Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323030303139.roa
File:                     38322e3131382e32362e302f32342d3234203d3e20323030303139.roa (raw, json)
Hash identifier:          OsGS+OlT9cpMq0ltGRi1NIeMEX3rhST3DmosZW2hfec=
Subject key identifier:   27:E0:1D:25:D4:84:C9:37:F8:EE:8C:B7:F1:AA:60:12:2B:B9:DE:EA
Certificate issuer:       /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial:       0CDAAFE8B6B6A465F05CA28D10D3BC9F4C764962
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323030303139.roa
Signing time:             Tue 27 Jun 2023 08:17:09 +0000
ROA not before:           Tue 27 Jun 2023 08:12:09 +0000
ROA not after:            Tue 25 Jun 2024 08:17:09 +0000
asID:                     200019
IP address blocks:        82.118.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 26 Jul 2023 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:da:af:e8:b6:b6:a4:65:f0:5c:a2:8d:10:d3:bc:9f:4c:76:49:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
        Validity
            Not Before: Jun 27 08:12:09 2023 GMT
            Not After : Jun 25 08:17:09 2024 GMT
        Subject: CN=27E01D25D484C937F8EE8CB7F1AA60122BB9DEEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:f5:2b:76:f8:4a:00:f1:1f:02:a1:b6:41:
                    1f:9f:ee:6a:fe:4d:94:a2:d4:d1:fa:1f:97:2b:32:
                    6a:32:db:88:18:d7:95:4b:7f:ef:e2:14:34:bb:4e:
                    4d:18:89:3f:f2:4f:f8:10:78:0e:9a:01:62:d2:59:
                    5d:d8:aa:0e:d6:e3:2f:1d:00:b7:1a:64:71:0d:d5:
                    28:9f:68:27:53:63:de:5c:49:e1:34:6c:2c:7a:ac:
                    55:51:b0:ff:fc:0e:62:b6:ac:67:99:47:e6:85:c1:
                    16:04:51:de:0c:5d:ff:f7:26:fb:a2:ab:09:2a:f3:
                    76:fe:26:df:4e:d0:5c:ca:8d:3b:d9:82:14:39:96:
                    66:df:e4:9d:e8:fa:8b:90:12:cb:68:e5:ec:42:14:
                    db:81:f8:77:17:86:17:ab:f0:a6:59:56:39:00:c5:
                    65:cd:09:c8:53:f7:07:56:6c:b8:d0:07:01:22:fd:
                    f1:1d:d1:3a:c1:82:30:ed:03:8e:57:2f:78:f7:ee:
                    72:b9:39:27:a0:b6:c0:75:c4:d0:2c:3c:19:ef:8c:
                    21:65:bd:31:cb:83:47:4f:f8:02:35:28:9b:72:54:
                    03:96:98:e3:28:d2:67:4a:e8:e7:58:ef:d9:d5:1a:
                    11:38:7c:b4:43:84:15:24:63:c4:85:7c:cf:d8:6e:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E0:1D:25:D4:84:C9:37:F8:EE:8C:B7:F1:AA:60:12:2B:B9:DE:EA
            X509v3 Authority Key Identifier:
                keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323030303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.118.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:4d:8f:d3:43:8f:02:56:ca:5a:42:78:ef:be:47:5c:57:d4:
         79:74:d9:4b:b8:b3:23:f6:df:eb:e9:3d:db:6a:c9:0b:b6:9a:
         7b:9f:04:c7:57:b2:46:30:bd:51:6d:c2:ea:b7:8b:8d:0c:3a:
         8c:11:e8:3d:95:ea:ca:19:99:fb:fd:e9:b8:75:1e:4c:83:ca:
         c6:d8:70:76:08:5e:8e:3b:57:b8:89:99:f8:d7:18:e5:f3:21:
         dd:f6:b9:f6:6d:d9:f3:67:7f:ef:a3:25:d5:af:fe:8b:24:46:
         55:d1:66:f3:00:31:8f:87:49:c1:cb:a2:ca:80:5a:05:2d:bc:
         62:c3:34:44:31:60:e6:56:06:65:5f:20:00:ef:80:c7:f9:de:
         ff:be:99:be:46:69:86:9a:55:4a:9c:e9:8b:3c:9c:51:d1:1e:
         0f:56:81:b2:a5:c8:13:c5:e0:47:0b:07:a6:b5:bc:ec:b9:c6:
         5d:68:43:fa:3c:e1:8c:a8:86:41:e1:dc:69:37:45:08:93:04:
         97:9f:bf:78:32:74:fb:ca:f1:1d:a8:83:a6:e5:a6:d5:6c:af:
         49:21:a3:35:cb:c5:55:56:28:cf:0d:37:3f:95:c4:02:7a:53:
         5a:37:d9:a1:e2:02:69:04:37:f5:8a:a9:50:0f:e6:51:6a:39:
         8a:a8:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org