Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3332363a3a2f34382d3438203d3e203434383736.roa
File:                     326130663a383563313a3332363a3a2f34382d3438203d3e203434383736.roa (raw, json)
Hash identifier:          5gfE/3L/TypHWdwVxwmHHKTNLyA6fvY4+gZHlj4YUZw=
Subject key identifier:   DD:7F:E1:9E:79:70:0E:BF:9E:87:8F:74:E1:C9:5D:4B:0A:7F:23:96
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       14B963BF3A89271AFA8A759D381458D608F250AE
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3332363a3a2f34382d3438203d3e203434383736.roa
Signing time:             Thu 02 Nov 2023 13:23:00 +0000
ROA not before:           Thu 02 Nov 2023 13:18:00 +0000
ROA not after:            Thu 31 Oct 2024 13:23:00 +0000
asID:                     44876
IP address blocks:        2a0f:85c1:326::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b9:63:bf:3a:89:27:1a:fa:8a:75:9d:38:14:58:d6:08:f2:50:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: Nov  2 13:18:00 2023 GMT
            Not After : Oct 31 13:23:00 2024 GMT
        Subject: CN=DD7FE19E79700EBF9E878F74E1C95D4B0A7F2396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:31:73:bb:a7:5a:a5:05:62:30:a2:37:30:
                    c6:aa:9d:7d:f3:3c:fa:3c:b3:4b:d0:b6:0e:60:43:
                    86:15:48:91:66:78:73:db:71:ec:59:12:4c:f0:bf:
                    cf:c2:3f:8c:5c:56:e5:8a:2e:77:dd:7c:61:48:ce:
                    5a:bb:cc:10:ef:5e:99:81:b3:c2:fe:53:87:4f:42:
                    88:59:d1:3c:58:86:13:24:65:3a:7f:78:21:a4:6e:
                    89:f9:77:39:5b:cd:1a:9a:7a:b9:2c:62:63:12:4e:
                    af:21:25:95:57:aa:b0:e0:d6:79:b0:12:7f:54:cb:
                    b8:12:43:af:8c:b7:b4:85:06:7c:98:72:41:91:73:
                    23:24:0e:b5:81:62:8a:0b:30:2f:ee:ac:ad:bd:9c:
                    55:0c:3c:65:7d:25:46:0f:c9:58:ac:93:49:2d:ca:
                    b8:45:04:fd:31:13:6c:eb:ae:5e:e6:16:e9:1f:a0:
                    b9:b7:09:1f:d9:70:a0:f2:55:89:bc:a5:8d:f2:10:
                    24:ce:92:dd:d6:d4:a0:f5:79:a7:c3:75:3d:82:ed:
                    91:23:e8:e7:ce:a1:a9:7d:ed:08:1f:99:6f:b1:6f:
                    e7:76:31:63:60:ec:32:a6:43:33:68:a8:55:c6:9d:
                    05:46:27:04:92:79:b3:34:bb:77:73:b5:ac:da:92:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7F:E1:9E:79:70:0E:BF:9E:87:8F:74:E1:C9:5D:4B:0A:7F:23:96
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3332363a3a2f34382d3438203d3e203434383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:326::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:2a:b3:fb:0b:22:9e:74:64:2e:79:39:58:b0:31:c7:14:40:
         03:d8:78:34:f6:aa:b5:6f:47:70:1d:93:3b:92:e0:b3:fd:cd:
         85:eb:88:12:a9:3e:4e:1a:ab:36:32:5a:d0:e8:d8:42:ae:4c:
         f7:44:04:ea:59:b6:c3:63:7a:2c:74:d9:5d:6d:de:95:dc:08:
         1a:f3:c9:08:9a:82:c7:92:26:76:62:00:30:55:57:86:cc:ed:
         a0:a3:15:4c:2e:11:6c:4b:0d:7d:07:12:6a:94:16:2b:f8:07:
         01:9c:0f:aa:9f:7b:04:57:76:d2:8c:db:73:a4:f3:46:6d:db:
         75:3c:72:d8:31:3e:be:fb:fe:c4:01:59:e7:f7:0c:2e:08:dd:
         58:17:9c:50:c4:ec:ef:20:bc:6a:37:e9:63:c0:31:3b:07:81:
         69:1f:62:a0:9c:a9:e1:98:e6:ea:0d:a1:33:d3:85:4c:8f:3f:
         2f:80:2e:d4:74:0d:b6:8e:70:07:88:05:6d:fa:9a:d7:74:f2:
         84:fc:38:f2:5a:29:20:ad:77:3e:47:e4:b9:46:bb:15:65:15:
         09:78:1f:cd:12:cf:41:18:d6:32:e7:0d:8c:e0:f3:a1:ce:a3:
         dd:a2:46:c1:64:db:ce:0f:57:7a:7d:f0:6e:ba:3d:d2:70:0f:
         7a:46:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----