Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362393a3a2f34382d3438203d3e20323135313335.roa
File:                     326130663a383563313a3362393a3a2f34382d3438203d3e20323135313335.roa (raw, json)
Hash identifier:          pk/ysH3SE3wcYtwDAdyiJmTQP59AS1loVD0VLl6ZZ54=
Subject key identifier:   4B:5A:C2:9E:76:30:C1:4B:A7:4B:92:91:64:FA:42:16:FA:8F:EB:29
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       76C22A16AB44DA2AFB2C76DBDD8E898B3B0B4A10
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362393a3a2f34382d3438203d3e20323135313335.roa
Signing time:             Thu 25 Apr 2024 13:35:20 +0000
ROA not before:           Thu 25 Apr 2024 13:30:20 +0000
ROA not after:            Thu 24 Apr 2025 13:35:20 +0000
asID:                     215135
IP address blocks:        2a0f:85c1:3b9::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 23 May 2024 16:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c2:2a:16:ab:44:da:2a:fb:2c:76:db:dd:8e:89:8b:3b:0b:4a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: Apr 25 13:30:20 2024 GMT
            Not After : Apr 24 13:35:20 2025 GMT
        Subject: CN=4B5AC29E7630C14BA74B929164FA4216FA8FEB29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6c:d8:7f:ce:43:67:f0:99:b4:4b:cc:cf:75:
                    e6:00:d1:df:5c:58:1c:a3:71:8b:5f:d2:16:ae:53:
                    2d:9b:67:35:08:5d:7e:83:77:7a:78:5c:cc:fd:71:
                    3f:21:d5:2d:82:3e:eb:7a:ea:14:e1:a6:55:94:6f:
                    35:33:38:6b:60:fa:94:bd:3f:1a:49:f5:31:5f:d4:
                    ec:88:de:d5:e0:05:2d:59:88:b2:c7:7b:93:23:df:
                    d8:90:ef:f9:fc:f9:71:58:4f:02:53:ae:3c:f0:61:
                    53:da:15:83:36:67:11:05:5b:77:fe:33:d7:7e:1a:
                    1b:74:02:62:93:6e:17:96:0b:7b:6c:f7:2d:22:bf:
                    7a:5b:f9:2f:0a:3c:39:10:3a:57:5d:63:8f:7c:d5:
                    82:dd:9d:62:18:ab:a2:10:fc:f0:45:41:dc:f6:c3:
                    57:38:41:5f:45:aa:af:0e:3e:d3:02:b8:48:fc:64:
                    a5:89:72:3f:4b:08:84:03:08:de:a1:ea:08:40:5b:
                    42:7b:d8:c1:7e:5e:d0:5d:45:ec:12:42:58:d7:13:
                    28:b0:6f:be:b3:82:bc:96:b5:b5:c6:55:db:97:33:
                    ba:c8:4b:a9:2a:5f:a8:72:71:36:b4:06:b8:0f:93:
                    01:1c:91:b0:dd:f9:d8:44:3f:d1:a6:fb:69:cb:ee:
                    aa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5A:C2:9E:76:30:C1:4B:A7:4B:92:91:64:FA:42:16:FA:8F:EB:29
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/326130663a383563313a3362393a3a2f34382d3438203d3e20323135313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:3b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:66:58:e1:b6:01:fa:97:52:67:50:d9:98:54:57:55:de:89:
         22:02:6e:8d:7b:33:63:17:72:b5:d8:ac:b9:fe:0e:93:ac:fa:
         76:5b:a4:c8:3e:54:2e:15:f5:f6:d2:35:0c:2e:35:3d:4a:21:
         d8:33:84:42:b6:29:37:15:49:7b:e6:ae:43:f6:50:a0:82:13:
         d2:12:8d:6c:6e:4a:95:fe:bf:18:79:d6:0a:51:b2:0b:68:f1:
         c5:2e:85:62:c9:97:e5:e9:ae:bc:85:97:dc:d5:43:42:29:cd:
         6e:36:b8:aa:e5:84:41:0b:2f:1c:87:55:7c:6a:74:ab:0c:87:
         68:a7:37:4f:28:3f:06:36:55:b0:c5:56:94:af:ea:34:e2:3b:
         86:b6:72:1f:84:bb:56:86:91:79:4b:15:cc:f5:ff:1e:17:f5:
         62:20:64:dc:32:f7:dc:16:68:a4:5e:fe:9d:0e:ee:78:e7:a4:
         f4:47:65:b2:77:be:1a:9d:d5:0f:4b:1b:c6:10:08:5c:b1:90:
         af:c1:2e:8d:ba:ca:f3:17:fb:2a:cd:10:b0:d8:bb:56:78:cf:
         18:85:56:60:20:ee:3d:02:bf:39:d1:4d:6c:16:34:04:ac:b9:
         63:e3:e7:35:c2:7a:74:53:68:a0:df:d3:5a:53:52:6a:cd:2d:
         8e:c4:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----