Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136302e302f31392d3139203d3e203331313033.roa
File:                     38342e31392e3136302e302f31392d3139203d3e203331313033.roa (raw, json)
Hash identifier:          wGLpSw++IRatUOxU8F/QWBwd3KNCnmyxLdRlYZwavks=
Subject key identifier:   A4:32:47:18:C7:CC:47:85:05:36:46:39:47:BC:E0:CD:22:E3:B8:27
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       59174A1D5150D582191539945DAF64C935A4E34E
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136302e302f31392d3139203d3e203331313033.roa
Signing time:             Fri 31 May 2024 09:35:29 +0000
ROA not before:           Fri 31 May 2024 09:30:29 +0000
ROA not after:            Fri 30 May 2025 09:35:29 +0000
asID:                     31103
IP address blocks:        84.19.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 13:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:17:4a:1d:51:50:d5:82:19:15:39:94:5d:af:64:c9:35:a4:e3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: May 31 09:30:29 2024 GMT
            Not After : May 30 09:35:29 2025 GMT
        Subject: CN=A4324718C7CC47850536463947BCE0CD22E3B827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:63:5d:49:50:ad:0e:3a:e3:eb:99:f3:d9:ff:
                    66:5a:ca:2f:cb:93:20:b0:51:09:8b:af:96:f8:4f:
                    17:b2:c8:c6:54:94:bf:f3:d0:f2:c0:6a:20:cc:06:
                    ef:fb:86:46:55:e9:26:58:e1:5d:96:38:fe:7c:82:
                    4a:69:4c:83:66:28:f3:86:c9:df:95:46:75:e3:eb:
                    0d:f5:10:27:7e:ab:f8:0f:1f:e2:ec:df:a7:e2:dc:
                    b3:19:73:b6:28:df:07:35:0e:b0:14:34:05:b0:48:
                    6b:25:f5:cf:c8:84:2b:ef:74:62:b4:33:ac:17:bf:
                    26:49:65:99:ed:40:eb:bd:f1:2e:17:ef:9a:e4:4d:
                    0b:df:70:0d:97:c9:33:0d:1a:72:82:b8:74:d2:41:
                    3a:42:31:81:4f:f3:46:7c:4c:f9:7e:d7:60:25:49:
                    de:8f:3a:87:39:ac:b2:5f:2a:f1:14:4d:0a:bc:01:
                    ed:af:f8:75:21:71:fa:a1:b2:75:96:fa:1a:f7:85:
                    d2:35:44:b1:83:1b:ad:70:da:e6:39:76:54:72:08:
                    1c:67:43:73:34:70:dc:6c:56:19:15:69:80:89:3f:
                    43:06:6d:48:a0:e7:91:07:16:0a:b7:c4:f5:8a:63:
                    4c:5d:d4:a6:76:fa:74:57:90:30:57:52:b5:aa:2e:
                    5f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:32:47:18:C7:CC:47:85:05:36:46:39:47:BC:E0:CD:22:E3:B8:27
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136302e302f31392d3139203d3e203331313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.19.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:f1:67:c9:fd:90:42:54:36:74:51:48:d6:17:57:54:79:8d:
         ea:e4:f9:71:67:f0:0a:83:5f:cf:57:04:2e:21:62:c5:dd:33:
         3e:82:73:9a:01:ac:10:32:90:f4:90:c6:9b:fd:e6:b1:43:e9:
         07:ad:99:f1:22:72:57:cc:83:1e:40:b0:a7:6e:4b:0a:9b:7e:
         58:c0:46:c6:48:5f:59:9c:82:3a:40:45:48:fc:28:6c:e0:7f:
         97:1d:ac:36:ba:fb:8c:5a:ad:7b:3f:5d:2a:db:4a:be:84:44:
         1a:ad:8f:6f:35:cb:e8:67:ff:e7:3f:da:bf:fc:8d:e6:53:c1:
         b9:21:01:f9:1b:1a:86:ea:e6:39:4c:21:50:51:1d:dd:22:6c:
         e7:13:21:d6:1a:07:eb:e5:6e:da:15:fa:0a:46:b0:b0:2c:60:
         db:28:bb:ee:53:3a:86:c0:6d:d6:49:af:ec:44:f1:86:77:6e:
         61:86:70:a0:9b:36:32:c9:2c:b2:65:de:d8:a5:b9:c2:b9:1d:
         09:2d:4c:c6:07:b7:23:20:60:8a:01:8e:cd:aa:1f:a4:45:09:
         f0:5d:cf:e2:b9:33:d6:8b:dd:61:d5:67:20:6f:81:f1:09:39:
         6e:75:64:29:af:7c:e3:16:3a:6a:60:99:22:d1:66:b4:66:d8:
         b3:65:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org