Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233322e302f32342d3234203d3e20323131333736.roa
File:                     34362e3130322e3233322e302f32342d3234203d3e20323131333736.roa (raw, json)
Hash identifier:          OqXYAHHVQHUSfa8mPD5kw8BE8AituaSExXb+pH55GlM=
Subject key identifier:   4D:5E:D1:8C:A2:28:30:4D:B1:0B:61:4A:0C:6B:B5:4E:58:AD:17:C7
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       4C95F96B52C2A98CA3D7A24EE8912D684315B370
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233322e302f32342d3234203d3e20323131333736.roa
Signing time:             Mon 25 Sep 2023 10:51:23 +0000
ROA not before:           Mon 25 Sep 2023 10:46:23 +0000
ROA not after:            Mon 23 Sep 2024 10:51:23 +0000
asID:                     211376
IP address blocks:        46.102.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:95:f9:6b:52:c2:a9:8c:a3:d7:a2:4e:e8:91:2d:68:43:15:b3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Sep 25 10:46:23 2023 GMT
            Not After : Sep 23 10:51:23 2024 GMT
        Subject: CN=4D5ED18CA228304DB10B614A0C6BB54E58AD17C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:0f:34:a9:32:71:53:4a:5e:4d:55:49:dd:
                    41:b5:ce:2d:e6:9a:92:e5:b0:bc:8d:cd:8e:a5:84:
                    b5:0e:81:70:3c:cd:ae:89:7e:a6:38:82:07:1c:d7:
                    29:b0:fc:9f:cc:f7:86:15:70:ee:f7:ee:20:ab:aa:
                    5c:6f:47:78:db:45:ed:f5:3c:2a:1c:f8:d0:ca:99:
                    30:33:be:16:a3:7d:37:b2:87:f1:e3:69:e8:5f:50:
                    28:a4:bf:c4:3a:63:87:8b:ce:72:2e:94:b3:a6:5f:
                    7b:6d:f3:01:e5:07:2f:f3:dc:33:99:d9:d3:99:1f:
                    63:cb:6e:9a:45:23:0c:8e:54:0f:ef:cd:4d:e4:11:
                    fe:4a:ad:a7:a4:f1:8e:e6:b0:17:8d:f6:c8:4f:5c:
                    8d:ba:2d:27:81:c9:dc:e4:1f:3b:ec:05:d8:4c:7c:
                    6a:76:db:5d:22:a9:d6:ea:a1:94:1a:79:08:e7:f5:
                    06:02:9b:30:40:f2:88:05:22:1f:1c:6a:54:f4:73:
                    b9:52:b9:af:45:ff:c1:f5:05:9b:9a:ae:55:a3:4f:
                    9f:99:8f:42:ee:82:4d:c2:be:a9:bf:cb:53:e9:c3:
                    1b:ed:62:cf:6c:e3:a1:38:f2:32:04:8c:40:15:1f:
                    02:82:b3:8e:07:41:8a:c3:a8:fe:8d:2f:90:8f:89:
                    7f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5E:D1:8C:A2:28:30:4D:B1:0B:61:4A:0C:6B:B5:4E:58:AD:17:C7
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233322e302f32342d3234203d3e20323131333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.102.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:cc:e8:57:a5:61:98:71:c3:fa:ac:33:aa:bb:05:8b:dd:76:
         c0:14:17:ad:73:c4:71:b9:58:8d:a6:ab:3d:fd:eb:01:fb:d8:
         65:b0:2d:23:bb:ca:13:cc:d0:c9:e1:b8:c7:e2:0a:15:2c:28:
         3c:4e:30:fd:f9:77:2b:28:97:84:a5:71:ad:8a:85:9b:de:ad:
         4a:f2:7e:5d:61:cc:01:d4:dd:ab:d2:07:cd:b6:18:bf:19:f3:
         95:84:65:ef:a7:f9:4f:f3:25:b0:d1:97:fc:7f:18:e2:3d:d1:
         dd:f9:4a:49:ea:4e:35:5a:d1:9d:cb:95:95:0c:63:08:e4:d7:
         d8:0d:90:9d:6b:ae:c6:0c:7f:20:93:5a:e9:0f:a0:6c:9c:8a:
         9a:9f:04:2f:41:ed:4a:3c:83:9e:6a:56:9d:32:d1:96:d3:0a:
         2d:0f:68:6b:4d:55:81:8e:53:13:22:16:67:d0:4e:5e:50:ea:
         60:71:4b:2d:57:41:ed:b4:71:66:af:35:83:af:61:3d:5c:2f:
         a1:60:c0:a0:24:1e:5d:08:9e:7f:03:b1:6f:29:e4:c5:38:fd:
         35:1a:9d:cb:4f:30:4f:43:10:9c:a9:57:eb:18:b5:39:26:0f:
         f7:2e:28:f7:de:90:e6:ea:72:d3:3b:4e:aa:ae:8a:5f:0a:bb:
         27:d5:e7:5b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTJX5a1LCqYyj16JO6JEtaEMVs3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi
ZmEyY2NhNDAeFw0yMzA5MjUxMDQ2MjNaFw0yNDA5MjMxMDUxMjNaMDMxMTAvBgNV
BAMTKDRENUVEMThDQTIyODMwNERCMTBCNjE0QTBDNkJCNTRFNThBRDE3QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKAw80qTJxU0peTVVJ3UG1zi3m
mpLlsLyNzY6lhLUOgXA8za6JfqY4ggcc1ymw/J/M94YVcO737iCrqlxvR3jbRe31
PCoc+NDKmTAzvhajfTeyh/HjaehfUCikv8Q6Y4eLznIulLOmX3tt8wHlBy/z3DOZ
2dOZH2PLbppFIwyOVA/vzU3kEf5Kraek8Y7msBeN9shPXI26LSeBydzkHzvsBdhM
fGp2210iqdbqoZQaeQjn9QYCmzBA8ogFIh8calT0c7lSua9F/8H1BZuarlWjT5+Z
j0Lugk3Cvqm/y1PpwxvtYs9s46E48jIEjEAVHwKCs44HQYrDqP6NL5CPiX+tAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUTV7RjKIoME2xC2FKDGu1TlitF8cwHwYDVR0j
BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz
Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt
aXpLUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt
N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzQzNjJlMzEzMDMyMmUzMjMz
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzEzMzM3MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAuZugwDQYJKoZIhvcNAQELBQADggEBAKDM6FelYZhxw/qsM6q7BYvddsAUF61z
xHG5WI2mqz396wH72GWwLSO7yhPM0MnhuMfiChUsKDxOMP35dysol4Slca2KhZve
rUryfl1hzAHU3avSB822GL8Z85WEZe+n+U/zJbDRl/x/GOI90d35SknqTjVa0Z3L
lZUMYwjk19gNkJ1rrsYMfyCTWukPoGycipqfBC9B7Uo8g55qVp0y0ZbTCi0PaGtN
VYGOUxMiFmfQTl5Q6mBxSy1XQe20cWavNYOvYT1cL6FgwKAkHl0Inn8DsW8p5MU4
/TUanctPME9DEJypV+sYtTkmD/cuKPfekObqctM7Tqquil8KuyfV51s=
Generated at Wed Oct 25 00:25:46 2023 by rpki-client on console-ams.rpki-client.org