Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3139332e3136332e3132372e302f32342d3234203d3e20323132323338.roa
File:                     3139332e3136332e3132372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          9unbQXAqlpMBua9u+j4uynRhphS60YbcaJZNWGC+r9s=
Subject key identifier:   9F:EB:1C:6E:0E:17:50:1E:7D:42:02:1A:C9:7C:17:53:1A:19:32:6B
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       5BDBA57AB8D72953CC0403120B4E414BCDDF77DB
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3139332e3136332e3132372e302f32342d3234203d3e20323132323338.roa
Signing time:             Thu 22 Jun 2023 18:25:59 +0000
ROA not before:           Thu 22 Jun 2023 18:20:59 +0000
ROA not after:            Thu 20 Jun 2024 18:25:59 +0000
asID:                     212238
IP address blocks:        193.163.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:db:a5:7a:b8:d7:29:53:cc:04:03:12:0b:4e:41:4b:cd:df:77:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Jun 22 18:20:59 2023 GMT
            Not After : Jun 20 18:25:59 2024 GMT
        Subject: CN=9FEB1C6E0E17501E7D42021AC97C17531A19326B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:a3:88:8e:54:67:a4:96:75:d0:a8:99:95:
                    28:e8:61:f0:48:15:7b:5a:13:c8:6d:e7:cd:0a:21:
                    1d:b3:25:65:e6:1b:d7:6a:d9:a6:53:1d:8a:7e:84:
                    ff:7f:f1:54:22:7f:21:6a:a3:d7:75:c2:8a:5b:49:
                    92:4d:f1:5a:45:f4:63:ec:aa:78:e0:01:21:e1:bc:
                    9c:b9:61:c1:99:05:6a:fc:54:9d:20:06:63:28:b6:
                    fe:b6:2e:57:3f:e4:52:40:84:a8:12:aa:b9:af:02:
                    7f:89:9d:b9:4b:e2:9e:8c:42:94:b3:e7:95:ae:af:
                    b0:63:65:55:b7:da:c3:d8:7b:45:82:d4:49:30:eb:
                    9d:be:25:87:36:ef:91:ff:73:cb:6c:2a:49:74:46:
                    df:7f:5e:e0:16:b5:3f:20:6f:ee:9d:01:a1:3d:ef:
                    c0:9f:33:01:c9:b2:5a:a9:08:2d:d3:cb:be:89:e3:
                    96:4d:27:fc:a5:9c:71:69:17:05:5f:8f:33:7b:cf:
                    de:d7:9a:ca:db:00:f1:cc:dd:dd:e1:ae:cc:d4:db:
                    98:02:c0:18:0a:d0:b0:c2:45:61:b9:b2:c9:c0:17:
                    4f:83:aa:1d:f7:47:54:ab:b3:c2:aa:02:b2:03:9a:
                    96:72:fd:1e:39:9a:22:8f:7d:18:6a:f8:8d:f8:c7:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EB:1C:6E:0E:17:50:1E:7D:42:02:1A:C9:7C:17:53:1A:19:32:6B
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3139332e3136332e3132372e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:72:6c:a8:6c:c9:3c:9e:37:4d:fb:bb:b8:d4:f9:b9:cb:0a:
         21:a1:23:89:4e:12:ef:68:f6:15:d7:b5:02:f5:bc:1a:71:88:
         09:c9:a2:64:11:cc:73:f8:13:08:44:25:d0:36:ec:4d:b1:a2:
         73:41:14:ba:30:49:c1:f7:c2:48:78:00:76:e9:01:6d:a4:c4:
         20:d0:87:6c:d9:5f:b5:73:63:cc:a4:d3:60:a3:fd:28:25:c6:
         96:83:74:e6:ab:8b:9f:e4:1c:f6:2f:1e:af:0f:a8:42:63:17:
         bb:14:e5:3c:40:49:fa:be:79:9f:bf:2d:7f:4d:0d:7d:f5:af:
         48:91:4a:d0:d3:cc:40:21:c2:06:80:ef:83:2c:80:e3:e3:86:
         18:94:b6:be:d0:4c:13:5b:2b:c4:bd:aa:0e:d9:0a:c6:7d:50:
         9f:e0:a6:53:d7:69:fd:a5:2b:d4:a2:61:2c:7a:fc:06:20:2f:
         bc:05:31:47:a2:54:e8:4a:a6:f3:21:e3:a2:83:c6:e3:f7:87:
         e1:66:e2:52:b2:ee:79:c4:b1:f2:31:eb:4f:6e:de:a2:34:b6:
         fd:63:30:6b:29:37:2e:7e:60:1f:33:22:91:35:4f:4f:62:3f:
         72:21:6e:de:6c:e9:e9:35:e0:87:6b:e2:93:eb:e7:6f:38:32:
         a5:ef:cc:7a
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 27 00:28:45 2023 by rpki-client on console-fra.rpki-client.org