Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e20383334.roa
File:                     39322e3131342e342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          tKPIH9/spJ2WO7vAwlqfdjXyHSNkdF5j3hwAqXfxahE=
Subject key identifier:   9E:B6:AE:2A:66:13:C7:51:4A:48:A6:97:0D:B0:75:D8:60:7F:96:91
Certificate issuer:       /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial:       1437C10CB5E3B839DA3A3146E390C3B74572B8A1
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e20383334.roa
Signing time:             Mon 19 Aug 2024 15:35:26 +0000
ROA not before:           Mon 19 Aug 2024 15:30:26 +0000
ROA not after:            Mon 18 Aug 2025 15:35:26 +0000
asID:                     834
IP address blocks:        92.114.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 24 Aug 2024 17:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:37:c1:0c:b5:e3:b8:39:da:3a:31:46:e3:90:c3:b7:45:72:b8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
        Validity
            Not Before: Aug 19 15:30:26 2024 GMT
            Not After : Aug 18 15:35:26 2025 GMT
        Subject: CN=9EB6AE2A6613C7514A48A6970DB075D8607F9691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:68:1a:a1:25:6a:86:ff:ba:11:e7:fa:d3:
                    f6:ca:a0:9e:7a:6d:39:d0:c5:6d:60:24:17:c4:52:
                    8f:52:9f:af:cc:76:9a:de:e1:a2:90:12:55:ec:f3:
                    f6:da:57:6b:45:22:48:af:19:1f:2a:ac:f1:b7:d4:
                    97:bc:12:01:e3:2d:36:21:23:c8:79:42:60:2a:22:
                    87:66:65:cf:76:a1:69:e1:d4:71:f7:4d:4d:bd:c1:
                    2f:ac:90:44:c2:82:99:89:61:f6:33:72:c4:c1:b6:
                    46:fc:7f:4d:05:28:83:28:17:eb:25:3d:90:28:c9:
                    29:d6:74:94:3f:53:c9:91:3b:f2:f0:aa:31:41:46:
                    79:bf:9e:26:a2:e6:3e:da:a1:8e:c1:25:b1:46:06:
                    1e:fe:19:bd:04:88:61:d4:1d:04:e5:7e:a3:ab:75:
                    15:59:85:a9:43:15:d4:b6:b5:f7:da:f3:0d:c5:c6:
                    d2:ed:2e:c8:4a:c9:8b:c6:70:6b:71:b4:6e:f0:ba:
                    74:90:63:da:b1:9b:a9:4a:16:ad:df:00:a8:e0:35:
                    cb:56:0e:7c:d3:91:e9:b4:5e:78:0b:5d:fc:42:e8:
                    1c:b7:2e:17:e4:a6:7f:15:7c:16:01:30:ec:05:04:
                    2f:b3:b2:ea:76:e6:b8:8b:4f:86:5b:ed:b6:a7:b4:
                    06:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B6:AE:2A:66:13:C7:51:4A:48:A6:97:0D:B0:75:D8:60:7F:96:91
            X509v3 Authority Key Identifier:
                keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.114.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:d4:70:14:35:0f:de:3b:a2:6c:90:f1:45:3a:3f:16:f2:34:
         10:dd:01:1f:16:6a:a6:7b:bd:06:17:c8:42:c2:20:c5:19:fd:
         f7:37:2d:13:4d:cb:cd:51:99:25:7f:96:91:df:a6:ff:c2:30:
         87:b6:04:d2:66:48:07:96:3d:6d:9b:6f:21:ed:8c:6b:52:9c:
         79:f0:8f:f1:e5:a7:cf:bf:a6:50:5c:08:04:44:68:ab:28:9c:
         60:51:15:30:d0:2d:49:9d:f0:3e:16:c9:11:3e:cc:2d:5d:0f:
         de:9d:a1:7a:df:a8:7b:4c:c8:08:ee:53:34:db:d3:0f:84:c6:
         64:b6:20:5b:09:08:e0:98:95:4e:d0:29:4a:70:cc:5d:4b:81:
         7b:7e:9e:16:76:61:cc:f7:5f:93:4c:2b:5f:a7:c7:d7:1b:e2:
         9b:5e:78:25:92:f7:64:ea:4e:75:9e:16:79:ce:b2:bd:38:31:
         ad:87:cb:8c:27:53:18:c1:c8:3f:ee:06:93:0a:51:fe:2b:2f:
         93:6b:98:90:81:ca:34:3b:c2:28:ee:bb:3d:bc:af:ff:66:54:
         f2:43:cb:0f:e0:f1:77:57:bd:45:a0:e4:8b:1d:dd:b3:fa:ee:
         b9:df:87:d0:ac:4f:c3:c1:ac:46:67:6a:f7:54:d7:db:20:1a:
         6e:cb:20:69
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 24 19:33:35 2024 by rpki-client on console-ams.rpki-client.org