Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138302e302f32342d3234203d3e203633303233.roa
File:                     39352e3136392e3138302e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          Y3Z7M4V7PkLC977edtrvVRYT6vjjz/BqPVCg9zUXJQ4=
Subject key identifier:   A6:C1:C9:CA:FC:08:BD:EF:64:01:EC:AD:31:70:F6:9D:B2:0E:80:EC
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       50B637D9CB8F18E1B0DAB0ACFCA0C3EF54205A90
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138302e302f32342d3234203d3e203633303233.roa
Signing time:             Fri 31 May 2024 19:02:36 +0000
ROA not before:           Fri 31 May 2024 18:57:36 +0000
ROA not after:            Fri 30 May 2025 19:02:36 +0000
asID:                     63023
IP address blocks:        95.169.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 12:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b6:37:d9:cb:8f:18:e1:b0:da:b0:ac:fc:a0:c3:ef:54:20:5a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: May 31 18:57:36 2024 GMT
            Not After : May 30 19:02:36 2025 GMT
        Subject: CN=A6C1C9CAFC08BDEF6401ECAD3170F69DB20E80EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8b:b9:16:f9:7e:c5:fb:39:cf:e5:0d:37:9c:
                    60:42:46:ed:5f:a2:d3:32:d7:50:ce:35:5a:2e:60:
                    72:3d:d5:38:ba:83:f5:d2:ed:0c:41:17:06:f2:f1:
                    1d:d2:20:d7:36:7c:2d:79:a8:c6:cd:8c:81:b6:e8:
                    91:4c:ff:d5:93:d1:16:b3:ff:72:cc:b7:a8:c7:76:
                    b5:a0:ec:d3:80:43:62:17:81:b4:e0:e4:fe:21:05:
                    93:cf:76:8a:fc:fa:69:1a:e3:1b:4b:9a:9a:f3:e7:
                    61:11:d1:3a:d4:22:83:d5:bb:25:b1:b5:72:26:a6:
                    a3:00:36:7f:5a:4a:f9:8f:e8:e6:d3:42:68:11:15:
                    87:29:9f:9b:93:fa:0e:50:6e:19:80:c3:e9:24:9e:
                    b6:95:7c:6e:60:45:1b:87:54:df:09:d4:c5:6a:79:
                    ca:a4:68:61:e4:2a:e2:50:f4:4a:f5:d6:48:0f:2d:
                    2d:1f:6a:cb:c0:f8:f2:50:f2:d7:ed:d1:f2:39:83:
                    a0:b7:e4:3a:0a:2f:34:2c:86:13:d3:92:93:09:b2:
                    3c:28:e1:c4:08:4a:2d:40:6e:f6:9b:fc:74:55:85:
                    51:00:48:c3:2d:4c:72:23:07:ab:ae:9d:a5:6e:59:
                    89:f6:33:07:35:69:20:1c:60:15:e6:bb:95:b4:ba:
                    b8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C1:C9:CA:FC:08:BD:EF:64:01:EC:AD:31:70:F6:9D:B2:0E:80:EC
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138302e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.169.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c7:7e:57:1b:7d:6e:56:45:e3:33:b8:7f:10:5f:1d:13:0d:
         5a:da:a2:d1:bd:ab:54:fe:b7:fc:90:8e:8a:5f:e4:21:d0:a7:
         f3:55:70:aa:87:33:1b:80:e5:47:04:4c:07:13:7c:41:12:8c:
         0d:2e:3c:a9:dd:7e:68:b1:ad:60:9a:de:35:88:33:df:d5:3d:
         c3:8f:db:03:e7:ff:8b:4e:0c:3e:50:40:5d:aa:47:a5:5f:56:
         7c:7f:48:b6:4c:dd:81:ea:3c:fd:8c:f1:2d:f4:9c:8b:24:b6:
         39:eb:61:69:a0:23:5d:0c:dd:0c:87:b9:48:87:b3:f4:6f:00:
         98:67:6c:ef:6b:ad:64:64:4c:ae:f3:26:a5:f2:ec:66:0c:8f:
         91:f9:46:33:90:de:e4:cd:53:2f:42:20:03:69:1d:b1:20:be:
         fb:0c:19:cf:b7:e2:9a:76:49:5e:c9:41:2c:54:1c:ad:89:5a:
         a6:d1:96:28:a7:3f:b1:db:92:01:8e:40:61:5b:10:51:b6:f2:
         48:7c:77:62:27:b2:25:63:a7:8d:66:25:8e:7e:d7:66:96:ca:
         98:cd:01:61:69:0f:b0:ac:55:83:88:61:93:82:bc:fb:ff:19:
         d4:47:a0:79:7e:62:2b:fb:69:87:dd:39:61:5e:39:9e:42:30:
         4b:4c:c5:53
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 15 14:57:42 2024 by rpki-client on console-fra.rpki-client.org