Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20313734.roa
File:                     3231332e3133392e37352e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          ptLe6sbAuE7qZoO9euZCRs3L5XQ56F6BJ1ZGKJuwy+k=
Subject key identifier:   81:C9:87:47:73:D6:E6:8F:1D:6B:0D:C2:8B:81:85:BE:6E:AD:98:83
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       28E2DBFC051DE4ECCE62B90667F25171D09E863D
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20313734.roa
Signing time:             Fri 24 May 2024 15:44:29 +0000
ROA not before:           Fri 24 May 2024 15:39:29 +0000
ROA not after:            Fri 23 May 2025 15:44:29 +0000
asID:                     174
IP address blocks:        213.139.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e2:db:fc:05:1d:e4:ec:ce:62:b9:06:67:f2:51:71:d0:9e:86:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: May 24 15:39:29 2024 GMT
            Not After : May 23 15:44:29 2025 GMT
        Subject: CN=81C9874773D6E68F1D6B0DC28B8185BE6EAD9883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:20:21:2d:68:9b:b5:04:0c:d2:04:d4:4b:0b:
                    dc:75:7f:cc:c4:40:92:a3:a0:f0:9e:53:6a:81:6b:
                    a5:1b:74:9c:3d:64:fa:74:9f:91:c1:1d:91:2a:81:
                    87:78:3c:1d:a7:ee:ab:d7:77:d2:d1:39:0b:d8:12:
                    32:83:bd:2c:aa:c1:42:5e:5c:11:ef:49:d2:3f:02:
                    b1:47:fb:d0:31:6b:ce:b9:da:cc:ed:37:bd:f6:ee:
                    d1:2c:53:a8:e0:c1:42:fc:00:30:20:eb:65:b0:87:
                    11:80:41:f8:cd:0d:eb:99:91:46:36:e5:23:00:4c:
                    95:b7:a5:ef:cd:ea:5e:1f:1c:12:7f:11:41:a0:51:
                    85:9d:1f:b8:dd:c5:1d:55:45:f3:27:4e:33:bf:58:
                    05:8f:4f:bc:a7:cd:9c:7d:67:25:1a:19:a8:b4:a5:
                    3a:24:08:f2:c7:7c:23:e1:d3:77:54:8b:6c:a0:86:
                    11:cd:40:7c:32:4c:b2:2a:ef:8b:ed:6f:3a:d1:67:
                    bd:98:0d:b7:49:10:e3:14:e2:55:3e:a2:a7:ff:be:
                    71:38:1a:e1:1a:0e:a3:12:02:3e:08:a1:1c:46:fb:
                    3a:7f:ec:a1:05:0a:cc:9b:46:f3:6a:2b:07:37:e3:
                    10:c3:60:a6:a1:96:4d:89:d5:d7:05:d9:0f:cc:b0:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C9:87:47:73:D6:E6:8F:1D:6B:0D:C2:8B:81:85:BE:6E:AD:98:83
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:9a:e8:92:a0:ce:f0:aa:9b:c5:11:b9:27:ba:cf:e4:07:32:
         46:a1:42:6e:fc:20:27:d5:51:fd:bb:e1:3d:12:16:43:a7:ee:
         8d:d1:d2:43:7e:28:cc:12:47:8a:de:dd:ad:76:a0:06:77:07:
         f9:4a:41:25:8d:66:8d:ac:21:0b:3f:79:86:47:35:ba:94:09:
         8d:cc:82:31:14:3a:26:c2:a1:f6:57:d9:13:bd:df:24:2e:ee:
         84:0f:2e:bb:0a:d2:9f:15:f7:ee:fb:ab:da:67:a3:c0:2b:0f:
         55:3d:10:64:86:ae:94:3d:32:4c:b7:e7:36:c1:46:92:3e:2a:
         68:95:00:68:56:11:48:14:35:7c:4f:68:15:1c:8b:63:0e:5d:
         8e:ca:6c:6a:ad:cd:75:bf:45:08:9f:ac:99:28:ab:ba:9b:22:
         bf:6a:d5:5e:06:03:78:14:df:98:15:0b:f6:64:8a:fc:7c:92:
         4b:8b:9f:39:68:08:a8:07:d0:0a:8e:e6:81:7b:86:eb:00:8f:
         d6:6f:20:35:c5:a7:0e:e5:6d:f2:40:ca:f9:c4:81:e1:7f:84:
         70:f2:69:ed:27:b6:aa:73:0a:74:f6:99:c3:27:a4:39:f1:ae:
         f2:6c:c9:a7:c2:cb:91:e6:fe:99:f1:70:01:13:d1:3b:a1:46:
         3f:53:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:50 2024 by rpki-client on console-ams.rpki-client.org