Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32303a3a2f34382d3438203d3e203631333137.roa
File:                     326131333a393530303a32303a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          VfTsR4pYDZkUekClzBJsrnL9QpjQ8ulmCRnVJ6n+tkk=
Subject key identifier:   A7:56:0A:41:FB:A1:48:EB:8C:B4:A1:64:B6:C7:86:E6:3C:66:45:E2
Certificate issuer:       /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial:       2C837BB4A3E8ABF374A1BD9879DE23CC4C10AADF
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32303a3a2f34382d3438203d3e203631333137.roa
Signing time:             Tue 30 Apr 2024 13:21:02 +0000
ROA not before:           Tue 30 Apr 2024 13:16:02 +0000
ROA not after:            Tue 29 Apr 2025 13:21:02 +0000
asID:                     61317
IP address blocks:        2a13:9500:20::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 15 May 2024 10:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:83:7b:b4:a3:e8:ab:f3:74:a1:bd:98:79:de:23:cc:4c:10:aa:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
        Validity
            Not Before: Apr 30 13:16:02 2024 GMT
            Not After : Apr 29 13:21:02 2025 GMT
        Subject: CN=A7560A41FBA148EB8CB4A164B6C786E63C6645E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:43:81:ca:e5:4b:f3:e6:6c:cd:bd:b3:ab:
                    5e:71:33:37:cf:66:89:23:90:8e:db:01:68:d8:1a:
                    78:13:df:45:6c:fa:5e:76:e9:a4:ee:ee:07:f1:84:
                    4f:38:d3:6b:6f:ec:d4:6a:85:1e:7c:f2:08:3d:5d:
                    c6:32:7b:05:dd:1d:1d:22:01:12:0d:29:ac:ec:0f:
                    ac:99:b9:67:6d:1c:eb:c3:7f:39:ad:de:40:59:cf:
                    01:fc:72:2b:5c:5b:26:42:4e:20:08:9d:3e:55:80:
                    e6:09:1e:c1:3d:88:e2:36:87:2d:b9:e5:f4:b8:a0:
                    be:a7:22:ef:26:96:82:28:bf:b7:e9:d2:ad:48:53:
                    50:f0:ae:b2:b7:aa:85:80:01:0d:12:2b:23:da:84:
                    e5:3c:7f:5b:90:df:3a:94:11:55:da:71:17:a3:ea:
                    a4:91:ef:7a:52:58:22:87:27:1b:1c:8a:ef:da:eb:
                    c8:bc:b9:7f:ee:c1:d8:d0:70:aa:bf:85:ec:4c:c1:
                    03:d0:a6:01:d8:12:cc:21:56:f0:0c:b9:8c:a3:ce:
                    3f:c5:04:cb:b5:00:cd:b1:63:17:60:76:71:ab:1c:
                    64:ab:54:b2:17:2f:83:90:54:89:9e:3d:bd:d5:1e:
                    ae:72:54:3e:1e:2b:99:a0:c8:1a:4c:76:e6:8a:42:
                    80:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:56:0A:41:FB:A1:48:EB:8C:B4:A1:64:B6:C7:86:E6:3C:66:45:E2
            X509v3 Authority Key Identifier:
                keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32303a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:02:e4:fb:0a:44:3c:3c:32:87:cd:39:12:b5:80:01:70:
         a3:2f:ca:ff:0d:15:41:80:0d:a2:8e:f5:ee:5e:30:f8:fe:e6:
         d1:80:19:28:36:8b:cd:4b:01:1a:15:3f:dd:fe:84:62:2b:64:
         90:e1:82:cd:5a:e7:cb:28:c4:69:9e:c8:7f:99:13:8e:76:ef:
         e6:b0:00:83:65:c3:ac:cf:e2:28:ba:8d:4d:c8:8a:41:d7:62:
         16:d2:01:54:d7:61:3b:27:25:e4:93:fd:7c:53:c7:7b:44:75:
         83:5b:0f:d7:53:f7:f6:05:a0:68:e6:58:68:a7:c6:c3:d9:24:
         12:65:e3:de:05:e0:07:33:b1:18:5d:c3:32:69:bd:65:97:35:
         de:4a:c7:fa:cc:59:c0:e5:d8:9a:0b:76:5a:0d:1c:02:62:ba:
         82:cc:ea:cb:a5:dd:46:d5:2e:b3:2c:3a:cd:e0:db:32:ee:07:
         3a:fc:4a:12:f0:90:4b:72:ff:8e:17:d6:52:6a:8a:58:74:d9:
         d5:17:fb:12:bb:89:e6:20:91:ed:f0:7f:44:c7:33:2b:03:2d:
         01:05:90:c9:da:f2:59:0f:95:ed:40:63:bd:6f:ec:64:be:24:
         bf:e2:5e:99:e9:5f:98:52:65:73:16:2a:f3:92:f5:7a:72:db:
         67:8b:3d:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 15 15:01:22 2024 by rpki-client on console-ams.rpki-client.org