Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39322e302f32342d3234203d3e203335393133.roa
File:                     3231332e3133392e39322e302f32342d3234203d3e203335393133.roa (raw, json)
Hash identifier:          xzKAhpanq9YlQ8qkFsZoNYr+pnIRVgj6XyYbDfA8a30=
Subject key identifier:   63:BF:0A:2D:EF:D3:1A:AB:B2:49:63:01:51:88:53:BB:B5:8C:22:A1
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       3826CC80713B7168778DC210229125B1678097A7
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39322e302f32342d3234203d3e203335393133.roa
Signing time:             Thu 06 Jul 2023 14:46:00 +0000
ROA not before:           Thu 06 Jul 2023 14:41:00 +0000
ROA not after:            Thu 04 Jul 2024 14:46:00 +0000
asID:                     35913
IP address blocks:        213.139.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:26:cc:80:71:3b:71:68:77:8d:c2:10:22:91:25:b1:67:80:97:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Jul  6 14:41:00 2023 GMT
            Not After : Jul  4 14:46:00 2024 GMT
        Subject: CN=63BF0A2DEFD31AABB2496301518853BBB58C22A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:b1:e9:6f:c3:d4:4f:5a:53:c0:6b:5c:fd:
                    7d:55:3a:85:e7:6d:a4:4b:ae:02:95:41:02:96:99:
                    de:04:1d:34:3b:7b:9d:8d:92:aa:dc:96:af:fd:b8:
                    a3:b2:7e:de:1a:ee:72:c7:03:26:76:32:70:a3:f9:
                    b5:da:30:37:98:c0:6d:a4:fd:4d:2a:06:bc:fd:47:
                    c5:d1:76:98:a9:5b:d5:f4:12:5c:6f:85:64:c6:58:
                    33:f5:3f:a9:18:7d:5a:1b:3c:be:b7:39:82:78:91:
                    fb:33:e8:fe:44:e0:c1:3d:9c:03:0a:04:71:c6:ab:
                    64:ff:ee:26:b7:df:cb:0f:27:1d:98:56:6e:1a:d7:
                    2f:ce:63:d4:7e:e1:08:5c:02:ce:00:e7:7f:78:13:
                    34:71:60:e0:56:3f:91:fa:73:dd:2e:7a:87:2c:8f:
                    3d:62:62:43:0d:89:25:3f:95:d0:ea:5a:ef:e1:c9:
                    22:80:26:22:2f:d6:ff:c9:26:2e:b0:dc:9e:1d:41:
                    fa:9c:00:45:a5:88:45:0e:aa:ef:66:e3:31:01:2b:
                    8f:69:53:71:7a:a1:fd:90:ed:86:13:87:26:b6:b3:
                    c2:a1:97:d5:af:be:78:20:c6:36:fb:b9:47:14:21:
                    8e:d3:3e:5a:82:c0:97:46:35:f9:ab:17:95:e0:18:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BF:0A:2D:EF:D3:1A:AB:B2:49:63:01:51:88:53:BB:B5:8C:22:A1
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39322e302f32342d3234203d3e203335393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:bd:ac:86:11:f1:72:81:10:da:68:e5:24:d2:34:83:42:f4:
         61:f0:5c:38:67:a9:68:cc:f6:5b:e9:d0:37:2e:50:55:53:9b:
         73:47:ae:da:a1:48:0e:ec:cf:4d:a3:f1:6a:f3:32:3c:77:38:
         a3:c9:64:b4:c5:36:84:3d:63:50:ff:1b:5d:49:34:f0:4d:9f:
         b9:53:b2:63:ad:da:9c:cd:19:b3:cd:77:5a:7f:6d:22:b7:73:
         ca:b7:20:59:b6:71:c9:02:1f:ac:ae:10:06:64:5d:91:86:2c:
         8c:91:08:6f:49:86:8d:7e:ea:77:9d:0a:00:a0:40:0f:99:ea:
         56:d5:5b:37:8d:8c:f3:34:9f:a3:aa:d5:cf:9f:63:6d:59:b5:
         85:c7:cd:d0:94:9d:e0:39:82:e9:20:2c:91:69:ad:23:6a:5b:
         2e:ef:fc:4b:15:3a:0f:8c:a9:5f:49:28:52:db:09:26:36:c8:
         22:c9:8b:a0:c0:04:34:ab:19:c2:65:ed:f9:b4:a4:4f:9c:c7:
         aa:6e:e5:5b:70:c8:71:11:2a:8d:58:08:06:be:64:2d:22:af:
         e0:72:ce:7d:bd:bd:1a:c5:e3:33:28:6d:77:92:cf:cc:53:c9:
         92:10:9e:cf:1d:9b:64:ce:a2:bc:62:d9:86:25:b2:1a:68:ad:
         81:80:b9:e2
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 6 10:03:21 2023 by rpki-client on console-fra.rpki-client.org