Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38302e36352e3230392e302f32342d3234203d3e203631333137.roa
File:                     38302e36352e3230392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          avdjzHk80t1ejLW2nf2oizj0dN/3LK1AVk1tEaujjR0=
Subject key identifier:   0D:E4:1A:B4:73:A7:BE:24:0C:E0:E0:66:C0:7A:A9:C9:4B:60:CD:33
Certificate issuer:       /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial:       05F35D0B9074C8C2FDC4EF4F71AA75D6D5CD5F03
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38302e36352e3230392e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 26 Feb 2024 08:53:49 +0000
ROA not before:           Mon 26 Feb 2024 08:48:49 +0000
ROA not after:            Mon 24 Feb 2025 08:53:49 +0000
asID:                     61317
IP address blocks:        80.65.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 08:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f3:5d:0b:90:74:c8:c2:fd:c4:ef:4f:71:aa:75:d6:d5:cd:5f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
        Validity
            Not Before: Feb 26 08:48:49 2024 GMT
            Not After : Feb 24 08:53:49 2025 GMT
        Subject: CN=0DE41AB473A7BE240CE0E066C07AA9C94B60CD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:a5:93:40:d3:ac:73:d6:3f:92:12:72:64:
                    17:86:1f:ee:97:d9:af:19:7f:26:7b:41:38:7b:53:
                    8b:a2:9d:87:de:ac:d0:dc:e6:3f:4d:81:31:67:9e:
                    58:d1:a2:2e:87:3c:33:c0:1d:b6:28:5f:c4:3c:2a:
                    66:9d:2a:6c:5b:e7:80:35:31:90:ff:ec:39:b6:7f:
                    38:92:df:56:62:fd:9b:bb:f1:f8:23:7e:1a:a2:a0:
                    3e:30:11:98:08:4a:50:d5:c0:89:cf:07:e4:a4:cb:
                    a6:97:ba:16:91:fb:55:bb:39:fd:e0:a4:a6:e6:68:
                    80:41:fd:51:e2:b2:ad:c1:61:82:37:89:1d:9b:93:
                    f3:15:e4:a1:aa:15:78:06:b4:48:ea:43:a9:5d:0f:
                    24:af:a4:42:a5:42:bb:d0:89:88:d4:57:eb:f4:e0:
                    9a:d2:e8:06:ec:ec:3e:ed:76:7c:af:4b:6d:98:cd:
                    d1:58:9f:f9:4f:23:05:9e:0a:c5:a2:8b:73:7b:47:
                    17:8f:53:43:bb:30:0c:ab:45:8c:84:22:d5:00:f1:
                    f2:7c:e6:f8:62:89:05:2e:1c:a7:09:94:de:93:5b:
                    27:5a:fa:af:82:e3:fa:ca:92:6b:38:bf:10:1f:e8:
                    3c:e0:ca:52:f3:5d:5d:5b:81:8a:0b:07:a6:4b:cc:
                    f3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E4:1A:B4:73:A7:BE:24:0C:E0:E0:66:C0:7A:A9:C9:4B:60:CD:33
            X509v3 Authority Key Identifier:
                keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38302e36352e3230392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.65.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:10:d4:e0:65:b0:ba:f0:70:aa:d7:8e:da:3e:bf:2f:e3:
         a3:95:63:13:d9:0b:2e:f6:b3:d1:68:ab:a8:dc:4a:a9:65:27:
         27:7b:d8:f9:64:b3:f1:45:d3:20:ad:54:90:e8:e0:97:15:b3:
         c4:aa:82:81:a4:5d:59:8e:3e:5c:1f:94:61:8d:de:0a:2b:44:
         13:76:5f:34:79:b8:d2:53:bb:2f:07:8b:2e:8e:56:f4:f8:95:
         a1:cf:59:2a:26:6f:b4:72:c9:f6:5b:cc:a3:10:9f:30:38:04:
         e4:81:c1:81:af:fc:c6:44:d1:01:90:a3:f8:c6:0c:67:78:6e:
         73:dd:07:b3:bc:cd:30:85:a7:6f:ae:93:ec:ba:10:81:21:71:
         77:a7:d4:a7:ec:9b:ad:6c:86:ce:57:ea:92:d1:79:42:0a:60:
         2d:ac:f7:4f:15:21:96:85:3c:59:b6:4e:00:d6:55:51:2f:35:
         57:28:db:80:a1:c0:b3:2d:87:04:b2:15:84:d6:26:f3:72:a7:
         58:14:24:3d:13:05:a4:61:7d:61:47:11:29:ad:a6:4a:26:f3:
         d8:87:e3:fb:15:7f:48:b3:b4:03:9e:0a:22:8b:4e:74:f4:66:
         0c:97:97:c9:c9:fd:96:2d:52:95:ca:65:08:2b:f2:b7:45:f2:
         24:63:35:30
-----BEGIN CERTIFICATE-----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Generated at Fri Mar 15 13:41:26 2024 by rpki-client on console-ams.rpki-client.org