Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20383334.roa
File:                     3231332e3133392e37392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          2vA07tb54Sx5Pvtka7lnQPtIxFrwjsZhUcZWQuXN3TY=
Subject key identifier:   D1:27:02:2B:48:67:9B:7A:3A:34:C0:BB:38:29:EC:50:52:FC:DF:0E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       78A9809A43C81819CED16C63E757E7BCD02B304A
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20383334.roa
Signing time:             Mon 05 Feb 2024 00:00:07 +0000
ROA not before:           Sun 04 Feb 2024 23:55:07 +0000
ROA not after:            Mon 03 Feb 2025 00:00:07 +0000
asID:                     834
IP address blocks:        213.139.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Feb 2024 00:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a9:80:9a:43:c8:18:19:ce:d1:6c:63:e7:57:e7:bc:d0:2b:30:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Feb  4 23:55:07 2024 GMT
            Not After : Feb  3 00:00:07 2025 GMT
        Subject: CN=D127022B48679B7A3A34C0BB3829EC5052FCDF0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:42:e3:22:d4:cf:fb:ce:21:41:a1:24:16:
                    14:91:f4:ec:c9:59:4d:e0:c7:87:c0:96:c3:1e:8e:
                    b5:b0:55:02:dc:89:fd:a2:fe:a5:0b:57:ba:87:78:
                    da:eb:22:d9:ba:2c:12:0b:90:05:76:19:db:86:6e:
                    55:f5:8c:71:6a:e2:a6:2e:77:f4:e8:19:ee:4c:a7:
                    aa:47:09:7b:d0:9e:91:8b:57:ec:f4:22:d5:5e:92:
                    4c:e0:78:e9:6a:9e:9d:ee:5f:ad:b4:2f:2a:f4:df:
                    a7:f0:0a:de:16:f1:88:f1:a4:78:e5:68:05:a9:56:
                    8f:ee:78:2f:84:81:67:34:7a:a5:95:47:37:fa:53:
                    35:3e:cc:a6:9a:e1:b1:b9:2a:5b:53:78:4d:42:56:
                    01:8c:25:a4:f9:cd:41:bf:bf:13:69:64:bc:d3:ee:
                    24:18:ea:1a:e4:02:8d:57:9f:03:f1:4f:6f:0f:1b:
                    7c:53:6b:b2:de:a9:e1:6b:cc:9b:cf:32:13:3b:3c:
                    e0:88:a3:7b:52:e0:d1:9b:b9:71:d9:fd:1c:9f:98:
                    b5:5e:e7:d4:38:c7:c6:30:4e:89:5e:40:05:6e:9f:
                    6d:3b:00:0f:9c:f2:d5:b1:ac:f6:fc:9f:48:86:e3:
                    ef:6c:41:13:2f:76:55:66:b2:10:83:b3:03:e4:ea:
                    bf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:27:02:2B:48:67:9B:7A:3A:34:C0:BB:38:29:EC:50:52:FC:DF:0E
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:fc:d7:00:aa:e0:65:b4:1b:08:e3:a5:ba:42:89:47:97:0b:
         f2:a3:9f:58:69:a6:cd:1a:8b:36:01:97:7f:2a:cc:d0:bb:46:
         5e:34:78:cc:71:08:94:2c:63:93:55:85:b8:76:7b:d8:8c:ef:
         49:e6:83:7e:57:f8:62:20:73:64:03:23:76:ab:50:ec:f6:1c:
         6b:16:5c:da:8d:31:00:a1:fa:61:df:c2:5e:2f:dd:d3:c7:45:
         fe:1c:66:68:1c:78:5a:02:dc:09:17:cb:58:5c:3d:ec:4e:09:
         86:2a:b1:d4:24:bd:d4:3f:ed:ed:c8:5b:fb:5a:df:e2:96:4c:
         90:01:72:14:39:78:c7:68:d2:31:8e:43:bf:ec:6b:1a:9f:ad:
         fd:90:fc:71:b0:0e:69:4c:00:7a:66:e9:99:ea:0f:55:b3:02:
         81:19:47:a2:41:3d:25:87:37:eb:26:9a:06:f5:bc:d9:87:ae:
         9a:e3:39:72:f0:76:01:a2:e1:0c:ff:a8:2c:64:3c:b2:7b:1e:
         a8:2c:11:92:27:c7:ed:b6:c8:8a:cf:59:ac:b4:5e:06:8f:8a:
         04:a1:bc:84:3b:e1:85:11:68:f9:f8:0d:b0:dc:4c:1d:5d:bd:
         d5:c1:9b:78:f0:f2:d8:6f:41:ab:d6:d8:5a:a9:5c:0c:b0:a4:
         94:49:5c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 01:18:11 2024 by rpki-client on console-fra.rpki-client.org