Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a363038303a3a2f34362d3436203d3e20323136333131.roa
File:                     326130613a363034343a363038303a3a2f34362d3436203d3e20323136333131.roa (raw, json)
Hash identifier:          tCwnsHD3941PxZt0Bl032DrQ9yHtN+Oqv/581riiJyY=
Subject key identifier:   E9:CB:CA:51:EA:9E:87:F5:EE:52:9B:8A:55:F1:12:D9:6C:16:6E:C4
Certificate issuer:       /CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
Certificate serial:       75AB2C83B6A732A01BB8BA5FB5EEDE1CE45B7E0B
Authority key identifier: F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a363038303a3a2f34362d3436203d3e20323136333131.roa
Signing time:             Wed 26 Jun 2024 11:45:08 +0000
ROA not before:           Wed 26 Jun 2024 11:40:08 +0000
ROA not after:            Wed 25 Jun 2025 11:45:08 +0000
asID:                     216311
IP address blocks:        2a0a:6044:6080::/46 maxlen: 46

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 10:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ab:2c:83:b6:a7:32:a0:1b:b8:ba:5f:b5:ee:de:1c:e4:5b:7e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
        Validity
            Not Before: Jun 26 11:40:08 2024 GMT
            Not After : Jun 25 11:45:08 2025 GMT
        Subject: CN=E9CBCA51EA9E87F5EE529B8A55F112D96C166EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:b3:af:d4:bb:af:f6:71:ae:8a:69:73:a0:
                    29:54:09:cf:db:7e:bd:85:1a:f6:2c:ec:0e:f1:8c:
                    74:8f:9a:30:af:ea:cd:b9:ae:93:0c:92:19:18:f4:
                    c1:d4:28:4e:ac:44:bd:1d:e8:8e:47:cc:f8:d3:08:
                    52:b2:8f:5c:5c:e5:d9:62:32:c7:62:00:4d:e1:93:
                    04:38:e9:82:ea:fa:d6:96:9c:eb:5e:d2:46:a1:d0:
                    69:20:93:0c:0c:03:f8:45:87:2e:2d:ca:9d:ab:78:
                    7f:18:fc:18:95:d4:f7:45:d9:fc:65:f9:70:f7:16:
                    2e:32:13:bc:b9:84:29:6e:ef:90:d3:0c:49:2f:6e:
                    b7:28:a3:ec:9f:f3:79:2a:f6:f1:ef:42:0f:a7:fd:
                    03:ca:93:15:77:e3:08:33:93:b4:e0:3f:d2:40:91:
                    8c:03:09:de:5f:86:41:a3:2b:11:5f:06:05:6d:b6:
                    a8:b0:5f:8a:73:b8:e6:3e:08:9f:dd:98:ee:57:61:
                    9d:c3:2e:e1:22:c1:8d:87:da:4c:ac:3c:be:64:90:
                    aa:68:dd:1a:65:85:66:9f:e9:a8:9f:00:1a:68:bc:
                    2c:c0:de:e0:ec:40:a8:60:64:28:34:0e:3d:96:06:
                    79:56:10:ce:84:70:15:48:ef:21:85:54:a1:62:74:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CB:CA:51:EA:9E:87:F5:EE:52:9B:8A:55:F1:12:D9:6C:16:6E:C4
            X509v3 Authority Key Identifier:
                keyid:F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a363038303a3a2f34362d3436203d3e20323136333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6080::/46

    Signature Algorithm: sha256WithRSAEncryption
         5c:81:4d:c2:0a:4a:c7:a7:40:74:41:52:e1:f3:c4:5b:21:34:
         dd:2b:47:a7:a5:ef:83:77:63:ce:e3:ed:02:13:12:da:2a:d0:
         da:c5:a0:af:f6:52:03:45:5c:2c:1c:90:95:df:f1:15:34:c6:
         d5:d3:21:cb:08:28:fa:82:94:af:81:ef:36:31:c5:84:5d:a1:
         69:2b:b4:42:87:b5:30:69:90:69:85:92:76:0b:28:26:9c:03:
         ea:6a:65:db:1f:d3:b3:19:07:95:1a:9d:83:05:06:78:7a:97:
         5d:f0:2d:b6:00:92:d6:2c:f5:3b:5a:52:4d:e4:00:03:39:86:
         a8:25:ba:cb:1d:f2:d2:d7:e0:05:80:ab:a7:fa:c3:75:dd:1e:
         ef:4d:15:39:07:21:0d:ed:58:7e:bc:06:7b:ed:c2:25:e3:7b:
         af:4f:6d:ca:79:9d:cb:5a:d7:24:02:8d:50:be:24:ae:b6:08:
         ec:a6:5b:da:42:49:75:92:ac:ce:bd:dc:7a:2e:15:4e:a6:1d:
         8f:e6:6a:dc:03:bf:41:e1:ea:b5:71:be:fc:b6:8c:11:14:be:
         89:47:61:b6:ba:bb:01:cc:f7:44:76:bc:f5:c9:d4:15:67:20:
         a2:41:bc:7a:c7:7b:66:5d:06:8f:bd:a3:61:ac:47:fc:c5:2c:
         88:95:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----