Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32332d3234203d3e20383334.roa
File:                     3130392e3131302e3137362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          7mRdSm0aQSfnZ8m40+zWkWHEwPZBaW2hrQO8IQZ5NC0=
Subject key identifier:   DA:8B:EB:4B:64:1F:1A:79:8A:33:C3:ED:D3:C1:7C:D0:F0:76:95:99
Certificate issuer:       /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial:       03F30373CC00F51E7B0F99BF59CE8C2EB79C82FB
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32332d3234203d3e20383334.roa
Signing time:             Thu 08 Feb 2024 00:01:48 +0000
ROA not before:           Wed 07 Feb 2024 23:56:48 +0000
ROA not after:            Thu 06 Feb 2025 00:01:48 +0000
asID:                     834
IP address blocks:        109.110.176.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 14 Feb 2024 10:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f3:03:73:cc:00:f5:1e:7b:0f:99:bf:59:ce:8c:2e:b7:9c:82:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
        Validity
            Not Before: Feb  7 23:56:48 2024 GMT
            Not After : Feb  6 00:01:48 2025 GMT
        Subject: CN=DA8BEB4B641F1A798A33C3EDD3C17CD0F0769599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:28:2b:5a:b4:b3:c2:8a:0e:5a:f8:d9:45:
                    f8:c0:50:1c:2c:72:7b:41:31:38:56:db:80:5e:e7:
                    f1:7e:70:a6:d2:cd:96:07:58:83:a4:35:27:c2:ba:
                    24:db:cb:88:a4:cb:4e:bf:50:a6:e3:10:ff:a4:c9:
                    e1:87:8d:53:5d:f3:38:ad:f8:f3:2f:f1:c3:2e:0f:
                    fd:9e:89:3e:46:f1:f8:b0:5f:3d:00:9c:d2:7a:88:
                    31:a2:6e:f6:16:fa:63:70:b4:4a:49:ae:6d:8a:f4:
                    6d:c8:cb:ac:39:08:15:ef:2a:fa:40:b4:f9:59:62:
                    2f:a4:55:00:78:cd:fa:43:90:63:f6:0f:95:b2:84:
                    c0:13:df:c9:af:b0:63:61:6e:29:7a:ec:45:a8:6d:
                    1c:65:33:3f:51:20:1e:b3:5f:08:5e:1a:e4:be:fe:
                    b9:bc:f3:68:ae:fb:00:06:7a:df:64:14:39:5f:51:
                    b3:59:f7:d4:00:11:6e:c0:48:4c:4b:f6:01:a6:4d:
                    83:d7:6e:85:de:3f:fc:a2:d8:b3:b3:b7:7e:48:f5:
                    c5:db:37:44:e9:63:66:a7:10:2e:e4:4b:3c:0d:37:
                    84:4e:a3:88:5a:fe:e4:4b:38:ce:84:08:19:67:74:
                    51:49:8a:b1:10:9d:05:00:ea:d6:95:40:2d:62:cb:
                    4e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8B:EB:4B:64:1F:1A:79:8A:33:C3:ED:D3:C1:7C:D0:F0:76:95:99
            X509v3 Authority Key Identifier:
                keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.110.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:c1:7b:08:d0:c5:94:8a:83:df:fe:8f:83:e7:d9:c2:bb:
         f9:dc:f6:9f:a0:52:ef:3d:da:6a:4a:8f:2f:c5:1c:7f:7e:0e:
         1f:48:03:b5:cf:f1:a4:17:fb:88:46:4b:55:e6:13:b0:37:4d:
         65:d8:82:a0:2b:8e:0f:86:71:87:4b:3d:15:a9:52:fc:71:54:
         50:dd:19:e0:dd:18:98:bc:41:61:e5:d9:28:eb:67:11:1f:3c:
         2b:83:b4:e2:64:23:93:0b:ea:94:2c:a8:81:e9:9d:1e:36:92:
         ed:1b:bf:c3:ed:e6:e0:d9:47:26:fe:ab:73:f1:37:fa:fd:e8:
         53:72:4d:88:9c:57:32:53:f2:91:8f:24:6d:b8:96:04:69:d2:
         d2:db:74:85:cd:b4:8c:0a:da:84:9f:7a:2f:89:2a:87:5d:d4:
         ee:cb:76:f0:97:42:ff:3e:70:b7:10:0f:b5:43:ab:b4:ae:09:
         24:a8:86:87:80:69:1f:ed:ec:da:82:bd:45:67:b4:01:ac:5a:
         2c:c4:47:85:a8:37:a3:a7:bc:2b:84:cb:9e:73:d3:9e:71:05:
         32:8d:90:9e:1f:dc:41:46:5a:aa:2d:c5:ac:d7:63:e5:4f:13:
         44:cb:d3:c6:6a:f4:fd:23:7f:dc:ad:51:54:81:c1:e0:87:d1:
         4d:8e:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 15:12:38 2024 by rpki-client on console-fra.rpki-client.org