Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/0/326130363a613334303a3a2f33322d3332203d3e203437363839.roa
File:                     326130363a613334303a3a2f33322d3332203d3e203437363839.roa (raw, json)
Hash identifier:          EM/Phd1oudS18FkWrPQxgzr0qIdjeRoCyYm+THJOrpg=
Subject key identifier:   06:38:D6:8C:F6:16:98:51:5C:E8:6F:31:60:5A:73:87:26:E5:F4:A4
Certificate issuer:       /CN=73a83c810157e3e8511eebe39cfcad16fa329700
Certificate serial:       6FFA2C5AF6A8F5A740C3F4C53E52485C361844EA
Authority key identifier: 73:A8:3C:81:01:57:E3:E8:51:1E:EB:E3:9C:FC:AD:16:FA:32:97:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/0/326130363a613334303a3a2f33322d3332203d3e203437363839.roa
Signing time:             Sun 11 Feb 2024 06:23:07 +0000
ROA not before:           Sun 11 Feb 2024 06:18:07 +0000
ROA not after:            Sun 09 Feb 2025 06:23:07 +0000
asID:                     47689
IP address blocks:        2a06:a340::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 19:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fa:2c:5a:f6:a8:f5:a7:40:c3:f4:c5:3e:52:48:5c:36:18:44:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a83c810157e3e8511eebe39cfcad16fa329700
        Validity
            Not Before: Feb 11 06:18:07 2024 GMT
            Not After : Feb  9 06:23:07 2025 GMT
        Subject: CN=0638D68CF61698515CE86F31605A738726E5F4A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:a8:ec:dc:8c:d5:c4:3b:22:62:90:d7:02:
                    05:7e:0a:ca:d2:34:23:b5:9c:43:5c:d6:6a:44:62:
                    92:39:40:0b:f2:d6:f5:8f:ee:fb:dc:0d:8c:e0:02:
                    86:ca:c1:37:bb:da:17:ac:d1:5c:c2:27:2b:0e:8b:
                    9f:e4:9f:c1:b4:29:f6:2a:a7:f0:0d:87:bb:7c:9c:
                    3b:f2:fd:bc:14:87:c5:1d:1b:68:f4:4b:16:23:d9:
                    16:49:0a:bd:39:25:00:8a:f7:45:5b:74:84:7d:39:
                    ea:46:25:82:77:84:25:cd:98:f3:cc:ea:34:a3:9d:
                    0f:de:c6:14:25:36:76:3a:04:7b:42:dd:e1:8d:a9:
                    0e:be:5e:27:0f:47:3b:a6:a1:b5:de:89:73:f9:45:
                    1d:00:04:19:79:af:3c:d1:84:38:63:ee:e2:f4:c1:
                    3d:eb:a6:d4:f9:c7:77:83:fe:57:23:60:e5:12:06:
                    65:54:70:35:e0:ac:41:7f:dc:62:0f:aa:7c:2f:5a:
                    6f:6e:86:40:d0:e8:12:03:ed:ee:19:61:fa:e7:44:
                    1e:71:db:0e:91:22:50:aa:10:48:88:be:2d:b1:1d:
                    28:47:86:11:9d:69:1d:78:99:d4:e7:cd:56:bf:11:
                    71:a1:79:d9:6a:72:3f:27:bd:b8:51:47:06:fd:ed:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:38:D6:8C:F6:16:98:51:5C:E8:6F:31:60:5A:73:87:26:E5:F4:A4
            X509v3 Authority Key Identifier:
                keyid:73:A8:3C:81:01:57:E3:E8:51:1E:EB:E3:9C:FC:AD:16:FA:32:97:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/0/326130363a613334303a3a2f33322d3332203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a340::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:1f:8b:11:74:d6:af:24:f9:d8:00:81:e8:23:31:91:a7:13:
         4e:eb:e2:51:3d:af:7d:8a:73:0b:3e:45:de:50:25:4e:06:d7:
         59:25:79:c6:9b:98:c4:ab:60:dd:9f:5b:95:1d:aa:07:47:8a:
         81:a0:41:4a:3a:46:76:67:18:e5:04:35:02:31:39:67:92:f7:
         6e:53:81:a1:2f:b1:50:1f:a1:29:70:c6:f2:7f:e0:0a:41:94:
         f3:64:02:2b:c4:79:00:31:3f:c7:07:ca:a1:93:7f:83:78:87:
         cc:0b:98:50:de:30:13:39:6c:bb:cb:ad:59:e0:3e:57:e7:c6:
         51:9d:88:cf:b0:d8:5d:33:e2:8b:86:6c:33:2d:f4:c5:94:8a:
         af:1f:f6:e9:77:0a:a6:2e:9c:1c:cf:d7:4b:41:ca:05:a4:8e:
         91:42:63:10:b9:49:bd:e6:91:c3:bb:4c:74:65:97:65:25:20:
         21:1f:f5:92:43:38:6d:f9:2e:cc:4d:50:eb:37:d9:be:4b:23:
         17:3f:ae:7a:89:7e:f9:7e:ee:9b:74:a0:41:47:f5:87:c0:85:
         fc:29:b3:ff:e8:51:ad:55:45:ba:58:42:78:4f:63:a5:e1:6a:
         ea:d7:43:8d:30:49:b0:52:d7:95:3e:03:51:70:e5:b8:90:e9:
         eb:57:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----