Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136332e302f32342d3234203d3e203631333137.roa
File:                     3138352e322e3136332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          EEmvS6r+ADT0scYxa9fa29ok/5VJNoyBsAEz09kYYwk=
Subject key identifier:   63:DB:67:4E:B8:67:B3:41:02:39:75:62:C0:68:1A:1C:EE:6F:78:60
Certificate issuer:       /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial:       418C06EB358A25534A26BD93667BD702472906F3
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136332e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 21 Jun 2023 08:10:56 +0000
ROA not before:           Wed 21 Jun 2023 08:05:56 +0000
ROA not after:            Wed 19 Jun 2024 08:10:56 +0000
asID:                     61317
IP address blocks:        185.2.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 28 Jan 2024 10:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8c:06:eb:35:8a:25:53:4a:26:bd:93:66:7b:d7:02:47:29:06:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
        Validity
            Not Before: Jun 21 08:05:56 2023 GMT
            Not After : Jun 19 08:10:56 2024 GMT
        Subject: CN=63DB674EB867B34102397562C0681A1CEE6F7860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b5:72:49:d1:94:09:08:40:b5:e0:8a:3b:0e:
                    f7:ef:46:66:33:3c:4b:f3:54:53:d0:23:70:f2:a7:
                    b1:3c:0a:74:91:6e:eb:5a:77:38:cb:3f:f1:9a:d2:
                    fb:a5:6a:c6:fc:08:64:61:89:70:79:08:da:6d:a3:
                    fb:b8:13:23:7a:05:af:b2:60:82:d9:d7:f5:18:a9:
                    28:33:82:9a:3f:f8:68:80:11:ef:e9:e2:a2:0f:59:
                    b6:33:0e:cb:c2:bb:b9:52:1b:18:08:4d:4b:d4:91:
                    c2:7f:94:1c:eb:83:6b:6a:86:17:fb:c1:20:5e:71:
                    68:2e:22:b6:c5:29:cb:83:08:6a:21:ec:da:a6:f0:
                    39:e0:ca:60:fd:65:53:03:bc:63:61:f0:75:04:e8:
                    5f:f1:66:91:3b:d4:86:cd:81:31:a3:72:84:9d:8e:
                    e5:9a:45:53:72:a7:87:c3:de:9b:93:33:05:84:5a:
                    12:12:05:6c:c5:55:59:32:1b:8e:0f:25:7e:ae:43:
                    0f:f6:79:68:3e:5e:5f:f7:37:ee:59:99:20:3e:0d:
                    39:71:69:7b:17:c7:85:09:36:8e:ff:24:c8:da:69:
                    f7:ff:69:03:83:c8:e9:d7:a6:2e:3c:15:55:81:76:
                    b1:18:a7:fd:a2:d8:1e:e0:c2:83:ab:bb:eb:3d:82:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DB:67:4E:B8:67:B3:41:02:39:75:62:C0:68:1A:1C:EE:6F:78:60
            X509v3 Authority Key Identifier:
                keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.2.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:05:bd:72:1e:d9:2b:b7:d1:64:d1:cc:eb:ee:93:ef:e2:25:
         9e:30:0c:a0:96:f9:e7:39:07:7b:42:5a:62:b0:fb:0b:21:b6:
         b9:4d:10:75:48:90:68:99:81:94:8e:cc:25:65:18:71:13:51:
         4c:20:49:a0:b0:fc:05:24:53:64:86:ef:18:12:7e:a7:cf:20:
         c0:af:1c:fe:b1:07:dc:2a:70:50:b1:f7:6b:0d:ae:cb:0d:c3:
         a7:46:6d:27:6c:bb:da:e8:55:f4:d3:bc:ff:99:12:83:2f:0d:
         29:21:a3:91:33:eb:b1:52:c1:b4:4c:02:8f:4a:e1:06:c8:82:
         ef:02:84:e3:b2:e5:7d:cc:c7:c9:19:eb:55:38:d2:a3:b0:88:
         b4:41:24:bf:fa:7d:e8:dc:d8:6e:3b:9d:67:01:3e:cb:d8:68:
         78:eb:c1:84:4b:ae:2c:d5:d6:20:e7:33:53:20:2e:65:8b:15:
         69:ff:b7:36:fd:f0:8e:09:c0:61:45:96:ee:ec:49:6e:fd:53:
         9a:4b:f1:b1:f5:06:88:8f:e6:d4:1a:d3:99:45:d4:db:02:c6:
         d6:6a:72:64:57:c1:d8:20:26:41:4e:59:55:76:32:58:26:f7:
         45:97:da:a2:de:62:d0:98:fd:34:44:59:d2:0c:48:83:82:c8:
         35:aa:62:2e
-----BEGIN CERTIFICATE-----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Generated at Sun Jan 28 11:31:29 2024 by rpki-client on console-ams.rpki-client.org