Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
File:                     39332e39352e3131332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          aNK+kV67RcSPqcmo3D97U4OBuH+Zynw5tRcjA+PRF5U=
Subject key identifier:   5F:D9:08:3A:3D:98:76:9F:99:D1:39:07:34:D3:BA:B4:58:77:80:F8
Certificate issuer:       /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial:       3CB73EC27720775A3439346DF72C694557DBA371
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
Signing time:             Thu 10 Oct 2024 00:02:24 +0000
ROA not before:           Wed 09 Oct 2024 23:57:24 +0000
ROA not after:            Thu 09 Oct 2025 00:02:24 +0000
asID:                     834
IP address blocks:        93.95.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 10 Oct 2024 10:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b7:3e:c2:77:20:77:5a:34:39:34:6d:f7:2c:69:45:57:db:a3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
        Validity
            Not Before: Oct  9 23:57:24 2024 GMT
            Not After : Oct  9 00:02:24 2025 GMT
        Subject: CN=5FD9083A3D98769F99D1390734D3BAB4587780F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:99:c4:e5:18:13:61:53:f9:59:6c:a4:ef:
                    e7:15:fb:b9:2f:92:14:55:c9:d7:72:f5:60:6f:24:
                    b4:a2:82:30:86:97:8c:2d:1b:48:e2:13:24:67:cf:
                    1c:3f:77:a3:f7:b3:da:49:9e:57:62:fb:c4:db:f3:
                    34:e0:18:5e:cf:53:20:eb:7e:60:0e:85:f2:5a:d1:
                    1d:2e:b6:26:ea:ef:cf:4b:0d:90:71:30:7c:28:71:
                    4a:e5:fa:e0:f5:7d:63:12:20:ce:26:63:f9:61:bf:
                    0e:12:ee:23:dd:b7:2d:9e:82:82:49:e4:37:6e:57:
                    22:be:8a:c5:43:d5:db:6a:12:c2:a6:8b:3b:a4:93:
                    60:c4:e2:f4:d8:e9:aa:76:e8:27:f8:30:75:f8:2e:
                    c3:27:f5:a5:2c:7c:9d:c6:5e:10:b5:a7:14:c3:9c:
                    5a:6c:8d:65:7e:88:ab:d8:d7:d1:7a:b0:32:cf:34:
                    3c:48:8b:71:e2:c0:bf:8e:75:b2:f6:b9:60:a2:4c:
                    f1:26:ad:df:e3:f6:fb:db:d4:c3:98:05:c7:79:bc:
                    9a:a6:41:8f:c1:39:64:7f:f9:55:0e:14:3b:83:7f:
                    61:db:6c:60:77:56:25:d8:5d:b2:86:cc:53:5c:b2:
                    a1:8c:0b:2d:ed:92:6a:a8:f1:14:7e:8e:f6:c6:65:
                    1e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D9:08:3A:3D:98:76:9F:99:D1:39:07:34:D3:BA:B4:58:77:80:F8
            X509v3 Authority Key Identifier:
                keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:56:9f:09:90:03:20:d2:bd:52:49:23:15:e6:ae:f8:ea:d8:
         44:7d:3c:79:ab:bc:ff:b9:6c:53:a9:cc:8d:c0:f8:c0:44:61:
         dd:a0:0e:e4:68:5f:01:0b:d3:11:26:85:40:8e:a7:ec:61:5f:
         38:3e:b1:b5:b8:f0:ab:9a:5b:b1:bc:80:d0:14:03:3e:9a:c9:
         27:28:5d:2a:30:cc:07:34:49:e0:82:bf:b3:96:7b:cc:2c:6a:
         7a:23:0c:47:ea:65:61:32:d4:43:19:ce:6a:b3:18:71:ee:cd:
         1a:f7:a7:c4:74:a3:c1:d0:16:0b:e9:e5:86:5e:97:ea:2c:d0:
         fa:c0:e0:4c:d3:98:c4:b7:0f:84:ea:0e:f7:bf:bd:c9:da:df:
         68:d5:0a:1a:de:16:df:00:32:06:3e:93:8e:6b:07:68:e5:bf:
         cd:c1:ba:fe:bc:ba:49:98:1e:9f:c0:a7:aa:c7:80:c3:6d:bc:
         1a:7c:a1:dd:82:3d:2d:7d:54:a8:b6:9b:51:d4:3e:ea:48:fd:
         10:f9:59:6d:81:93:b6:1a:a2:bf:be:09:b1:3a:08:c1:e1:f1:
         15:e1:30:8a:25:fc:6a:87:24:4e:db:57:d7:68:81:c1:e9:a4:
         4b:f6:7c:67:d3:b1:12:33:1b:f8:ce:fb:20:98:d1:24:2b:45:
         5b:c3:20:b6
-----BEGIN CERTIFICATE-----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Generated at Thu Oct 10 16:08:17 2024 by rpki-client on console-fra.rpki-client.org