Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131352e3234382e302f32322d3232203d3e203339373538.roa
File:                     39332e3131352e3234382e302f32322d3232203d3e203339373538.roa (raw, json)
Hash identifier:          oc/yeHXnwfi+OO3dbk2Vz9ZMQ/ixL1+mup1eremT8pQ=
Subject key identifier:   04:1B:C7:8B:DF:73:7B:4A:09:10:8A:82:BD:4C:AE:B8:8C:6F:61:5A
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       3247BADFB995B30F80B7490D7F19C4D4ED5D7A4C
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131352e3234382e302f32322d3232203d3e203339373538.roa
Signing time:             Wed 23 Aug 2023 11:20:58 +0000
ROA not before:           Wed 23 Aug 2023 11:15:58 +0000
ROA not after:            Wed 21 Aug 2024 11:20:58 +0000
asID:                     39758
IP address blocks:        93.115.248.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:47:ba:df:b9:95:b3:0f:80:b7:49:0d:7f:19:c4:d4:ed:5d:7a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Aug 23 11:15:58 2023 GMT
            Not After : Aug 21 11:20:58 2024 GMT
        Subject: CN=041BC78BDF737B4A09108A82BD4CAEB88C6F615A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:51:36:70:4d:a8:8b:c4:0e:18:51:24:22:5e:
                    a2:d4:6c:da:55:97:02:16:ba:e6:40:5e:85:35:7c:
                    2a:8a:9f:f8:54:9e:4a:ed:24:4b:3f:9a:66:70:ee:
                    76:1a:fd:34:32:9b:80:fe:01:90:d9:9b:24:36:ba:
                    ec:60:58:ef:e1:ae:39:09:a8:a8:5b:bc:e4:83:f8:
                    07:1e:66:16:bc:4e:b0:ca:ff:02:37:fc:fb:11:f3:
                    7f:24:99:49:c2:ed:21:64:79:db:71:04:ce:8d:e2:
                    98:a3:25:99:17:33:9c:54:bd:5e:62:1c:d5:6c:5f:
                    d2:d9:36:0b:1e:26:81:96:02:66:6d:6d:a0:18:4b:
                    fd:6d:74:cb:af:43:b3:31:a1:c1:fd:a9:de:31:7e:
                    bc:67:2f:ea:db:9f:30:1a:59:8c:0f:95:a3:71:5c:
                    06:1b:22:32:47:fb:71:9f:84:4b:b5:6e:19:3d:44:
                    08:4b:ce:1b:91:01:c0:cc:b6:ac:61:de:d0:ca:45:
                    03:fb:e7:3f:1c:af:77:ae:73:7c:cc:29:57:1f:e8:
                    c8:c6:51:db:96:17:ca:af:b7:9a:e4:41:29:db:7d:
                    31:65:76:6a:74:d8:eb:5d:f7:4b:a9:40:f9:03:3a:
                    cf:cf:24:f3:20:e7:4b:05:9f:97:3f:2a:48:70:9f:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1B:C7:8B:DF:73:7B:4A:09:10:8A:82:BD:4C:AE:B8:8C:6F:61:5A
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131352e3234382e302f32322d3232203d3e203339373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:42:e0:b5:a4:40:b5:6f:00:91:bd:95:ca:59:c5:56:78:ba:
         5e:09:6b:25:3c:b8:65:04:f1:90:af:8b:ad:e0:36:69:8d:f8:
         03:73:80:1f:b1:23:79:f7:5f:bf:fd:b0:66:1b:c3:1e:19:a7:
         62:5c:2f:f4:9b:38:65:b5:13:8b:4c:bf:2b:d0:ba:3a:65:bd:
         31:01:9b:64:0b:20:00:12:fe:5e:5e:bf:56:40:28:71:e4:3a:
         7f:58:dd:9f:ff:c8:cc:b8:27:cb:5a:89:64:b9:da:21:50:e4:
         22:3a:9f:70:4f:a2:9a:86:b2:a5:6a:77:71:7d:33:9e:6f:3f:
         e7:66:b4:6c:9f:6e:0e:2b:ac:37:4f:71:b1:27:a6:d9:ad:c4:
         8d:fe:02:d6:55:9d:47:3b:e9:ac:29:55:d3:aa:40:5e:c2:dd:
         64:49:52:5c:e2:a0:93:1e:79:be:f6:dc:9e:be:ee:d1:6b:61:
         9b:0b:7a:c8:74:db:2a:6b:12:f3:9e:cb:21:03:7b:4c:82:70:
         57:ab:02:02:de:cf:53:a2:24:9f:4a:e4:95:23:17:7c:fe:e6:
         c5:20:ef:6f:e8:70:7e:23:46:07:2c:c9:4b:e3:2a:1e:e7:6a:
         b7:92:7e:8e:63:6b:a7:e7:7f:08:c6:72:dd:5b:ea:3a:5f:3e:
         8b:a4:6f:27
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 1 10:20:40 2023 by rpki-client on console-ams.rpki-client.org