Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e20383334.roa
File:                     3139332e3234362e352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          KSmSPsMH0sQ0oSEQCxYqu3ebyVM96gPkTVm4T4OH3fo=
Subject key identifier:   57:25:2E:FC:5F:2F:F6:5F:9B:25:16:89:22:BF:9C:DF:AA:4D:75:B5
Certificate issuer:       /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial:       78A7068C6BC73A66DDC4ADF10409A918BBE95487
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e20383334.roa
Signing time:             Fri 12 Jul 2024 10:06:38 +0000
ROA not before:           Fri 12 Jul 2024 10:01:38 +0000
ROA not after:            Fri 11 Jul 2025 10:06:38 +0000
asID:                     834
IP address blocks:        193.246.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 16:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a7:06:8c:6b:c7:3a:66:dd:c4:ad:f1:04:09:a9:18:bb:e9:54:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
        Validity
            Not Before: Jul 12 10:01:38 2024 GMT
            Not After : Jul 11 10:06:38 2025 GMT
        Subject: CN=57252EFC5F2FF65F9B25168922BF9CDFAA4D75B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:98:d8:5c:67:87:c2:40:f1:2e:90:bd:01:
                    f2:5e:8d:4a:6b:6a:bb:bb:b9:1f:6b:97:b1:63:1f:
                    c7:35:9e:88:b7:42:ac:27:96:2b:4d:af:15:67:69:
                    23:b5:20:53:31:59:33:e2:59:8c:de:87:88:a1:29:
                    54:b8:7d:68:a4:f4:e1:37:13:c7:96:12:a5:38:99:
                    c7:b9:9f:6e:a8:ff:e4:67:85:11:a4:fc:1f:cd:ec:
                    82:ca:2d:78:d7:35:5d:f1:8c:77:c1:d0:3a:9a:ee:
                    54:34:5b:01:38:8b:e5:c6:2f:34:41:2e:e4:52:ab:
                    f5:30:86:f7:b4:dd:be:23:f5:dc:d0:09:18:ec:e1:
                    ab:91:d6:ac:97:1c:10:4e:c6:ad:10:35:a0:37:48:
                    e2:d2:a6:bd:a0:4c:2e:32:4f:94:a3:6c:7d:53:39:
                    b6:8c:34:d6:cb:d4:78:1e:91:02:fe:c7:b4:ef:87:
                    c1:01:e0:9c:3c:e4:8d:c5:ca:c6:5f:de:f0:4f:5f:
                    0a:b6:63:6e:da:40:31:43:bc:88:97:b5:d6:87:00:
                    b4:4f:14:c9:0d:af:af:81:aa:5c:6b:14:d3:0b:4b:
                    a7:08:90:8f:2b:64:87:95:f5:ef:ca:dd:06:2f:d2:
                    c3:9d:9a:81:44:10:3f:0c:e5:25:05:bd:7d:66:e6:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:25:2E:FC:5F:2F:F6:5F:9B:25:16:89:22:BF:9C:DF:AA:4D:75:B5
            X509v3 Authority Key Identifier:
                keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:61:08:01:2f:c5:a5:75:67:c6:aa:fc:d7:36:fa:c7:b9:3b:
         b2:d2:2d:15:eb:40:7e:44:e7:8e:c3:1c:d5:7f:58:c2:9d:5b:
         24:d8:1f:8a:d5:26:ca:b9:be:ff:12:e6:69:3f:3b:f5:86:8f:
         8c:3b:74:c2:4e:c6:07:5c:95:10:a9:d4:97:04:66:06:ec:bf:
         26:0f:76:6f:50:fa:c9:e5:28:e1:a6:65:0c:e0:ba:73:bc:c5:
         4b:69:68:12:95:ff:47:7b:33:29:c8:1d:22:81:2f:f1:17:6e:
         12:6b:7d:f3:cf:23:53:aa:89:32:cc:91:b4:e0:67:7b:ec:fd:
         ee:67:1c:e6:5c:c1:9e:d4:c6:20:13:13:f8:3a:3e:de:2a:ff:
         55:6e:5e:7e:c7:92:f4:58:85:72:b7:73:2a:e7:64:a6:4b:20:
         74:94:00:95:c0:94:dd:c4:88:fd:38:24:05:3f:46:a7:9f:60:
         47:a1:45:fa:fa:6f:01:e0:7d:f2:13:84:50:1c:1e:e6:d6:2d:
         b5:b2:ad:a9:ab:6c:6c:2d:87:c2:ec:04:94:5e:ed:2a:fa:92:
         19:52:92:12:08:10:c9:0b:93:d2:0b:d2:ae:77:6a:aa:7b:ac:
         6a:f0:d1:e0:0e:ef:fe:18:c8:6e:dc:e0:b2:eb:01:ba:42:7d:
         20:2e:82:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 04:35:41 2024 by rpki-client on console-ams.rpki-client.org