Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20313938353834.roa
File:                     3139332e3234362e3130322e302f32342d3234203d3e20313938353834.roa (raw, json)
Hash identifier:          RJawBnTzyMrP1YVF0LNoWTN+2pnaLGsbEdlOv06raEw=
Subject key identifier:   CB:54:4C:8B:7E:91:EE:70:29:BA:30:C5:36:94:ED:60:5B:8A:F1:56
Certificate issuer:       /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial:       4BB82F932BCEE2525198FFEE876FF939D5D8F5C6
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20313938353834.roa
Signing time:             Sun 06 Oct 2024 15:51:07 +0000
ROA not before:           Sun 06 Oct 2024 15:46:07 +0000
ROA not after:            Sun 05 Oct 2025 15:51:07 +0000
asID:                     198584
IP address blocks:        193.246.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b8:2f:93:2b:ce:e2:52:51:98:ff:ee:87:6f:f9:39:d5:d8:f5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
        Validity
            Not Before: Oct  6 15:46:07 2024 GMT
            Not After : Oct  5 15:51:07 2025 GMT
        Subject: CN=CB544C8B7E91EE7029BA30C53694ED605B8AF156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:53:90:58:c3:f0:84:f0:72:15:fa:8c:b0:
                    6a:55:51:8b:b0:b2:54:cd:b1:96:d2:89:99:86:df:
                    cf:56:85:dc:46:e3:dc:f9:4e:16:d9:80:02:f8:50:
                    86:8f:34:7a:9d:b4:66:80:1a:f8:77:8a:ed:37:0f:
                    01:cd:c7:85:ce:8e:99:98:4b:15:a2:3d:7e:2b:a1:
                    12:c0:4d:4f:6e:e0:b8:fa:4e:d7:82:4a:b8:63:29:
                    54:1f:9b:1b:a1:fd:9c:74:0f:ec:1a:62:b3:3d:a0:
                    dd:1a:bb:0a:60:ef:ec:08:2f:6b:73:df:60:f9:b4:
                    1d:1d:e5:d8:47:e8:c8:7b:ae:96:83:16:53:60:3c:
                    21:d7:94:9b:f1:ca:e9:7d:0c:80:24:e0:0d:a6:0f:
                    14:ee:3e:cc:b4:19:e6:19:e1:47:93:50:38:a7:36:
                    90:bd:81:64:f4:b5:e8:d8:81:ab:0d:1e:96:c3:6e:
                    ad:6e:6c:45:2f:78:d2:9a:e6:d6:ed:5c:bc:bd:63:
                    d3:18:ff:f4:56:54:aa:14:e8:5f:7f:ce:21:3b:a5:
                    99:ca:2e:c9:f8:ed:fe:bd:1b:f5:1f:79:f5:25:93:
                    c9:60:a2:33:46:2f:77:42:fe:27:25:e7:2c:68:73:
                    50:56:eb:cb:db:0b:1f:34:05:15:69:04:fe:a7:d3:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:54:4C:8B:7E:91:EE:70:29:BA:30:C5:36:94:ED:60:5B:8A:F1:56
            X509v3 Authority Key Identifier:
                keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20313938353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:de:0e:f6:37:f6:78:88:ed:50:e2:d7:d3:8f:77:12:63:ed:
         2b:ce:e5:eb:61:77:bb:82:da:d3:7a:0e:4a:90:0f:2f:63:92:
         6c:2e:ab:b2:75:d4:ae:46:4f:b2:c2:ef:1a:c9:22:a6:bb:34:
         3f:4a:64:c0:42:f4:64:28:3d:15:1d:c7:08:b5:3f:d1:a3:01:
         bc:41:17:86:eb:d2:12:5b:67:b3:bb:9b:e0:35:3d:e6:04:ed:
         41:1b:08:55:04:8c:83:88:0f:0e:03:44:f8:17:bb:1a:1c:be:
         16:99:88:d3:47:80:0a:45:14:e2:b2:92:9f:26:b8:a6:75:af:
         74:41:4b:44:6b:c0:8d:7c:a9:71:5b:60:ca:ca:d6:41:29:1b:
         2c:13:7c:4c:e3:fb:a1:1d:25:5a:fd:23:72:37:bf:ba:f7:b2:
         f6:32:27:e8:2c:3b:8c:f6:4b:d5:53:2c:ac:1b:93:05:12:4e:
         41:59:ef:a2:1d:00:e7:f7:55:8d:4d:2d:c9:85:ab:ab:58:1f:
         e7:7f:60:37:37:16:4f:4c:43:6a:2b:77:49:bd:b2:86:6d:e7:
         cd:77:aa:bd:e8:1b:1d:0e:2d:08:f5:93:d6:47:9e:43:62:99:
         26:9a:72:59:22:e4:fa:c0:20:08:5a:4b:c4:e7:79:8a:d0:9f:
         a1:bb:65:19
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 6 03:19:12 2024 by rpki-client on console-ams.rpki-client.org