Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32332d3234203d3e2039303837.roa
File:                     34352e39332e3138342e302f32332d3234203d3e2039303837.roa (raw, json)
Hash identifier:          BP5i5uD5BwiByyDqC54lt2JrUYDQRGIGUDEru52hogg=
Subject key identifier:   8F:02:23:15:09:10:B2:7E:8C:53:E4:9E:32:37:44:1F:32:C8:DD:68
Certificate issuer:       /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial:       7682DAA9854251D97A1216B15EC50F1CF6A894A1
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32332d3234203d3e2039303837.roa
Signing time:             Wed 28 Aug 2024 13:05:19 +0000
ROA not before:           Wed 28 Aug 2024 13:00:19 +0000
ROA not after:            Wed 27 Aug 2025 13:05:19 +0000
asID:                     9087
IP address blocks:        45.93.184.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 00:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:82:da:a9:85:42:51:d9:7a:12:16:b1:5e:c5:0f:1c:f6:a8:94:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
        Validity
            Not Before: Aug 28 13:00:19 2024 GMT
            Not After : Aug 27 13:05:19 2025 GMT
        Subject: CN=8F0223150910B27E8C53E49E3237441F32C8DD68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:d6:6f:4e:13:dc:cd:4f:07:b7:fe:0e:9c:
                    c3:1b:76:bf:01:4e:99:c5:a3:be:6f:a8:79:65:e9:
                    88:b4:35:07:04:5e:6e:4f:ab:ba:1a:c0:9e:3f:16:
                    76:d6:57:4d:6f:8e:e5:04:ae:90:35:93:2f:2e:b6:
                    0f:b1:06:be:8c:25:49:e8:60:11:59:44:2b:0d:40:
                    f4:c2:c0:42:f4:ed:ef:54:7c:90:9d:b0:ff:be:67:
                    7c:3d:c6:85:10:6f:86:11:33:1c:17:3c:8f:5c:c8:
                    5d:6a:22:6c:d1:76:8d:6d:19:f3:e2:4c:1b:7e:08:
                    b5:e3:19:c6:e9:fc:24:fa:06:ff:5c:a6:c9:4f:7a:
                    2d:34:14:31:95:b5:d1:91:69:6d:c5:ba:ac:73:50:
                    3c:3d:f1:c9:51:5a:87:51:31:66:53:fd:1a:3a:e8:
                    59:3f:8a:ee:fe:15:7e:8a:f1:b6:70:57:75:dc:c9:
                    d0:f4:d0:37:d8:0d:7f:06:c6:48:64:fd:ba:5a:bc:
                    d0:55:53:a5:50:ed:5e:14:44:0d:c6:6e:83:34:7a:
                    04:dd:fb:5f:10:21:a0:10:af:bc:75:d1:a8:9b:b3:
                    3a:fb:bf:c9:07:22:70:29:60:21:5e:8d:16:c5:e2:
                    f8:d2:ad:0e:c8:b9:f7:99:67:98:1e:21:19:b7:89:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:02:23:15:09:10:B2:7E:8C:53:E4:9E:32:37:44:1F:32:C8:DD:68
            X509v3 Authority Key Identifier:
                keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32332d3234203d3e2039303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:19:4a:1d:bf:dd:3a:09:c4:df:59:16:66:8a:f0:e8:a2:07:
         b1:40:a3:c7:fc:4f:6e:33:70:b8:92:c8:bf:8c:49:72:4c:cf:
         8f:c0:0c:50:56:ef:23:56:a3:7c:3b:e6:18:43:f2:6d:4b:35:
         9f:21:fb:50:97:84:ff:5b:68:5a:c4:fa:1e:6f:13:31:52:f9:
         83:ff:fd:0b:f0:5f:f8:77:29:a6:c4:28:9a:3d:5b:43:24:3d:
         39:b2:8f:3a:f1:f4:33:fd:23:37:a5:a5:c5:36:05:6c:28:c8:
         85:34:e7:c6:89:21:6a:43:77:63:23:d4:86:6b:6f:37:14:eb:
         84:73:2f:6f:b1:66:e2:1a:d5:25:ee:de:af:11:8e:3e:71:c5:
         b3:ca:9c:87:82:cd:2a:c0:ed:3f:a0:e6:2b:75:45:06:ce:e5:
         7a:14:a8:67:97:54:4b:ee:a2:b7:d4:44:c3:30:f7:33:a3:0f:
         3f:30:22:22:0b:fc:0b:25:f3:3b:4f:57:22:09:e2:44:6c:d7:
         fe:09:9a:06:d7:c1:5f:62:16:9f:cb:30:fb:20:7c:ce:da:88:
         fb:31:b6:d0:cf:0e:4c:20:dc:ac:35:28:fc:92:cc:6d:b5:bb:
         15:11:7a:a3:83:76:1a:d9:22:70:28:0b:94:b0:9a:b6:f0:6d:
         9a:51:31:5e
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 13 01:19:31 2024 by rpki-client on console-fra.rpki-client.org