Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e203239383032.roa
File:                     3130392e3131302e3138382e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          eP8xud3vAXP19XvwgdkvqPaooeQ4WYaRJ7h7fVQ/Y9E=
Subject key identifier:   C2:BC:25:6E:24:8A:41:D5:B0:19:08:80:DE:5E:BF:A1:DF:DE:B6:54
Certificate issuer:       /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial:       2C655EC8EBC1A5ED31439395C2C20CAB1DD80681
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e203239383032.roa
Signing time:             Wed 03 Apr 2024 17:16:14 +0000
ROA not before:           Wed 03 Apr 2024 17:11:14 +0000
ROA not after:            Wed 02 Apr 2025 17:16:14 +0000
asID:                     29802
IP address blocks:        109.110.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 00:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:65:5e:c8:eb:c1:a5:ed:31:43:93:95:c2:c2:0c:ab:1d:d8:06:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
        Validity
            Not Before: Apr  3 17:11:14 2024 GMT
            Not After : Apr  2 17:16:14 2025 GMT
        Subject: CN=C2BC256E248A41D5B0190880DE5EBFA1DFDEB654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:7d:8d:b1:d9:c8:00:eb:aa:53:a9:dd:82:
                    1a:ef:74:ed:04:5c:8e:8a:59:cd:86:83:f6:35:58:
                    5b:1d:71:dc:b8:76:e9:1d:00:02:fa:c2:a2:7e:06:
                    63:f0:ed:db:f3:60:38:8e:57:05:b7:0c:2a:48:02:
                    d6:07:27:1a:52:6d:69:33:5a:d2:ef:5c:7b:2d:68:
                    c6:8d:a2:2b:35:0b:f6:a9:f3:38:3c:01:27:27:97:
                    d0:19:8b:17:b3:77:5b:24:4d:f1:f5:1e:cc:a4:dc:
                    47:70:c0:c2:ab:c4:78:7f:cc:11:47:f8:4e:d1:7d:
                    5b:d4:4e:99:29:a1:45:c7:c4:cb:a6:5e:ed:21:2d:
                    fe:c5:7e:82:7a:1d:2e:68:2d:13:8b:48:44:54:85:
                    78:90:a6:9b:cc:bc:64:d8:92:d7:08:c4:1f:fd:82:
                    15:f4:58:2f:f3:a4:d4:07:20:23:14:f0:30:d5:2c:
                    3a:68:30:34:16:3d:d9:53:4e:ee:de:29:bc:10:27:
                    56:7d:7a:91:c7:dc:03:d7:ea:b9:89:f5:9b:73:83:
                    09:9c:84:48:81:9b:26:f3:53:76:b3:d0:e8:3a:dc:
                    91:db:52:2a:45:84:e6:7e:0b:b1:65:56:12:0b:69:
                    76:f1:89:51:f3:bc:ad:fd:27:a7:d6:4b:7d:d7:81:
                    6b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BC:25:6E:24:8A:41:D5:B0:19:08:80:DE:5E:BF:A1:DF:DE:B6:54
            X509v3 Authority Key Identifier:
                keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.110.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:b5:b3:99:b8:8c:6e:ec:be:75:a6:8d:0b:59:bf:c9:ba:3f:
         41:70:b2:1c:ef:83:78:47:06:6d:2c:c0:64:fc:e0:6a:90:97:
         2a:d1:a3:78:aa:e2:24:7e:fa:43:09:09:fc:d8:12:e7:37:43:
         84:90:03:c5:e2:40:b6:bf:1f:e7:5b:b8:fc:18:57:88:eb:22:
         5b:59:16:97:dc:6f:52:3a:77:63:01:89:35:24:15:d5:52:32:
         be:b0:3b:70:c7:cb:24:b0:63:3c:eb:03:d7:29:af:de:f9:73:
         e3:a6:4c:41:b4:f8:2a:f8:56:16:8a:cc:70:eb:d4:93:5c:90:
         02:70:84:15:fa:d6:20:1b:b6:f3:ac:61:1d:b4:50:c4:54:2c:
         d7:fc:43:ee:90:bd:88:66:ae:84:5a:77:b1:a2:55:45:bf:9a:
         fd:94:95:63:3e:81:8a:e4:cc:f0:e0:bc:10:90:11:1d:6d:8c:
         ff:94:46:7d:e1:20:98:bb:c7:85:87:3e:77:76:93:70:cb:1a:
         e3:dc:09:e0:63:e9:ee:d4:db:a6:46:62:dc:0e:bc:8b:97:80:
         35:a7:19:8e:cc:35:5e:e8:5b:e3:44:41:ee:32:16:c4:15:d6:
         cb:f8:3f:76:00:7a:51:2c:08:d2:bb:6e:06:92:82:de:0f:8a:
         a8:1c:1e:97
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIULGVeyOvBpe0xQ5OVwsIMqx3YBoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNDA0MDMxNzExMTRaFw0yNTA0MDIxNzE2MTRaMDMxMTAvBgNV
BAMTKEMyQkMyNTZFMjQ4QTQxRDVCMDE5MDg4MERFNUVCRkExREZERUI2NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0j32NsdnIAOuqU6ndghrvdO0E
XI6KWc2Gg/Y1WFsdcdy4dukdAAL6wqJ+BmPw7dvzYDiOVwW3DCpIAtYHJxpSbWkz
WtLvXHstaMaNois1C/ap8zg8AScnl9AZixezd1skTfH1Hsyk3EdwwMKrxHh/zBFH
+E7RfVvUTpkpoUXHxMumXu0hLf7FfoJ6HS5oLROLSERUhXiQppvMvGTYktcIxB/9
ghX0WC/zpNQHICMU8DDVLDpoMDQWPdlTTu7eKbwQJ1Z9epHH3APX6rmJ9Ztzgwmc
hEiBmybzU3az0Og63JHbUipFhOZ+C7FlVhILaXbxiVHzvK39J6fWS33XgWspAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUwrwlbiSKQdWwGQiA3l6/od/etlQwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzkzODMwMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABtbrwwDQYJKoZIhvcNAQELBQADggEBAAK1s5m4jG7svnWmjQtZv8m6P0Fwshzv
g3hHBm0swGT84GqQlyrRo3iq4iR++kMJCfzYEuc3Q4SQA8XiQLa/H+dbuPwYV4jr
IltZFpfcb1I6d2MBiTUkFdVSMr6wO3DHyySwYzzrA9cpr975c+OmTEG0+Cr4VhaK
zHDr1JNckAJwhBX61iAbtvOsYR20UMRULNf8Q+6QvYhmroRad7GiVUW/mv2UlWM+
gYrkzPDgvBCQER1tjP+URn3hIJi7x4WHPnd2k3DLGuPcCeBj6e7U26ZGYtwOvIuX
gDWnGY7MNV7oW+NEQe4yFsQV1sv4P3YAelEsCNK7bgaSgt4PiqgcHpc=
Generated at Mon Jun 3 01:41:17 2024 by rpki-client on console-fra.rpki-client.org