Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137382e302f32342d3234203d3e203631333137.roa
File:                     39352e3136392e3137382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          s57hKKC7TV6OCtS2JkqvcFwcKGAI4CTTvRoGXkgEjBs=
Subject key identifier:   1B:33:0D:E3:DC:EB:77:AD:8E:1A:F9:9C:26:50:05:AA:96:F2:35:FD
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       6EE04B1782E8235EDB5D077347C56A7F23D8253C
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137382e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 17 Jun 2024 14:41:38 +0000
ROA not before:           Mon 17 Jun 2024 14:36:38 +0000
ROA not after:            Mon 16 Jun 2025 14:41:38 +0000
asID:                     61317
IP address blocks:        95.169.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 10:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e0:4b:17:82:e8:23:5e:db:5d:07:73:47:c5:6a:7f:23:d8:25:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: Jun 17 14:36:38 2024 GMT
            Not After : Jun 16 14:41:38 2025 GMT
        Subject: CN=1B330DE3DCEB77AD8E1AF99C265005AA96F235FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9d:d7:62:64:25:27:41:7b:8e:90:72:e9:ca:
                    d2:37:df:ac:df:c5:80:19:e1:43:51:95:75:53:d8:
                    5f:52:a2:ee:5a:44:d3:53:20:ef:33:a8:69:b7:f0:
                    3d:2c:12:17:a6:ac:8e:48:76:0b:9c:51:ee:e2:26:
                    ee:bf:7b:d9:2b:03:cb:db:f5:67:75:e7:97:33:9b:
                    a3:a3:03:91:b3:85:0c:6c:d2:93:64:8e:a3:8f:39:
                    37:5e:df:b2:6a:a4:de:f3:2b:3a:15:76:ab:1b:83:
                    de:a2:99:fb:ef:00:60:7d:9c:ee:aa:9c:ed:09:7d:
                    58:03:5d:c9:28:8c:74:f1:5d:bf:66:a6:d7:14:11:
                    d2:de:15:ba:3b:59:f1:c7:21:3b:98:f6:c3:50:76:
                    18:86:6d:d9:cf:2f:26:40:5a:2f:a0:bc:8c:eb:ad:
                    b9:cd:47:3e:08:e4:1f:76:30:6e:c0:57:48:14:84:
                    81:77:d7:ca:b8:5f:72:10:65:df:ee:03:17:16:67:
                    c9:4a:53:69:e0:0b:12:14:86:25:6e:eb:0a:99:ed:
                    22:9b:f5:0a:eb:27:9e:23:1f:2b:b9:67:fe:f7:96:
                    f8:34:98:dd:c4:77:8f:fa:99:88:fd:01:0f:6a:af:
                    57:53:01:9e:46:72:2e:ea:2f:e9:82:68:78:99:4e:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:33:0D:E3:DC:EB:77:AD:8E:1A:F9:9C:26:50:05:AA:96:F2:35:FD
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.169.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:0b:1c:56:81:ef:14:2e:7e:62:88:33:a7:0b:f9:4e:82:ac:
         f2:11:09:73:bb:97:c4:8b:85:05:0f:d3:54:91:32:8d:64:3b:
         e7:58:eb:fb:8f:38:27:09:ee:07:0c:8e:c3:39:bd:fa:c4:80:
         8f:5c:39:8a:d9:81:b0:78:1b:6b:9f:59:0f:0f:22:03:73:9e:
         f4:c5:6f:02:4c:da:9a:91:7b:0c:01:c3:36:68:32:38:2c:a6:
         eb:e4:68:3d:c1:6b:1a:c4:67:f5:e0:8c:5c:ef:37:d7:88:0f:
         1f:e9:97:ac:c6:fd:d0:ee:3a:e2:a6:35:e4:d2:b5:41:91:79:
         36:1b:0a:fb:2a:29:42:81:1f:6d:5f:6f:6f:e8:2e:ae:f2:43:
         c9:f7:4c:d7:ae:f4:50:71:02:0d:dd:93:18:4a:52:74:2b:8f:
         b1:73:b5:26:e5:77:ce:37:f5:0a:f6:90:2a:75:a4:c8:f0:88:
         81:8b:42:35:62:9d:34:62:0c:7f:5f:21:0d:59:69:7d:f1:de:
         98:06:96:eb:ce:c1:93:23:14:c7:62:1d:b2:81:fb:b9:54:40:
         5b:2f:36:ca:36:0c:aa:a5:67:09:ef:cf:69:84:31:e3:4e:de:
         ad:5f:dc:d8:42:89:59:71:3b:0e:fc:6e:4a:08:a4:ef:02:24:
         c2:12:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 13:46:35 2024 by rpki-client on console-fra.rpki-client.org