Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32323a3a2f34382d3438203d3e203631333137.roa
File:                     326131333a393530303a32323a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          26gnc5HLUnsf4XbzlY5N0uYhpOrzH4/bJB9AofryQjo=
Subject key identifier:   94:A7:31:2D:80:9B:41:AD:E6:DB:C0:0E:76:40:2C:BC:3E:91:A1:34
Certificate issuer:       /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial:       17EA2C8B8ED19A4ED16E31F0FC9AD60C453F4762
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32323a3a2f34382d3438203d3e203631333137.roa
Signing time:             Tue 30 Apr 2024 13:21:09 +0000
ROA not before:           Tue 30 Apr 2024 13:16:09 +0000
ROA not after:            Tue 29 Apr 2025 13:21:09 +0000
asID:                     61317
IP address blocks:        2a13:9500:22::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 15 May 2024 10:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ea:2c:8b:8e:d1:9a:4e:d1:6e:31:f0:fc:9a:d6:0c:45:3f:47:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
        Validity
            Not Before: Apr 30 13:16:09 2024 GMT
            Not After : Apr 29 13:21:09 2025 GMT
        Subject: CN=94A7312D809B41ADE6DBC00E76402CBC3E91A134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:31:1b:d0:58:3e:fb:c0:87:5e:47:d5:3c:03:
                    9b:eb:e4:6b:13:cb:5f:43:4e:30:5c:cd:4c:81:85:
                    2f:d2:ee:0d:07:71:1b:5b:e3:62:1c:1a:a8:54:b4:
                    e1:13:db:d6:e7:f6:fd:b2:9f:d5:9d:f5:bd:fb:49:
                    2a:c3:77:0b:3a:d1:6a:c5:8b:30:c7:95:62:5d:18:
                    a8:ef:d3:57:f0:00:9b:bd:18:51:f6:ba:27:b8:64:
                    95:2b:0d:bd:62:96:87:e2:4c:84:cd:57:7d:72:9c:
                    ac:04:5e:e1:39:8e:2c:7b:60:2f:f0:0e:98:f8:23:
                    ce:c6:28:3b:f7:f6:19:2b:86:88:43:2d:db:69:7d:
                    47:16:a5:74:85:31:b0:46:f0:78:fe:10:f9:fe:c5:
                    cb:32:a2:03:91:b2:9c:d6:88:d8:f4:cf:2b:92:9b:
                    af:0e:7b:0a:71:b1:95:91:f6:2a:62:67:ce:06:ca:
                    6c:da:f9:a6:73:e7:46:10:33:56:1d:02:25:46:b5:
                    10:79:26:13:5f:ad:85:5b:b3:fa:0a:e1:e9:d1:50:
                    29:e7:0d:25:20:e7:cc:45:a2:c1:3a:04:42:66:e6:
                    4a:6f:85:75:30:89:23:66:5d:78:d8:9e:15:ec:0e:
                    a7:65:e6:67:5e:70:ab:05:32:87:59:2a:52:47:15:
                    26:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A7:31:2D:80:9B:41:AD:E6:DB:C0:0E:76:40:2C:BC:3E:91:A1:34
            X509v3 Authority Key Identifier:
                keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a32323a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:0f:1e:85:a4:16:f1:a8:66:6a:4b:3c:c8:25:9e:3c:77:87:
         4e:ac:ca:ed:a6:39:45:51:e5:d9:f4:59:3d:d4:92:9d:f5:68:
         8f:fa:4d:ec:1d:df:fb:64:be:81:75:2c:e5:38:f1:ff:4b:73:
         05:26:7f:e7:62:2b:fe:75:ce:fa:a1:70:c6:36:65:04:7d:16:
         a9:a4:9b:e9:81:ff:f5:8f:84:fd:43:4b:4b:d5:2f:93:db:ac:
         f8:bf:db:b9:bb:52:cb:13:52:6b:89:f8:a9:3c:39:a4:23:f9:
         15:7e:c1:48:32:f6:15:6a:89:09:bf:6a:72:fc:a5:51:90:59:
         6a:75:48:17:e3:c4:66:a9:e0:09:e4:dc:e3:f1:9c:a7:d2:9c:
         d8:ec:79:b5:71:f5:78:be:38:c7:2f:69:24:43:56:5b:75:7f:
         ce:0c:9d:e5:27:ed:90:b2:ef:43:a7:33:ec:1a:0c:a5:56:03:
         3e:94:93:44:51:b6:c0:79:8a:1e:6a:c2:29:d4:02:fa:0c:8e:
         a8:c6:d3:65:4f:92:e0:56:20:ed:a3:87:6d:a0:c5:c1:db:77:
         99:af:12:f9:83:53:23:df:4c:22:f4:6b:d8:61:81:34:fc:4e:
         be:ab:34:1c:46:b8:ca:fc:06:3e:f7:72:a5:15:59:5e:80:dc:
         45:d3:dc:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 15 15:01:22 2024 by rpki-client on console-ams.rpki-client.org