Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339643a3a2f34382d3438203d3e20323135323830.roa
File:                     326130663a383563313a3339643a3a2f34382d3438203d3e20323135323830.roa (raw, json)
Hash identifier:          sUbhlPR0mizBiQB9F8pbe/Qj2aZpS9SG3QWGcPcCs+o=
Subject key identifier:   51:7A:DB:47:77:E8:44:50:E2:13:0A:B1:13:CB:05:22:65:97:E5:A2
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       1CB850D742F940E9FB6C1AFF85419D51CC19872D
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339643a3a2f34382d3438203d3e20323135323830.roa
Signing time:             Tue 19 Mar 2024 17:53:08 +0000
ROA not before:           Tue 19 Mar 2024 17:48:08 +0000
ROA not after:            Tue 18 Mar 2025 17:53:08 +0000
asID:                     215280
IP address blocks:        2a0f:85c1:39d::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b8:50:d7:42:f9:40:e9:fb:6c:1a:ff:85:41:9d:51:cc:19:87:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: Mar 19 17:48:08 2024 GMT
            Not After : Mar 18 17:53:08 2025 GMT
        Subject: CN=517ADB4777E84450E2130AB113CB05226597E5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ba:c0:c7:af:0e:6a:4d:fa:6f:d9:7d:18:2c:
                    ec:4a:4c:7b:db:9e:40:5a:31:34:c8:bc:18:62:12:
                    4b:14:45:be:cd:88:c7:8c:ee:55:e6:89:4e:10:1e:
                    da:a5:21:fb:73:ff:9f:6a:04:6f:73:8a:67:4a:1f:
                    fe:0a:64:ac:30:b1:11:50:04:10:5c:5f:32:07:83:
                    a4:b1:48:f1:3a:b6:7d:66:c1:66:01:a5:d2:e7:6d:
                    da:ea:26:6b:93:3b:f1:de:14:52:e3:bc:af:bb:45:
                    53:e9:ec:fc:d4:8f:a4:75:03:ee:c3:c4:aa:1f:55:
                    7f:c6:0d:1c:2f:aa:a3:82:26:41:4a:09:50:ae:eb:
                    54:eb:21:3b:db:99:4b:4d:b7:c4:13:bd:e3:d9:1d:
                    47:d5:eb:24:95:d6:0e:6b:58:f1:ac:ce:8f:a0:1e:
                    4b:db:91:0e:72:33:01:fc:22:61:54:b5:fb:65:bb:
                    d2:e7:aa:01:5c:11:2a:8b:8e:9c:1a:d3:be:98:d7:
                    53:f1:fa:0d:a9:78:19:83:33:3c:be:fa:79:b2:cc:
                    c2:0e:91:3d:67:41:e6:34:20:2e:b2:41:ab:fb:8d:
                    43:2c:7a:9f:d2:72:97:a5:a9:7e:c7:a6:74:ec:f8:
                    60:44:20:0d:a1:31:29:41:a4:43:7f:9d:28:e0:aa:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7A:DB:47:77:E8:44:50:E2:13:0A:B1:13:CB:05:22:65:97:E5:A2
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3339643a3a2f34382d3438203d3e20323135323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:39d::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:10:e7:f0:e0:de:a7:7c:dd:f2:f1:a7:c3:24:09:30:13:1d:
         f8:4e:97:e0:e6:94:b6:97:c1:c3:e2:fd:a5:a7:d1:0e:6e:5a:
         2c:26:15:dd:b2:43:5c:67:26:5d:b6:1e:7c:aa:94:48:a4:15:
         9a:7f:b6:de:8c:10:9a:9a:a1:7a:dd:ea:f4:14:43:5a:58:33:
         c4:15:8e:87:74:bb:e7:9f:b7:97:4c:73:ec:d8:cf:5b:66:ed:
         a0:08:98:83:15:e5:97:f8:41:98:fd:9c:a5:70:6e:8b:b9:99:
         fd:e8:37:fa:1a:55:e1:91:76:8b:4f:76:43:9e:e9:6c:a5:c6:
         eb:59:23:8d:21:fb:93:c8:c5:7f:d8:9c:1e:25:e7:08:17:ba:
         b2:b9:7f:e7:86:54:26:9a:a4:c0:20:f5:45:37:1a:83:ea:d5:
         90:d5:f3:f3:f7:cb:80:4e:56:ba:e4:0d:29:6f:7e:30:da:50:
         00:05:cf:80:9e:cf:4a:c3:30:78:6c:29:ab:7e:f0:fe:17:3e:
         24:cc:e0:5b:8c:46:4a:f8:7e:26:b7:9c:df:0a:7f:76:8e:9e:
         56:b0:82:8d:77:71:67:bb:79:ab:08:18:97:68:7f:00:bc:7b:
         82:e4:8a:d1:7b:42:61:90:b2:cd:a7:8f:12:4b:d0:ea:98:7f:
         fd:3a:ac:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org