Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20323132323338.roa
File:                     37372e38312e3133382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          o7sQfw+2GW7Xum79Rb85HiT1qQmH/xhSY1aJOryqVA8=
Subject key identifier:   B5:EC:6A:5E:CB:3F:CD:1D:58:9D:EC:07:09:18:4E:92:6A:F1:09:0B
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       34BF607F160D504416626DB69C7B37C432862E7C
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20323132323338.roa
Signing time:             Sun 10 Dec 2023 07:09:13 +0000
ROA not before:           Sun 10 Dec 2023 07:04:13 +0000
ROA not after:            Sun 08 Dec 2024 07:09:13 +0000
asID:                     212238
IP address blocks:        77.81.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 10 Feb 2024 00:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bf:60:7f:16:0d:50:44:16:62:6d:b6:9c:7b:37:c4:32:86:2e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Dec 10 07:04:13 2023 GMT
            Not After : Dec  8 07:09:13 2024 GMT
        Subject: CN=B5EC6A5ECB3FCD1D589DEC0709184E926AF1090B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:e1:e4:e7:49:71:20:9b:db:66:a0:48:fc:
                    2f:c9:0d:cc:7e:c0:ce:74:51:fe:06:f4:f2:4a:a2:
                    b9:07:41:23:f8:61:ee:f9:8b:4c:e0:7e:a8:4c:15:
                    7a:9f:33:48:4f:98:c8:20:21:fc:f9:b3:6d:54:f0:
                    25:8a:27:d9:62:dd:03:fa:55:08:a2:38:6c:6d:75:
                    96:cb:9c:c8:98:ba:42:2f:1e:f7:06:2e:a5:7c:db:
                    7a:a7:48:78:fe:84:27:c2:00:a8:ba:9d:65:02:be:
                    af:07:38:cc:dd:ed:c3:f7:68:ed:c5:4e:79:1b:0f:
                    fe:a4:ad:d7:aa:fc:57:f5:b6:85:ad:f1:2d:f6:4a:
                    80:f2:be:11:28:ae:32:8a:9c:bf:e9:7a:9c:8d:15:
                    78:32:4b:2a:00:37:12:1d:67:a1:3e:15:90:18:27:
                    01:2b:b3:50:f7:28:d0:5e:02:98:c3:53:ef:93:5a:
                    70:c5:ae:05:81:5b:6a:bf:b8:35:34:ef:39:22:06:
                    c3:9f:1e:2c:06:23:22:6d:5b:18:95:f4:3a:9a:a7:
                    a1:08:87:dd:4b:3f:81:2a:9f:f4:4f:55:cb:71:ca:
                    0b:78:d7:11:33:31:61:e5:47:79:7d:e6:55:43:06:
                    6e:ba:b9:2d:e7:fa:82:90:aa:8a:c3:52:11:5b:fb:
                    c5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EC:6A:5E:CB:3F:CD:1D:58:9D:EC:07:09:18:4E:92:6A:F1:09:0B
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d6:d4:a9:ea:89:52:58:85:f6:23:64:59:dd:70:6b:31:fb:
         7b:4f:d7:55:5e:e0:c8:c2:52:32:2a:9d:90:19:32:69:3d:8d:
         2f:8c:fa:23:b4:2c:69:1e:8f:46:70:2a:69:ca:2a:f2:20:4b:
         07:85:b7:f8:81:3c:86:86:d4:5c:89:17:58:5f:a4:e0:e7:d6:
         f7:a7:99:5b:97:2d:45:7a:05:ad:a1:4f:05:15:55:0a:3a:61:
         74:d1:fe:0e:87:8b:f0:8a:51:7a:e3:56:16:c6:72:a7:8d:90:
         0d:b3:4d:2b:01:77:9e:eb:ed:91:76:9c:0b:58:29:50:e8:fc:
         7c:ac:ea:a4:00:22:8f:0e:dd:aa:f8:91:e4:04:f7:f4:f7:49:
         03:4c:b2:e1:93:5b:9b:a5:26:f4:67:f5:a9:48:9a:c2:6e:f1:
         fb:a8:dc:86:67:c9:9f:9d:92:bb:31:cb:35:c8:54:e0:72:85:
         59:e3:40:2a:e1:9f:9f:ea:3a:b8:26:af:31:2f:57:3b:85:19:
         96:5b:2f:ab:f7:77:93:e9:90:ed:6f:c0:0a:ef:08:3e:8c:29:
         db:7c:44:3e:39:7b:9b:99:99:f4:92:34:3f:39:24:45:75:bd:
         07:cc:dd:3e:d7:bf:24:f0:de:c6:84:13:70:e7:d4:2b:eb:d4:
         23:10:93:34
-----BEGIN CERTIFICATE-----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Generated at Sat Feb 10 01:26:28 2024 by rpki-client on console-ams.rpki-client.org