Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa
File:                     326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa (raw, json)
Hash identifier:          9ORlMwrez3apnbrVUzO9N/I8xEFts5npJX7gbQ56hHg=
Subject key identifier:   65:80:0F:54:D2:47:91:3F:1F:D9:69:E3:35:CE:79:8A:DF:9A:2F:33
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       3945108414485E8C67682B431FF4D95408E384A2
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa
Signing time:             Sun 30 Jun 2024 12:15:18 +0000
ROA not before:           Sun 30 Jun 2024 12:10:18 +0000
ROA not after:            Sun 29 Jun 2025 12:15:18 +0000
asID:                     207885
IP address blocks:        2a11:f2c0:fff5::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 19:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:45:10:84:14:48:5e:8c:67:68:2b:43:1f:f4:d9:54:08:e3:84:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jun 30 12:10:18 2024 GMT
            Not After : Jun 29 12:15:18 2025 GMT
        Subject: CN=65800F54D247913F1FD969E335CE798ADF9A2F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:3e:ed:c9:3b:1c:82:80:47:e3:1b:90:df:
                    5f:0f:60:d7:e5:19:12:9e:ed:1e:24:bb:79:8a:a7:
                    fc:11:81:7f:3e:a8:03:45:07:48:7d:17:39:8b:85:
                    5d:c4:bf:50:ab:4f:3c:35:22:82:f8:de:a0:4e:76:
                    34:c4:4a:c9:01:75:64:97:f1:9b:bc:89:85:f9:29:
                    c8:95:e6:75:7c:b4:48:2b:f4:4c:f7:be:7e:23:96:
                    1e:11:54:67:f9:99:e7:7d:5b:43:2c:6b:bc:57:47:
                    14:0d:7c:4c:98:b7:a5:d5:ef:fa:0d:07:bc:ee:7b:
                    1e:e0:b0:1b:52:b8:53:24:16:8c:2e:fc:63:9a:60:
                    72:02:b7:5f:03:ed:c6:5b:fe:7a:09:a9:44:1e:8b:
                    6f:40:bc:ad:06:ff:2e:24:49:94:92:49:dc:da:79:
                    73:4c:f9:ea:9a:7b:a2:fe:96:6e:32:46:bf:c4:b7:
                    15:8d:c7:de:e0:12:47:29:7e:1a:bb:df:04:96:34:
                    47:57:8c:c6:4b:d3:23:54:23:7e:0e:96:da:ff:f5:
                    79:c9:92:e7:83:1d:c2:ec:83:49:80:78:28:f6:4b:
                    c8:6e:29:fb:4d:cf:3c:79:d9:e7:51:51:ea:77:42:
                    5d:75:8a:08:66:d4:f0:d1:97:5a:0d:bb:b7:00:4d:
                    69:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:80:0F:54:D2:47:91:3F:1F:D9:69:E3:35:CE:79:8A:DF:9A:2F:33
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fff5::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:d2:15:16:4c:15:f1:84:00:e5:6d:6f:8d:72:db:3a:71:8b:
         a9:4b:76:d6:ee:5b:e3:14:5f:4f:a2:54:39:9e:d3:34:ec:6c:
         d8:e9:6a:ce:54:b8:5b:5c:90:c1:5b:cb:bd:15:1a:42:c4:dd:
         00:bd:bb:5d:6a:54:f0:a5:5a:19:c1:15:4a:7a:fb:8b:51:b2:
         34:4f:35:08:cf:d9:0e:99:13:b7:67:1b:01:c6:06:18:c1:30:
         45:bb:1b:b6:d2:df:28:56:2b:37:1a:a9:e7:4b:0a:be:e7:c7:
         5c:ed:8d:64:37:53:a1:4d:a2:80:15:9d:dc:56:d6:d0:f4:9a:
         61:00:98:6f:e0:a5:37:01:88:bb:45:47:dc:19:2a:dc:b7:45:
         4e:41:0e:56:75:f2:13:b1:f2:35:17:17:19:5c:d0:f5:69:f4:
         6e:e2:dd:86:4c:4f:7b:b0:23:dc:16:8d:73:94:3b:0b:63:b8:
         fc:85:33:d0:a4:20:2b:7a:19:6e:21:9d:28:46:b5:eb:80:23:
         09:76:0a:74:2d:ea:27:c8:ae:6f:4d:1f:68:a4:a8:56:cc:ce:
         7a:dd:dd:0f:68:e7:b7:24:19:ce:90:ba:8a:a6:e7:5e:10:d3:
         2b:f0:20:d3:6b:9f:49:02:cf:2b:1f:55:5a:27:7d:bb:73:82:
         ef:59:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:39 2024 by rpki-client on console-ams.rpki-client.org