Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a363030303a3a2f34382d3438203d3e20323135353839.roa
File:                     326130613a363034343a363030303a3a2f34382d3438203d3e20323135353839.roa (raw, json)
Hash identifier:          d9AeWo7FZki6hyMVLubt/azgB6ui0mlh0ihnohluggQ=
Subject key identifier:   55:BA:76:46:5B:6E:7A:DE:01:FD:AB:99:22:EF:30:A6:54:F8:5F:FA
Certificate issuer:       /CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
Certificate serial:       561C6FDAD8D345B797DD555D1EBEFF980720DF51
Authority key identifier: F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a363030303a3a2f34382d3438203d3e20323135353839.roa
Signing time:             Thu 13 Jun 2024 17:48:08 +0000
ROA not before:           Thu 13 Jun 2024 17:43:08 +0000
ROA not after:            Thu 12 Jun 2025 17:48:08 +0000
asID:                     215589
IP address blocks:        2a0a:6044:6000::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 10:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1c:6f:da:d8:d3:45:b7:97:dd:55:5d:1e:be:ff:98:07:20:df:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
        Validity
            Not Before: Jun 13 17:43:08 2024 GMT
            Not After : Jun 12 17:48:08 2025 GMT
        Subject: CN=55BA76465B6E7ADE01FDAB9922EF30A654F85FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:ed:bb:9f:64:ae:90:48:7a:73:d5:2d:24:
                    08:aa:2c:f3:22:72:6d:88:2d:e9:9b:d2:37:f9:44:
                    57:d5:00:1a:f8:31:92:c6:3f:ae:3f:81:b4:e2:e2:
                    22:1b:5a:b7:04:1f:94:da:73:39:70:f1:90:69:29:
                    69:cc:56:95:6a:22:7f:23:90:97:5e:92:8b:5a:75:
                    c9:df:7e:67:48:d7:9d:9c:a0:0c:30:92:3a:4c:7f:
                    e2:7c:40:1f:bc:c3:66:2f:b7:d3:bf:ae:b7:9d:c8:
                    31:7e:b5:1b:ea:25:99:e2:29:a9:6e:8b:ed:19:b5:
                    26:79:f3:99:b5:3b:e6:41:69:bb:34:53:2e:5f:24:
                    88:98:ee:7a:82:03:ab:29:8e:0f:b2:12:4e:96:12:
                    75:48:9b:b9:b9:37:5b:7a:27:d0:28:6b:fc:52:6c:
                    51:c9:f9:bd:22:74:f5:7d:7f:b2:84:de:c5:cf:92:
                    a1:54:31:09:47:39:1f:97:58:69:99:71:82:69:c5:
                    6a:3f:20:22:75:d9:8f:85:ed:2b:91:96:1e:34:76:
                    d0:22:e2:14:d6:db:29:cd:78:a0:a3:7a:1c:a2:8d:
                    d1:d4:30:5a:2f:56:7e:0a:2c:45:1c:5a:3c:3f:ce:
                    19:07:c5:19:d8:6b:aa:7e:69:de:28:61:ed:b9:a8:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BA:76:46:5B:6E:7A:DE:01:FD:AB:99:22:EF:30:A6:54:F8:5F:FA
            X509v3 Authority Key Identifier:
                keyid:F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a363030303a3a2f34382d3438203d3e20323135353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:53:0f:d2:4c:e9:cd:44:f6:26:52:97:0b:d1:ca:5f:0f:98:
         32:6e:72:94:6d:f7:94:68:29:96:87:3a:d9:82:f7:3d:06:18:
         5a:4e:2d:45:89:91:fa:02:16:48:46:bc:fc:4a:49:fc:47:01:
         57:6a:20:a3:2d:af:a1:83:86:20:d3:65:b0:86:74:40:ae:c3:
         a5:c9:17:32:a1:6f:09:f0:a6:85:de:de:65:a4:ea:e4:e6:25:
         6a:f4:32:ee:cc:f4:b4:e5:86:74:a4:9e:f0:8c:90:c9:a2:54:
         b0:ca:c6:a0:90:78:e8:a8:6a:56:e8:bd:b3:c1:73:1b:bb:59:
         e3:ce:f9:14:4f:96:23:96:fd:74:7a:77:b7:c8:f0:6a:11:4f:
         84:7a:02:20:57:b3:86:9d:ba:6a:47:20:1c:cf:40:84:07:a1:
         d7:42:e0:c1:e2:84:3c:ce:6f:4b:68:e5:b3:f0:ad:89:17:4e:
         a6:bd:7b:e9:2e:1c:1e:d0:b7:06:3d:64:ac:92:38:01:fc:24:
         3a:ce:d2:52:09:d0:8d:79:c7:32:9f:24:75:6d:a2:7d:ee:ad:
         79:85:ee:48:03:7b:19:af:05:6a:3a:c7:d7:60:54:a5:e9:16:
         6a:65:90:78:ed:3e:c9:73:8c:60:08:6a:7f:53:fb:e2:9f:f4:
         ff:77:96:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----