:f5:82:64:fd:14:d9:
                    b8:f2:dd:83:98:f5:80:a4:06:93:dd:dc:a2:03:b6:
                    64:01:41:54:6b:d3:bc:01:20:43:ab:c7:09:3b:90:
                    51:75:95:f1:5d:47:c3:65:6d:41:c3:6c:bb:fb:37:
                    d3:b9:77:0a:6b:65:db:50:5b:02:9f:41:76:16:6a:
                    6c:95:1e:87:10:2b:ec:70:c8:7c:93:f7:b3:b5:65:
                    4f:49:91:cb:f7:5f:d6:a1:32:ee:68:72:83:d1:88:
                    a7:2f:bd:a9:47:23:65:e9:bc:7a:f6:c4:de:18:54:
                    eb:fc:8a:67:03:74:51:27:fb:c7:fd:7e:4e:25:c2:
                    74:01:2e:4b:34:cc:a3:65:d9:76:44:dc:ff:f4:80:
                    87:0d:e4:74:79:a8:05:3b:87:ef:ca:f8:55:8e:59:
                    d8:ae:d4:bd:2e:2f:fb:f5:e1:81:76:f7:97:19:33:
                    ce:ef:84:9f:55:bd:a7:80:59:7f:74:70:f8:52:16:
                    dd:04:1d:73:ea:1e:52:be:80:99:f1:fe:fc:4a:a1:
                    66:65:22:20:b1:a8:d2:67:06:82:6a:b8:74:7f:93:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:90:F2:FC:13:72:0C:20:12:C9:A3:AF:92:8E:DE:1B:9A:42:51:3D
            X509v3 Authority Key Identifier:
                keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231372e302f32342d3234203d3e20343030383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:22:34:10:d3:8d:43:ef:ab:e2:a6:3d:b4:51:e6:ef:4e:
         ab:ee:b2:ce:05:e9:50:84:8a:11:20:8e:27:35:de:b6:f6:77:
         ff:c9:44:62:b9:e0:43:60:e6:3c:9b:35:25:8d:dd:6c:ba:6b:
         a3:66:6d:48:61:41:ff:62:dd:77:e3:d4:f0:fa:af:3b:8c:bc:
         dd:a0:f5:d0:52:93:74:53:d3:c2:ea:4b:8c:75:0b:3e:25:56:
         0f:70:1d:3c:38:6f:71:b2:78:93:70:ef:27:91:25:4e:bf:8d:
         aa:e1:34:97:cc:3d:db:93:b7:1d:65:77:18:da:a3:19:54:8e:
         b4:c0:b2:8b:39:d4:63:29:f3:14:d8:19:61:1c:e0:a4:a5:2f:
         5f:64:65:f9:46:0a:02:b8:04:a9:2a:75:cd:60:9d:e2:e1:cd:
         04:56:c0:fa:12:61:8d:0c:4d:5c:ef:f2:02:8e:52:e5:15:59:
         89:80:b5:88:8b:85:05:d3:6a:f3:1b:e2:37:48:02:40:e8:87:
         18:66:72:9d:0a:3a:df:a4:d6:09:93:fd:ae:1c:91:83:c3:ad:
         ae:d8:98:0c:a2:0d:51:37:f5:80:89:74:ee:22:d0:2d:45:63:
         f7:11:73:9d:1b:9a:bd:63:3f:f8:ee:f1:b6:8b:b3:08:f6:03:
         41:79:ee:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 01:32:21 2024 by rpki-client on console-ams.rpki-client.org