Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS56655.roa
File:                     AS56655.roa (raw, json)
Hash identifier:          xRtRqI0opRiwvQKGDBn5IjU8KI4Ffg5uz/bjI5imPhE=
Subject key identifier:   91:9B:5B:58:C6:49:88:13:86:C7:C9:7D:23:66:5F:BB:D1:2A:CD:C2
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       3C80AD062BB9C286CBAC02562BA813E300AD1AFB
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS56655.roa
Signing time:             Thu 06 Jun 2024 13:24:29 +0000
ROA not before:           Thu 06 Jun 2024 13:19:29 +0000
ROA not after:            Thu 05 Jun 2025 13:24:29 +0000
asID:                     56655
IP address blocks:        141.11.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 06 Oct 2024 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:80:ad:06:2b:b9:c2:86:cb:ac:02:56:2b:a8:13:e3:00:ad:1a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Jun  6 13:19:29 2024 GMT
            Not After : Jun  5 13:24:29 2025 GMT
        Subject: CN=919B5B58C649881386C7C97D23665FBBD12ACDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:1d:bc:8c:2f:a4:b8:c9:2f:66:bb:22:18:
                    9a:df:a9:e1:55:0f:5b:d6:ea:64:25:df:f2:06:b3:
                    1c:c6:59:6b:dc:48:10:ce:6d:c0:b1:33:0b:16:af:
                    ed:a4:d1:34:3e:45:45:aa:c0:c4:d2:2a:37:3e:6d:
                    e5:73:1c:b5:b3:99:9c:ca:49:09:a4:a7:43:a2:4d:
                    0f:de:59:d1:ea:bc:ac:60:7c:62:21:a3:46:fe:a4:
                    ce:23:26:8c:e7:de:37:a6:db:ff:63:bf:a9:88:ff:
                    b7:ff:22:d2:b9:2c:bf:cd:b3:aa:fe:e8:da:79:d8:
                    cc:0a:a8:b6:82:b3:e1:9b:b7:33:37:1a:cf:cf:fc:
                    c7:c7:4c:ba:05:4e:40:22:73:e9:90:7b:fd:dc:87:
                    38:fb:60:d9:77:1a:92:7e:25:3a:f3:a2:bd:3c:fb:
                    60:45:c1:13:f0:66:20:58:7c:56:44:85:d1:f6:36:
                    d0:1e:d6:82:91:ca:1b:62:57:dc:c8:65:c7:78:79:
                    e0:6c:16:71:00:10:fd:2d:72:a0:c2:bd:2c:18:00:
                    c0:96:b9:87:34:67:39:ef:8d:8a:69:18:2f:14:e7:
                    f8:04:28:db:fe:b9:55:85:ca:dc:cd:8b:3a:50:e9:
                    e5:6d:a3:49:14:e9:45:59:c1:ad:5c:66:48:69:ad:
                    7b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9B:5B:58:C6:49:88:13:86:C7:C9:7D:23:66:5F:BB:D1:2A:CD:C2
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS56655.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:4d:ad:b1:58:4b:6b:0d:2e:0d:f2:70:eb:cb:25:68:bb:cf:
         bb:98:7e:ba:4e:8a:c9:4c:6f:2e:39:d5:c6:94:df:99:43:81:
         c4:67:7a:11:b4:f9:a4:79:1a:fd:48:25:af:41:18:dc:a3:59:
         e1:8d:8e:1c:83:e8:75:15:28:82:62:ad:08:81:1d:d8:ab:11:
         be:a5:d9:92:b4:1c:77:2b:f7:60:35:52:94:cd:b9:a8:ac:7a:
         ff:f3:3c:e9:6d:7a:af:4e:2f:b5:29:da:75:ce:e6:b6:1c:da:
         46:e1:11:a9:ec:6c:20:83:54:ca:96:2b:f6:bd:0d:2d:26:aa:
         43:2d:79:80:50:1c:c6:b9:d8:b3:42:a2:9b:fc:f0:be:fc:0e:
         d2:8c:22:9e:68:94:62:a4:e0:74:3b:92:b7:38:36:7b:9e:80:
         3d:df:d5:d6:a6:a5:d3:86:c9:f7:d2:9f:47:c9:d2:59:ea:29:
         a0:89:b1:62:20:8d:12:c9:e6:ab:e5:16:d6:f6:ca:85:8f:9b:
         e9:91:1b:7a:ba:ca:ba:48:06:03:ef:9b:3d:e0:fe:b0:69:05:
         35:32:1f:7a:18:c8:82:07:23:66:3d:f0:a8:6c:86:36:09:7b:
         1a:f0:16:ba:1a:de:58:ec:0a:19:a1:1a:db:f8:d4:e5:b4:65:
         bd:d2:db:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 03:35:37 2024 by rpki-client on console-ams.rpki-client.org