Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e203130373533.roa
File:                     3139332e3234362e352e302f32342d3234203d3e203130373533.roa (raw, json)
Hash identifier:          ej3EZmLppc01JPqdBYinCBfwMSVTD+7IVhdV8LpqOz4=
Subject key identifier:   EA:BE:4D:94:C2:26:B4:A1:36:C8:9C:A5:C9:8D:67:03:BB:01:A0:88
Certificate issuer:       /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial:       0315C44E9D772EE85EB3E2831D17719C2B32E966
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e203130373533.roa
Signing time:             Wed 12 Jun 2024 05:22:53 +0000
ROA not before:           Wed 12 Jun 2024 05:17:53 +0000
ROA not after:            Wed 11 Jun 2025 05:22:53 +0000
asID:                     10753
IP address blocks:        193.246.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 10:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:15:c4:4e:9d:77:2e:e8:5e:b3:e2:83:1d:17:71:9c:2b:32:e9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
        Validity
            Not Before: Jun 12 05:17:53 2024 GMT
            Not After : Jun 11 05:22:53 2025 GMT
        Subject: CN=EABE4D94C226B4A136C89CA5C98D6703BB01A088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:90:ff:2e:92:05:f5:29:18:f1:2f:f7:8d:
                    e1:f8:40:18:19:61:ae:4c:a9:85:2e:8f:ea:3c:5f:
                    d5:2a:86:7b:e3:5d:14:d6:1a:de:63:1f:cf:70:c1:
                    01:d8:df:08:44:41:3a:bc:a1:a5:86:45:c2:4d:c6:
                    46:ec:da:ac:b0:56:f1:71:da:87:d6:b4:5f:cd:2a:
                    a1:71:34:39:b6:ff:6c:27:6e:a4:21:58:93:54:26:
                    40:ed:7f:1c:5d:46:f2:d9:c4:a6:7c:4d:2f:46:be:
                    85:e6:99:07:72:90:8d:e8:64:11:95:e7:3e:b8:28:
                    02:72:fb:66:79:71:5e:f1:5a:e6:f7:6b:c3:80:76:
                    e4:2b:42:91:70:cf:4c:3f:14:4c:d2:c5:86:88:fe:
                    14:d3:89:66:e0:29:2c:10:c5:9f:9f:8f:16:ba:93:
                    52:73:f2:a4:3a:76:1c:89:b0:69:3c:97:b7:88:0c:
                    65:e5:e3:6c:fd:f1:8a:3a:04:95:62:78:65:27:6e:
                    6b:26:2d:83:68:d5:cf:91:e1:b7:d2:74:67:2f:ac:
                    27:d4:ba:61:b1:0f:29:45:f4:fa:55:5b:45:26:e7:
                    6b:08:81:63:e2:fe:14:8f:80:f3:60:ee:d5:fe:cf:
                    2a:ec:6e:95:48:28:71:ae:b1:4b:c8:b3:de:1e:15:
                    28:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BE:4D:94:C2:26:B4:A1:36:C8:9C:A5:C9:8D:67:03:BB:01:A0:88
            X509v3 Authority Key Identifier:
                keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e203130373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:eb:1b:fb:7c:9c:71:dd:4a:5c:f7:e0:65:15:54:8a:ab:
         08:ed:bc:f0:ec:f8:1b:3a:54:ae:7d:90:82:c0:3e:dd:52:f9:
         bf:94:70:a0:f1:a4:e7:87:3c:fa:cb:74:f2:8b:a8:2f:88:e7:
         7f:73:b3:6f:5d:20:68:ad:9f:ad:07:ec:16:a7:6e:56:8c:36:
         fa:7a:75:ed:ad:fd:a4:61:17:b9:b3:40:b5:b4:43:07:9f:9f:
         60:1c:90:46:dd:4d:11:c4:04:25:5c:41:1f:65:c9:f3:3d:7a:
         50:11:41:6c:bb:29:c1:87:d8:63:8f:63:1a:b8:4e:04:08:34:
         e9:31:8f:4d:33:ec:28:f9:a8:82:09:04:74:06:81:3a:67:67:
         46:6e:37:76:98:53:82:f3:f3:76:dd:11:d1:ec:ef:f8:1e:52:
         22:d1:ee:84:4e:b8:5c:de:a7:77:17:c1:2b:50:d3:07:32:6e:
         43:8c:af:78:67:92:a5:ea:b4:3a:54:64:2a:7b:08:c4:f2:dc:
         20:31:24:1f:da:e8:c9:7b:a6:ac:fd:ce:eb:1e:88:75:e0:27:
         14:2e:f9:61:16:5d:62:1b:67:ce:aa:c4:63:87:66:7d:1d:08:
         71:ec:73:c1:c3:d9:85:7c:ce:22:de:a5:12:4f:43:b4:aa:7e:
         c6:40:99:3d
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 12 11:38:41 2024 by rpki-client on console-fra.rpki-client.org