Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e32352e302f32342d3234203d3e20323135373430.roa
File:                     39332e3131332e32352e302f32342d3234203d3e20323135373430.roa (raw, json)
Hash identifier:          SS/+Wul3NIivjW+7D2iby/RTgNhjs41Ags6hOo2j4Ao=
Subject key identifier:   7A:9B:C7:53:C8:6F:E7:13:12:93:E3:CD:30:15:A2:7F:4F:4D:69:74
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       5E2F46D05F60DCA522C9D97B16A6AE8317EDEBCB
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e32352e302f32342d3234203d3e20323135373430.roa
Signing time:             Mon 22 Jul 2024 22:06:15 +0000
ROA not before:           Mon 22 Jul 2024 22:01:15 +0000
ROA not after:            Mon 21 Jul 2025 22:06:15 +0000
asID:                     215740
IP address blocks:        93.113.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 19:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2f:46:d0:5f:60:dc:a5:22:c9:d9:7b:16:a6:ae:83:17:ed:eb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Jul 22 22:01:15 2024 GMT
            Not After : Jul 21 22:06:15 2025 GMT
        Subject: CN=7A9BC753C86FE7131293E3CD3015A27F4F4D6974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:1b:07:20:41:3d:b6:ae:ea:97:30:36:cd:
                    fd:3f:bb:b3:b4:4e:30:22:65:27:8d:0a:a8:8c:1d:
                    64:44:b7:4a:a0:65:b7:a1:9b:17:26:be:83:03:01:
                    ec:c9:e8:23:71:26:b8:49:56:22:9a:3e:fc:3b:7e:
                    17:d3:59:16:cd:07:e5:00:09:6a:37:c5:33:91:f7:
                    26:f5:19:3c:c8:08:92:25:43:c1:be:c9:11:0d:70:
                    7c:91:5e:72:31:85:39:7c:69:6a:1b:c9:53:83:ac:
                    76:72:c8:dc:80:cc:75:15:b2:2a:41:2d:8e:6f:6a:
                    3d:4e:44:a8:2b:ea:b2:a1:ae:73:94:7e:c7:db:17:
                    d0:c8:aa:26:e1:b6:b2:e3:f7:fd:f9:b7:f3:13:09:
                    63:b6:0e:33:e3:ed:58:26:5f:35:78:c1:04:08:3a:
                    5b:21:37:c7:35:e6:21:cb:e6:32:e8:11:54:01:8b:
                    17:04:38:93:98:3e:ad:10:0f:24:e8:18:96:5e:bd:
                    cf:51:c7:32:8a:80:4a:c1:cb:d2:cc:b2:33:a6:6b:
                    f7:79:09:e7:29:0d:34:7c:c1:f8:3b:0d:64:de:73:
                    e7:0e:8a:42:e6:58:b3:68:03:bc:40:b5:6a:1f:b5:
                    b9:9c:36:f4:b8:42:b8:91:ee:76:cc:b7:52:d9:7c:
                    8d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9B:C7:53:C8:6F:E7:13:12:93:E3:CD:30:15:A2:7F:4F:4D:69:74
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e32352e302f32342d3234203d3e20323135373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:d5:43:9e:20:9d:d6:a0:57:80:df:95:1a:71:7c:76:e3:8f:
         d9:14:a7:e2:bd:a7:4a:39:2c:71:14:46:7a:3c:f9:f6:6a:a1:
         54:77:17:68:d6:7e:e6:6e:d1:24:fd:f1:ad:60:5f:35:01:4a:
         d4:2d:86:ac:e6:59:a5:8e:17:2c:e9:42:28:35:7d:2d:1d:09:
         36:ee:fc:bd:be:ab:ca:4a:8a:7b:d1:2e:2c:3e:15:b1:59:22:
         8b:cd:e9:f3:05:21:9f:7e:3b:da:a8:df:ed:72:6f:f0:aa:f8:
         06:ef:39:83:1d:2f:26:cd:fe:4b:2f:71:15:be:e9:51:37:79:
         6e:6d:35:39:7e:0a:c3:d8:85:20:05:87:82:10:08:17:17:7b:
         52:1a:03:16:ee:d1:60:61:b9:e0:61:e9:a5:04:16:a5:2b:39:
         c9:ce:e4:76:fc:f9:d6:50:fd:e2:84:a8:af:a0:e9:c3:3d:3a:
         02:16:d7:ca:98:a3:a8:91:69:76:e9:30:84:8e:ea:04:24:7e:
         c5:52:01:f2:2b:35:2f:9e:37:18:cb:41:be:83:b9:21:8c:9b:
         ed:65:bb:ff:b4:ba:a8:f1:fe:cb:87:46:36:d2:bb:b6:ef:8a:
         66:b0:5c:77:e6:56:6c:6e:10:ad:28:2c:90:b3:25:55:bb:a2:
         eb:ee:93:af
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUXi9G0F9g3KUiydl7Fqaugxft68swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi
ZmEyY2NhNDAeFw0yNDA3MjIyMjAxMTVaFw0yNTA3MjEyMjA2MTVaMDMxMTAvBgNV
BAMTKDdBOUJDNzUzQzg2RkU3MTMxMjkzRTNDRDMwMTVBMjdGNEY0RDY5NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7BsHIEE9tq7qlzA2zf0/u7O0
TjAiZSeNCqiMHWREt0qgZbehmxcmvoMDAezJ6CNxJrhJViKaPvw7fhfTWRbNB+UA
CWo3xTOR9yb1GTzICJIlQ8G+yRENcHyRXnIxhTl8aWobyVODrHZyyNyAzHUVsipB
LY5vaj1ORKgr6rKhrnOUfsfbF9DIqibhtrLj9/35t/MTCWO2DjPj7VgmXzV4wQQI
OlshN8c15iHL5jLoEVQBixcEOJOYPq0QDyToGJZevc9RxzKKgErBy9LMsjOma/d5
CecpDTR8wfg7DWTec+cOikLmWLNoA7xAtWoftbmcNvS4QriR7nbMt1LZfI2nAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUepvHU8hv5xMSk+PNMBWif09NaXQwHwYDVR0j
BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz
Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt
aXpLUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt
N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzkzMzJlMzEzMTMzMmUzMjM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzczNDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XXEZMA0GCSqGSIb3DQEBCwUAA4IBAQCW1UOeIJ3WoFeA35UacXx244/ZFKfivadK
OSxxFEZ6PPn2aqFUdxdo1n7mbtEk/fGtYF81AUrULYas5lmljhcs6UIoNX0tHQk2
7vy9vqvKSop70S4sPhWxWSKLzenzBSGffjvaqN/tcm/wqvgG7zmDHS8mzf5LL3EV
vulRN3lubTU5fgrD2IUgBYeCEAgXF3tSGgMW7tFgYbngYemlBBalKznJzuR2/PnW
UP3ihKivoOnDPToCFtfKmKOokWl26TCEjuoEJH7FUgHyKzUvnjcYy0G+g7khjJvt
Zbv/tLqo8f7Lh0Y20ru274pmsFx35lZsbhCtKCyQsyVVu6Lr7pOv
Generated at Mon Sep 23 22:32:52 2024 by rpki-client on console-fra.rpki-client.org