Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/3/326131343a396530363a3a2f33322d3332203d3e203336333832.roa
File:                     326131343a396530363a3a2f33322d3332203d3e203336333832.roa (raw, json)
Hash identifier:          cC/630CsXueH7Vv40MH5Y5FBkftHn7tijcIAc9ioK58=
Subject key identifier:   D3:52:C6:03:2B:98:F1:E2:12:0E:97:FB:91:B9:0A:55:2C:9D:10:F8
Certificate issuer:       /CN=a640aa61f1d62b9c940459804ae11be99ad43842
Certificate serial:       1720017A4F70EED9AC5F4591FAA18C86ABAB437D
Authority key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/3/326131343a396530363a3a2f33322d3332203d3e203336333832.roa
Signing time:             Sat 18 Jan 2025 14:44:49 +0000
ROA not before:           Sat 18 Jan 2025 14:39:49 +0000
ROA not after:            Sat 17 Jan 2026 14:44:49 +0000
asID:                     36382
IP address blocks:        2a14:9e06::/32 maxlen: 32
Validation:               Failed, certificate revoked on Sun 19 Jan 2025 18:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:20:01:7a:4f:70:ee:d9:ac:5f:45:91:fa:a1:8c:86:ab:ab:43:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a640aa61f1d62b9c940459804ae11be99ad43842
        Validity
            Not Before: Jan 18 14:39:49 2025 GMT
            Not After : Jan 17 14:44:49 2026 GMT
        Subject: CN=D352C6032B98F1E2120E97FB91B90A552C9D10F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:43:a2:a2:d2:b1:41:93:30:a0:cd:6b:77:
                    ff:d8:dc:48:ed:f5:30:71:03:fc:77:9c:4e:b2:c0:
                    d6:51:a3:75:be:36:42:27:80:1c:95:37:57:06:f6:
                    25:37:d8:ee:42:b2:1d:d4:cc:1f:fd:34:2b:b5:5e:
                    03:e1:3e:5b:2c:02:69:b6:7b:46:d7:c5:d0:65:ce:
                    7d:2e:21:da:c1:79:ef:f7:bc:78:69:2b:26:d6:16:
                    06:b9:64:1b:a3:73:df:84:92:1f:9c:bf:1a:44:f1:
                    14:0a:96:d6:d6:b0:5b:12:28:c8:25:cd:21:d5:c6:
                    d2:f9:cf:74:9c:ea:8d:15:7a:0a:85:aa:80:c0:cf:
                    27:4d:8b:75:4e:1a:a5:3d:83:a0:78:df:ba:1c:74:
                    ec:67:5d:df:c2:d7:8a:11:8d:90:16:c1:66:db:b2:
                    3a:9f:1c:e5:5c:a1:41:9a:4e:1b:9e:0d:33:d5:98:
                    1a:f3:0e:25:ce:e3:7c:00:25:c7:d6:a3:83:76:4e:
                    ee:cd:77:ce:b9:62:03:0e:27:6e:d2:25:86:6d:d6:
                    5d:d6:f8:56:c3:8b:54:b5:83:59:4f:ad:c4:54:78:
                    f2:4f:88:07:9a:ca:c0:6d:35:41:e2:a8:a6:33:5d:
                    18:7b:ad:58:aa:3a:41:7e:72:27:52:ff:b4:bf:c0:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:52:C6:03:2B:98:F1:E2:12:0E:97:FB:91:B9:0A:55:2C:9D:10:F8
            X509v3 Authority Key Identifier:
                keyid:A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/3/326131343a396530363a3a2f33322d3332203d3e203336333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:9e06::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:55:17:e0:0e:ea:8f:bd:e7:e1:a2:a8:c1:e2:13:f3:1a:2a:
         5e:ac:04:e8:aa:c4:62:5d:e5:23:70:98:e5:41:e3:1a:b2:10:
         ea:df:37:1b:42:f0:02:13:0c:c9:28:f4:a0:22:fe:ee:f9:4e:
         61:e9:21:32:16:33:d4:6b:1a:16:f7:95:9a:11:e6:8d:e0:14:
         e0:b1:e2:33:9c:23:b3:16:11:49:d8:90:9d:b0:1a:49:fc:7d:
         0b:0f:9b:91:4f:75:ab:c3:74:ba:f1:4e:a0:23:0c:34:3c:72:
         d5:51:fd:1e:c7:6e:a5:ad:fa:df:0a:47:d0:f6:e4:51:0d:2f:
         03:ef:c8:08:d6:89:d2:1d:f0:b8:22:e0:d0:b2:cb:ec:2c:98:
         0e:7c:1a:96:7b:d8:4d:78:89:44:0e:07:75:70:95:d3:8a:2b:
         98:c0:d5:58:53:b0:9e:f8:98:21:ae:21:78:d2:45:18:c9:06:
         9d:8b:07:dd:95:bf:65:25:6a:21:3b:38:3f:41:1e:da:fb:d3:
         42:2d:39:38:6f:59:4d:d4:6b:1c:90:78:ae:27:3b:34:03:ca:
         0a:be:15:50:18:75:9f:63:94:a4:1c:b2:d5:e0:5a:5f:ff:6c:
         c2:7d:e7:7b:5c:7c:62:49:90:dd:69:58:90:60:de:ac:7b:c3:
         6f:b6:01:cc
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIUFyABek9w7tmsX0WR+qGMhqurQ30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTY0MGFhNjFmMWQ2MmI5Yzk0MDQ1OTgwNGFlMTFiZTk5
YWQ0Mzg0MjAeFw0yNTAxMTgxNDM5NDlaFw0yNjAxMTcxNDQ0NDlaMDMxMTAvBgNV
BAMTKEQzNTJDNjAzMkI5OEYxRTIxMjBFOTdGQjkxQjkwQTU1MkM5RDEwRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcN0OiotKxQZMwoM1rd//Y3Ejt
9TBxA/x3nE6ywNZRo3W+NkIngByVN1cG9iU32O5Csh3UzB/9NCu1XgPhPlssAmm2
e0bXxdBlzn0uIdrBee/3vHhpKybWFga5ZBujc9+Ekh+cvxpE8RQKltbWsFsSKMgl
zSHVxtL5z3Sc6o0VegqFqoDAzydNi3VOGqU9g6B437ocdOxnXd/C14oRjZAWwWbb
sjqfHOVcoUGaThueDTPVmBrzDiXO43wAJcfWo4N2Tu7Nd865YgMOJ27SJYZt1l3W
+FbDi1S1g1lPrcRUePJPiAeaysBtNUHiqKYzXRh7rViqOkF+cidS/7S/wMLnAgMB
AAGjggHbMIIB1zAdBgNVHQ4EFgQU01LGAyuY8eISDpf7kbkKVSydEPgwHwYDVR0j
BBgwFoAUpkCqYfHWK5yUBFmASuEb6ZrUOEIwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZh
Y2UvMy9BNjQwQUE2MUYxRDYyQjlDOTQwNDU5ODA0QUUxMUJFOTlBRDQzODQyLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcGtDcVlmSFdLNXlVQkZtQVN1RWI2WnJV
T0VJLmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcmVw
by5ycGtpLnNwYWNlL3JlcG8vTmV0aWZhY2UvMy8zMjYxMzEzNDNhMzk2NTMwMzYz
YTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzMzM2MzMzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhSe
BjANBgkqhkiG9w0BAQsFAAOCAQEAZFUX4A7qj73n4aKoweIT8xoqXqwE6KrEYl3l
I3CY5UHjGrIQ6t83G0LwAhMMySj0oCL+7vlOYekhMhYz1GsaFveVmhHmjeAU4LHi
M5wjsxYRSdiQnbAaSfx9Cw+bkU91q8N0uvFOoCMMNDxy1VH9Hsdupa363wpH0Pbk
UQ0vA+/ICNaJ0h3wuCLg0LLL7CyYDnwalnvYTXiJRA4HdXCV04ormMDVWFOwnviY
Ia4heNJFGMkGnYsH3ZW/ZSVqITs4P0Ee2vvTQi05OG9ZTdRrHJB4ric7NAPKCr4V
UBh1n2OUpByy1eBaX/9swn3ne1x8YkmQ3WlYkGDerHvDb7YBzA==
-----END CERTIFICATE-----