Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa
File:                     326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (raw, json)
Hash identifier:          3mstr3EN9AjQM2/PNL8MM1iy7hqbL3GC+qdmFe/w/qo=
Subject key identifier:   2C:5F:AA:7E:5E:04:68:D0:51:96:F2:32:E4:F1:7B:00:AE:00:E5:F8
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       77AB52C70428238326B777FD304DAC98E28C4A3B
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa
Signing time:             Sun 30 Jun 2024 12:15:20 +0000
ROA not before:           Sun 30 Jun 2024 12:10:20 +0000
ROA not after:            Sun 29 Jun 2025 12:15:20 +0000
asID:                     216141
IP address blocks:        2a11:f2c0:ffc7::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 19:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ab:52:c7:04:28:23:83:26:b7:77:fd:30:4d:ac:98:e2:8c:4a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jun 30 12:10:20 2024 GMT
            Not After : Jun 29 12:15:20 2025 GMT
        Subject: CN=2C5FAA7E5E0468D05196F232E4F17B00AE00E5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:7c:08:e6:20:f6:7b:77:e5:c9:c5:e8:a3:
                    bf:df:8c:f1:9a:f6:79:9f:cc:61:46:e8:be:2e:fd:
                    89:0a:83:e9:19:dd:e1:19:10:e3:f2:9e:35:e0:f2:
                    6e:9e:62:af:47:dd:c3:94:f7:cd:4a:cd:27:a2:97:
                    7e:d0:2e:bc:a4:40:07:60:fd:fc:eb:61:1d:ac:af:
                    63:a1:79:55:17:2d:66:80:19:1f:46:d4:45:08:a7:
                    f4:0e:3b:23:5f:8c:37:a6:8a:5f:db:f3:40:72:4e:
                    e0:79:93:6a:24:0a:d1:0b:e4:f8:ab:a3:4e:12:3e:
                    7c:6e:01:e5:74:15:1a:8f:f2:93:45:31:bb:1f:0c:
                    ea:6c:95:e4:5d:e0:a1:e6:ad:96:70:3f:2d:4e:a7:
                    cf:80:db:44:90:9d:64:46:35:99:4a:ad:61:28:68:
                    6b:3d:0f:bb:5f:40:f0:37:aa:46:9c:e5:c8:ea:05:
                    df:0d:15:85:39:1b:00:05:fc:18:c5:30:14:2f:5a:
                    de:9b:82:6c:81:9c:7f:8e:59:70:81:a2:c9:6e:46:
                    7b:a4:20:05:50:34:f0:00:10:6a:b3:30:10:53:44:
                    37:a3:e4:e3:e0:9d:1f:d8:96:37:a7:49:77:61:78:
                    fc:04:62:57:10:16:fc:11:2b:14:51:c4:f8:f8:18:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5F:AA:7E:5E:04:68:D0:51:96:F2:32:E4:F1:7B:00:AE:00:E5:F8
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffc7::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:d5:5a:18:bc:ef:fe:4a:74:62:20:bf:2b:c6:06:ae:a2:d3:
         ca:95:81:5c:95:41:4b:2d:c1:92:14:d0:fa:46:4f:6b:a0:c0:
         5c:7c:3b:5f:77:aa:0f:c4:18:da:89:60:b5:2c:81:4c:8d:16:
         d3:11:6e:96:5f:7a:e4:3b:c7:73:ec:6c:a9:d5:c2:0f:ea:ec:
         6e:73:4b:6b:b3:4b:34:a9:33:82:d1:ab:0d:05:d3:4b:0c:ea:
         93:1c:a2:68:cd:05:76:1e:ca:ec:2b:5e:a7:33:68:4f:11:1e:
         cf:f4:0e:d3:34:de:84:88:13:55:b7:02:87:88:04:8d:09:94:
         e9:ae:c5:30:71:9e:dd:1d:24:5e:e7:0d:95:49:e7:43:28:2e:
         3b:13:3d:98:08:27:26:ef:7c:94:44:c3:11:83:03:f0:87:d2:
         1e:3b:55:4b:cf:24:ad:d0:d2:06:ef:dc:dc:ad:7f:17:e7:98:
         95:9b:f2:6e:c2:e1:a5:f6:0d:6c:ae:83:d6:23:f3:d6:15:6b:
         1c:ea:ee:50:bb:94:a0:a1:d0:b2:eb:fe:ed:60:31:0d:1a:80:
         e0:c5:c8:1b:62:4d:52:b3:1d:6b:5d:33:91:0e:6c:bd:42:1e:
         3d:6c:ee:4e:5e:72:b3:f1:a5:a8:d5:0c:2e:74:aa:58:1e:5c:
         22:74:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org