Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138302e302f32342d3234203d3e20383334.roa
File:                     39352e3136392e3138302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          EWo5/Q+B/aOGg0ojDPWbpdwdpBeJk4Z+6J035OIfsA8=
Subject key identifier:   E2:65:E1:51:63:4F:5D:C2:9F:20:44:86:1A:2E:F3:B4:BF:27:52:95
Certificate issuer:       /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial:       046C40AFD9A277978A3B8D06A78483E14C47E8D7
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138302e302f32342d3234203d3e20383334.roa
Signing time:             Mon 15 Jul 2024 13:00:27 +0000
ROA not before:           Mon 15 Jul 2024 12:55:27 +0000
ROA not after:            Mon 14 Jul 2025 13:00:27 +0000
asID:                     834
IP address blocks:        95.169.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 06:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6c:40:af:d9:a2:77:97:8a:3b:8d:06:a7:84:83:e1:4c:47:e8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
        Validity
            Not Before: Jul 15 12:55:27 2024 GMT
            Not After : Jul 14 13:00:27 2025 GMT
        Subject: CN=E265E151634F5DC29F2044861A2EF3B4BF275295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:8c:7a:e9:0e:ed:89:53:3e:c8:08:5c:32:
                    ab:24:48:87:d2:8d:75:47:61:24:f2:23:5e:a0:27:
                    40:6d:57:84:d1:88:b7:89:a0:60:13:f4:fa:52:18:
                    06:0d:23:f6:47:f0:8c:13:a6:66:13:e6:00:a7:0e:
                    8a:50:8a:f7:53:e6:93:7d:5f:74:02:e8:49:2c:4e:
                    bf:b5:c2:3a:b1:7c:1f:c0:53:eb:4b:d8:77:5b:52:
                    26:03:d0:97:29:96:63:69:f3:2a:78:3e:1c:e3:88:
                    92:e4:02:ba:ab:60:02:b7:f5:dd:7b:a1:07:8c:79:
                    67:7a:b9:f5:ae:99:7b:d2:77:0f:d5:44:f5:fc:fc:
                    d5:55:0e:69:e2:da:0b:d0:7c:bc:1a:42:34:83:4c:
                    7d:b1:23:46:c4:e6:3c:69:b3:cd:13:77:5f:c4:6d:
                    a3:0f:10:51:38:b7:f7:e1:d7:07:99:9c:12:a7:63:
                    c9:17:25:ce:83:0b:58:de:7c:8c:69:93:01:4b:f9:
                    c7:c6:70:d5:f7:91:31:c0:b0:68:d1:23:61:51:03:
                    c5:89:1f:72:2c:29:38:ef:d0:56:cb:60:11:fa:6c:
                    fd:3f:75:fb:2a:ca:7f:c6:c6:e7:a1:c3:65:b4:24:
                    01:2f:63:1e:89:bd:61:52:f2:6d:54:78:bc:97:c4:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:65:E1:51:63:4F:5D:C2:9F:20:44:86:1A:2E:F3:B4:BF:27:52:95
            X509v3 Authority Key Identifier:
                keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.169.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:04:53:4c:b3:2a:94:3a:65:33:e0:96:2f:b1:b3:2d:67:0a:
         cb:7f:d2:4a:7d:9d:a8:91:1a:00:9e:59:34:d3:c3:14:e5:b6:
         53:74:fd:93:73:e2:dc:b1:26:98:68:00:47:f7:a4:c3:03:b4:
         31:6f:e6:6d:f8:1d:8e:68:86:dd:d6:2a:60:08:3d:c6:00:a8:
         01:b2:25:0f:9e:08:30:6a:7f:4b:73:e8:94:fc:e4:de:9e:3c:
         bb:56:eb:e7:db:ad:90:21:dc:fd:0a:9a:88:89:c5:30:75:1a:
         e9:54:ff:f0:d7:80:e2:d9:cf:10:20:28:7b:70:73:34:e0:05:
         41:34:0c:6f:f9:f7:c5:bd:70:8c:51:9b:09:7e:f4:a7:9d:df:
         ad:ec:e3:9a:07:ee:32:07:9e:4e:65:44:3b:c7:5c:ff:5b:91:
         ea:83:3d:05:8d:c1:ed:3a:c6:81:3e:16:77:3d:78:57:2f:26:
         25:2f:23:95:d7:88:bb:44:7e:a6:9c:14:0b:8c:18:a6:7a:62:
         82:48:a6:6f:4e:3e:ca:c1:79:bb:16:16:15:16:1a:17:4c:db:
         d6:1d:90:93:c4:0c:97:5d:12:be:a7:d4:d2:6f:67:14:f0:b9:
         6e:6a:32:0a:8b:c5:62:b0:34:d0:61:e2:af:49:7f:74:09:f2:
         43:d5:25:e5
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 16 07:47:06 2024 by rpki-client on console-ams.rpki-client.org