Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS204844.roa
File:                     AS204844.roa (raw, json)
Hash identifier:          TYQol8dH6K+tfSxlbVN79n82fud3Im83VW+gJRXBPeI=
Subject key identifier:   EE:BD:2C:6C:7F:F4:FB:B1:34:25:89:02:EC:54:61:22:FC:B1:D0:78
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       5631A1BC54F5F481F0F7FF732936854B431D114F
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS204844.roa
Signing time:             Thu 06 Jun 2024 03:43:37 +0000
ROA not before:           Thu 06 Jun 2024 03:38:37 +0000
ROA not after:            Thu 05 Jun 2025 03:43:37 +0000
asID:                     204844
IP address blocks:        2a0f:85c1:801::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 03:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:31:a1:bc:54:f5:f4:81:f0:f7:ff:73:29:36:85:4b:43:1d:11:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: Jun  6 03:38:37 2024 GMT
            Not After : Jun  5 03:43:37 2025 GMT
        Subject: CN=EEBD2C6C7FF4FBB134258902EC546122FCB1D078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:90:6f:c8:d8:41:66:11:91:b6:dd:d9:6e:
                    79:f8:f9:2a:71:3a:1b:83:61:1a:ef:d9:b4:1f:9e:
                    c4:f6:5b:1c:b0:05:53:17:35:b7:a2:b1:45:f5:d1:
                    73:71:46:8a:53:bf:90:46:78:c5:04:18:5f:8a:a2:
                    c5:75:ec:69:cd:32:67:04:f9:9a:4b:e4:1f:4e:4f:
                    ac:ee:9d:dd:8b:23:11:3a:2f:b9:60:ac:2b:5d:29:
                    49:80:2c:69:a7:c1:40:ee:68:c9:ee:03:1f:25:93:
                    dd:5a:ee:bc:8a:44:e6:ec:12:cd:90:32:89:17:86:
                    34:0b:ac:ab:37:dc:80:e1:2f:05:52:51:74:3b:63:
                    e2:ae:cf:a7:b6:d0:fb:54:6f:5c:3b:09:e0:c4:f1:
                    b8:50:b1:1a:ce:9e:6c:cd:dc:3e:4c:c6:6a:be:09:
                    4f:c0:8a:0d:79:26:c5:e6:0b:60:49:ff:a1:06:00:
                    fd:e6:65:c5:fb:db:60:41:24:e6:de:8e:37:39:14:
                    83:39:2f:02:27:81:69:08:e7:fb:f5:d4:54:f7:9f:
                    2d:87:cf:99:ea:a6:75:08:b3:c5:df:51:74:d2:38:
                    8c:dc:85:5a:e2:a2:5f:d0:c7:c7:66:3e:81:20:a1:
                    ef:46:72:86:83:06:d4:fd:16:66:7c:d4:e0:41:ce:
                    75:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BD:2C:6C:7F:F4:FB:B1:34:25:89:02:EC:54:61:22:FC:B1:D0:78
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS204844.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:801::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:52:49:52:fe:97:56:27:d4:7a:8e:2d:83:d6:b6:72:13:ec:
         bc:89:e9:a1:52:2d:e7:a6:04:41:17:0f:85:da:96:ca:aa:d4:
         64:5a:9e:38:e8:5c:1c:7e:95:62:37:71:74:66:90:e5:8b:50:
         6e:ee:60:d2:57:d8:6c:e5:44:be:9b:3e:f6:73:ec:47:97:53:
         ed:e5:60:04:e5:69:cd:2a:eb:04:77:1e:a2:fa:99:fd:6f:74:
         4d:24:89:d2:7a:db:20:fb:1b:b2:05:60:bd:ac:fc:e6:af:b4:
         15:88:bb:9f:2a:76:bf:29:0c:26:b3:4c:c4:a6:68:e5:44:34:
         79:6a:fd:52:e7:bb:dd:73:46:26:54:45:fb:a7:f2:e2:46:f3:
         b7:1b:88:90:19:1b:0b:f9:ea:48:30:f8:3f:a0:ba:c3:08:f9:
         65:8a:1a:2e:78:26:35:40:4b:44:32:3c:25:ae:e8:e4:b4:a6:
         ea:88:d7:01:c8:aa:07:85:9a:22:58:0c:92:73:33:9c:7a:de:
         49:e4:e5:06:f0:9f:b7:89:4f:26:24:3d:bd:76:3f:ac:5d:79:
         74:9c:d9:42:b5:c9:aa:5f:4b:07:ed:11:1c:44:e4:d3:94:72:
         62:37:74:82:b6:03:fe:96:31:2d:4a:f3:f1:62:d9:8a:bf:45:
         54:6c:1b:c2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUVjGhvFT19IHw9/9zKTaFS0MdEU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yNDA2MDYwMzM4MzdaFw0yNTA2MDUwMzQzMzdaMDMxMTAvBgNV
BAMTKEVFQkQyQzZDN0ZGNEZCQjEzNDI1ODkwMkVDNTQ2MTIyRkNCMUQwNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBJBvyNhBZhGRtt3Zbnn4+Spx
OhuDYRrv2bQfnsT2WxywBVMXNbeisUX10XNxRopTv5BGeMUEGF+KosV17GnNMmcE
+ZpL5B9OT6zund2LIxE6L7lgrCtdKUmALGmnwUDuaMnuAx8lk91a7ryKRObsEs2Q
MokXhjQLrKs33IDhLwVSUXQ7Y+Kuz6e20PtUb1w7CeDE8bhQsRrOnmzN3D5Mxmq+
CU/Aig15JsXmC2BJ/6EGAP3mZcX722BBJObejjc5FIM5LwIngWkI5/v11FT3ny2H
z5nqpnUIs8XfUXTSOIzchVriol/Qx8dmPoEgoe9GcoaDBtT9FmZ81OBBznWjAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU7r0sbH/0+7E0JYkC7FRhIvyx0HgwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZjMjBhZGQzLWE4OGUt
NGJiMi1hODRkLTU1ZGEyMTI4ZjE5Ni8wL0FTMjA0ODQ0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQgBMA0GCSqGSIb3DQEBCwUAA4IBAQAnUklS/pdWJ9R6ji2D1rZyE+y8iemhUi3n
pgRBFw+F2pbKqtRkWp446FwcfpViN3F0ZpDli1Bu7mDSV9hs5US+mz72c+xHl1Pt
5WAE5WnNKusEdx6i+pn9b3RNJInSetsg+xuyBWC9rPzmr7QViLufKna/KQwms0zE
pmjlRDR5av1S57vdc0YmVEX7p/LiRvO3G4iQGRsL+epIMPg/oLrDCPllihoueCY1
QEtEMjwlrujktKbqiNcByKoHhZoiWAySczOcet5J5OUG8J+3iU8mJD29dj+sXXl0
nNlCtcmqX0sH7REcROTTlHJiN3SCtgP+ljEtSvPxYtmKv0VUbBvC
Generated at Fri Jul 12 04:50:12 2024 by rpki-client on console-ams.rpki-client.org