Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130332e302f32342d3234203d3e20323131393735.roa
File:                     3139332e3234362e3130332e302f32342d3234203d3e20323131393735.roa (raw, json)
Hash identifier:          gkz6aYfj5CQiltPrat4bDZtTI4pIStu8TunlCdMAoBU=
Subject key identifier:   F9:A7:52:AD:49:F6:F2:74:67:D9:B5:07:2E:F4:9F:82:28:94:56:96
Certificate issuer:       /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial:       272E49494BE46D508F6E39C3FD9AE296CE49BCF0
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130332e302f32342d3234203d3e20323131393735.roa
Signing time:             Thu 09 Feb 2023 08:49:02 +0000
ROA not before:           Thu 09 Feb 2023 08:44:02 +0000
ROA not after:            Thu 08 Feb 2024 08:49:02 +0000
asID:                     211975
IP address blocks:        193.246.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2e:49:49:4b:e4:6d:50:8f:6e:39:c3:fd:9a:e2:96:ce:49:bc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
        Validity
            Not Before: Feb  9 08:44:02 2023 GMT
            Not After : Feb  8 08:49:02 2024 GMT
        Subject: CN=F9A752AD49F6F27467D9B5072EF49F8228945696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:c2:8d:40:64:fe:85:c3:f2:77:0c:4f:53:
                    7f:13:68:8c:14:da:24:23:6a:74:7e:46:aa:0a:7d:
                    04:b3:b1:f6:ca:3d:6c:eb:8b:f3:23:1e:e5:43:c0:
                    bb:03:8b:02:ba:cf:29:ca:8a:e5:54:8b:5e:e3:08:
                    df:03:2f:ca:20:93:48:c5:f2:65:ea:ee:39:86:77:
                    3d:e4:fe:aa:54:d2:af:74:36:bb:41:53:7d:62:6a:
                    98:e6:ec:ea:88:aa:b0:1c:81:c1:18:d9:7e:7e:4b:
                    1d:3b:d7:72:44:2a:2f:8e:52:55:31:6f:37:56:c1:
                    a1:c0:4b:53:9c:87:3f:e6:c3:9e:e4:d4:ca:d4:19:
                    ae:cb:eb:ab:57:a2:44:cb:17:f4:23:0f:1f:33:f0:
                    f2:d6:18:e9:89:87:11:2f:a7:c6:23:81:ed:cb:01:
                    59:75:99:a7:88:f4:b9:66:f5:4b:5c:db:4c:21:88:
                    f2:33:97:24:cd:5a:53:2f:c8:63:e5:7f:77:da:66:
                    1e:d5:ac:d5:ac:6d:d2:8e:88:b4:34:6e:09:c3:31:
                    fc:72:36:61:1e:7d:7d:c9:91:7c:4b:30:54:cb:76:
                    4f:b7:7c:51:fd:59:3b:8d:e9:ec:b3:34:44:00:ab:
                    b4:94:e9:33:50:da:30:5d:30:e9:82:cd:5d:16:32:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A7:52:AD:49:F6:F2:74:67:D9:B5:07:2E:F4:9F:82:28:94:56:96
            X509v3 Authority Key Identifier:
                keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130332e302f32342d3234203d3e20323131393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:0c:30:f6:97:57:55:24:32:a8:8b:39:a4:0c:d2:35:b1:d6:
         4b:d2:b9:4a:5c:9f:cc:68:22:21:76:63:7d:c0:00:fc:55:65:
         74:d0:2d:7e:1b:91:d7:d3:0c:6b:33:0f:7a:69:f0:76:13:84:
         23:a9:c1:8d:0a:ca:93:64:ae:d9:c8:6c:df:76:67:46:47:a3:
         8f:40:87:31:1a:d2:1e:be:ef:22:66:0b:aa:8b:0e:d9:09:c4:
         94:11:35:f0:1e:cf:a6:c0:c3:34:8a:b7:8c:b7:fb:3e:3f:8f:
         a9:aa:f8:90:51:bc:2a:45:9d:a6:57:20:ae:67:43:ef:2a:e2:
         c2:7f:47:28:19:7d:63:5a:6c:fb:4e:be:3c:a2:16:e3:ca:f8:
         38:19:09:79:80:c8:80:20:d4:4e:1e:ba:2b:0b:6c:18:fb:1a:
         22:f3:ad:ae:d8:a6:cb:01:64:b7:93:d9:fe:ec:80:f3:9a:d8:
         22:f8:ae:89:f1:9e:61:e8:39:15:72:d3:ea:af:2f:e7:e2:3a:
         87:56:13:ab:87:18:c0:03:c6:73:0a:da:d8:c6:32:e9:3b:43:
         ac:f5:23:e8:1b:97:59:b3:6d:d9:e2:ff:d4:b5:83:ff:23:e1:
         49:1c:6d:5c:78:a7:ea:d5:c0:db:b7:49:50:12:04:26:bb:99:
         78:4a:60:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org