Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233332e302f32342d3234203d3e20383334.roa
File:                     34362e3130322e3233332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          08PGd+05yfLJDtRwS/EEOJaygANa3bTAhWBtf6XTyC8=
Subject key identifier:   9E:AB:4A:7C:F4:9B:C5:A4:C7:A9:D2:DE:E4:EF:DB:26:C7:86:EA:60
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       52EB5E7E1CC8ECB698F351DC016F3D90F6B9282B
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233332e302f32342d3234203d3e20383334.roa
Signing time:             Mon 02 Oct 2023 16:00:05 +0000
ROA not before:           Mon 02 Oct 2023 15:55:05 +0000
ROA not after:            Mon 30 Sep 2024 16:00:05 +0000
asID:                     834
IP address blocks:        46.102.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:eb:5e:7e:1c:c8:ec:b6:98:f3:51:dc:01:6f:3d:90:f6:b9:28:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Oct  2 15:55:05 2023 GMT
            Not After : Sep 30 16:00:05 2024 GMT
        Subject: CN=9EAB4A7CF49BC5A4C7A9D2DEE4EFDB26C786EA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:0d:4a:04:b8:21:a1:b7:bb:e2:b8:92:f3:
                    49:94:23:60:44:24:31:df:4d:22:c8:f4:ef:45:9f:
                    ca:e6:ae:a0:b3:a1:ae:d6:77:06:a2:a0:67:2c:e1:
                    82:92:21:a0:0e:78:2b:b7:09:a1:88:72:4b:a8:c9:
                    36:b9:11:35:6c:ca:2f:38:13:47:8b:98:80:32:a0:
                    4e:6a:59:75:7f:b1:13:e0:24:e1:4c:0d:f9:48:9c:
                    14:5e:af:d1:ec:db:3b:bb:ac:50:31:18:3c:8d:93:
                    13:ad:30:da:03:e8:b0:b5:2f:77:db:69:20:cf:4b:
                    f4:38:f8:2e:05:f3:39:d3:8a:66:5f:2c:f4:9b:a8:
                    bf:90:c4:27:2f:da:5c:98:e0:2b:c5:f5:16:f6:e1:
                    d1:11:f3:e3:ec:54:dc:67:21:e0:3d:04:7e:21:c3:
                    1a:08:34:67:34:b7:20:c7:a4:80:5b:92:e8:ca:a8:
                    66:7e:4a:d8:87:3f:d1:4d:37:a5:46:41:a0:e1:17:
                    90:61:29:76:77:d7:27:24:b8:58:4e:4b:d9:63:73:
                    45:59:32:ba:63:61:4d:75:50:59:66:99:d9:d9:7a:
                    95:9e:b3:13:76:37:46:7c:51:f7:ef:dd:49:4d:b2:
                    5d:57:80:cc:27:66:30:02:9f:37:c9:5e:b5:e5:6d:
                    cd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AB:4A:7C:F4:9B:C5:A4:C7:A9:D2:DE:E4:EF:DB:26:C7:86:EA:60
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.102.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:80:00:25:39:46:74:69:aa:db:cb:d8:ea:a2:86:fc:00:69:
         c0:b4:9c:06:03:99:ea:19:c2:8e:36:82:06:7f:76:9f:29:a2:
         a8:2f:86:d5:86:c5:bb:ad:f6:31:85:01:1e:38:59:5a:3c:24:
         e2:5a:d4:b5:2e:9a:a3:81:a6:e8:e3:01:d3:eb:7a:76:4e:1c:
         a7:df:d4:00:db:9b:39:71:d3:5f:cf:51:fe:07:ba:bb:c4:ba:
         90:f1:07:31:d4:cb:f4:78:be:9c:a4:86:c4:cc:61:a4:42:83:
         c1:69:42:0d:55:4f:8a:91:0e:dc:23:36:b7:44:6e:5e:4a:27:
         79:7f:6e:56:b4:91:ec:71:7f:89:10:8e:97:17:fc:86:71:38:
         d4:43:11:98:00:d6:53:a6:a5:3e:e1:e5:e3:21:e0:61:9b:e0:
         b9:d4:e7:8f:7f:96:57:f7:26:16:29:a6:6b:8e:e9:10:53:83:
         a0:23:4f:30:51:df:f9:48:7d:c3:26:68:27:80:52:8c:e2:c6:
         82:92:b9:39:85:dc:20:9d:43:00:4a:c1:40:39:32:05:ec:f6:
         ca:4c:ae:8f:ef:0a:0a:ba:b5:b8:a8:6d:1e:12:6f:93:01:a2:
         ec:ec:68:1c:03:48:9a:04:f6:78:a1:73:9b:61:8b:2f:db:5e:
         2f:c1:71:cb
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUUutefhzI7LaY81HcAW89kPa5KCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi
ZmEyY2NhNDAeFw0yMzEwMDIxNTU1MDVaFw0yNDA5MzAxNjAwMDVaMDMxMTAvBgNV
BAMTKDlFQUI0QTdDRjQ5QkM1QTRDN0E5RDJERUU0RUZEQjI2Qzc4NkVBNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQg1KBLghobe74riS80mUI2BE
JDHfTSLI9O9Fn8rmrqCzoa7WdwaioGcs4YKSIaAOeCu3CaGIckuoyTa5ETVsyi84
E0eLmIAyoE5qWXV/sRPgJOFMDflInBRer9Hs2zu7rFAxGDyNkxOtMNoD6LC1L3fb
aSDPS/Q4+C4F8znTimZfLPSbqL+QxCcv2lyY4CvF9Rb24dER8+PsVNxnIeA9BH4h
wxoINGc0tyDHpIBbkujKqGZ+StiHP9FNN6VGQaDhF5BhKXZ31yckuFhOS9ljc0VZ
MrpjYU11UFlmmdnZepWesxN2N0Z8Uffv3UlNsl1XgMwnZjACnzfJXrXlbc2xAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUnqtKfPSbxaTHqdLe5O/bJseG6mAwHwYDVR0j
BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz
Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt
aXpLUS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt
N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzQzNjJlMzEzMDMyMmUzMjMz
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAuZukw
DQYJKoZIhvcNAQELBQADggEBAH2AACU5RnRpqtvL2OqihvwAacC0nAYDmeoZwo42
ggZ/dp8poqgvhtWGxbut9jGFAR44WVo8JOJa1LUumqOBpujjAdPrenZOHKff1ADb
mzlx01/PUf4HurvEupDxBzHUy/R4vpykhsTMYaRCg8FpQg1VT4qRDtwjNrdEbl5K
J3l/bla0kexxf4kQjpcX/IZxONRDEZgA1lOmpT7h5eMh4GGb4LnU549/llf3JhYp
pmuO6RBTg6AjTzBR3/lIfcMmaCeAUozixoKSuTmF3CCdQwBKwUA5MgXs9spMro/v
Cgq6tbiobR4Sb5MBouzsaBwDSJoE9nihc5thiy/bXi/Bccs=
Generated at Sat Oct 7 16:08:52 2023 by rpki-client on console-ams.rpki-client.org