Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a363430303a3a2f33382d3430203d3e20323134353433.roa
File:                     326130613a363034343a363430303a3a2f33382d3430203d3e20323134353433.roa (raw, json)
Hash identifier:          nyVzGjzbvGsIx/7iDaeXv48IABNxcYdAgqVBH454lLw=
Subject key identifier:   06:27:8A:AF:5A:27:04:5B:02:A0:DA:F5:D9:9A:6C:FC:87:9A:9F:00
Certificate issuer:       /CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
Certificate serial:       5F5BCF93F3E887379B85D9CE6755B38DA96DD4BD
Authority key identifier: F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a363430303a3a2f33382d3430203d3e20323134353433.roa
Signing time:             Mon 15 Jul 2024 12:54:47 +0000
ROA not before:           Mon 15 Jul 2024 12:49:47 +0000
ROA not after:            Mon 14 Jul 2025 12:54:47 +0000
asID:                     214543
IP address blocks:        2a0a:6044:6400::/38 maxlen: 40

Validation:               Failed, certificate revoked on Sun 21 Jul 2024 16:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5b:cf:93:f3:e8:87:37:9b:85:d9:ce:67:55:b3:8d:a9:6d:d4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
        Validity
            Not Before: Jul 15 12:49:47 2024 GMT
            Not After : Jul 14 12:54:47 2025 GMT
        Subject: CN=06278AAF5A27045B02A0DAF5D99A6CFC879A9F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:96:21:39:18:bd:a0:f9:6d:a2:1e:2b:56:
                    c7:5c:f7:c6:61:b1:71:32:13:8d:8c:c9:72:46:0e:
                    50:2b:44:b5:d1:d1:06:ec:82:54:b0:20:ec:d1:05:
                    cb:8b:ab:e2:50:43:b3:df:7b:db:7a:c3:d8:bc:84:
                    4c:80:ca:be:68:97:06:bc:c4:77:67:1f:c6:df:67:
                    ff:77:f4:13:35:e7:aa:e8:80:51:6d:c2:a7:d6:f0:
                    38:ce:3b:48:00:b3:d2:31:b5:78:7c:b8:ef:ca:f8:
                    f3:f4:29:b3:6a:8d:50:0f:17:04:7c:ea:70:38:97:
                    60:5f:a9:5e:93:f9:ca:6c:6a:36:99:f2:b8:45:63:
                    52:4a:7c:44:73:69:ea:d2:67:2a:fc:22:44:51:68:
                    00:00:16:c5:3d:8f:10:8a:11:75:48:68:66:cc:fd:
                    d4:9b:8f:69:28:7d:33:da:46:bd:87:71:6f:a6:c5:
                    86:2b:9a:54:c4:a1:d3:44:87:e0:83:4f:25:d6:ad:
                    4d:27:52:78:ce:42:01:b9:d9:60:d6:d1:a4:9e:0f:
                    29:2d:58:c8:60:70:ae:5e:41:6f:56:04:54:95:0d:
                    de:c2:ce:57:ce:da:a9:56:e5:f9:aa:f9:65:5e:df:
                    dd:7b:a5:ba:7b:0e:1d:dd:86:ac:aa:fa:e9:cd:a0:
                    36:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:27:8A:AF:5A:27:04:5B:02:A0:DA:F5:D9:9A:6C:FC:87:9A:9F:00
            X509v3 Authority Key Identifier:
                keyid:F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a363430303a3a2f33382d3430203d3e20323134353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6400::/38

    Signature Algorithm: sha256WithRSAEncryption
         5d:5b:1d:ac:b9:03:b6:ed:ed:7c:82:02:a8:b9:7a:2f:30:30:
         9d:84:e1:88:2b:ce:cd:f0:37:7e:7e:34:90:9c:a1:42:92:9b:
         3f:2c:e3:31:ff:07:9a:15:28:d7:f0:26:d4:58:b6:a4:b0:f5:
         bd:02:37:53:d3:d5:6e:e6:25:13:46:ed:da:59:c0:34:82:cf:
         9e:b2:90:64:23:da:b3:5d:e8:43:8c:3c:de:86:99:c6:63:d2:
         e6:0f:85:80:2e:ed:d5:df:3a:61:38:bc:55:66:96:a2:fa:68:
         ff:83:70:d9:ff:cc:2b:a4:c6:e8:21:05:8d:3d:87:91:7f:27:
         11:13:c2:da:43:0e:c6:b9:c5:c5:6b:ab:d1:38:30:20:2a:be:
         63:6b:cf:5b:89:f1:b8:09:1a:40:75:46:61:28:50:e1:5e:21:
         66:87:37:22:13:63:a9:c1:a9:9b:23:1c:83:7b:43:f2:e8:ee:
         e3:32:21:3f:25:60:b6:d9:7e:a8:f6:8f:47:d2:a4:65:06:60:
         09:9a:97:53:ff:14:42:00:21:d7:69:71:5e:d1:54:50:e9:66:
         b2:fd:74:37:91:42:c0:6f:11:7d:54:70:b4:7b:9c:76:a5:5a:
         93:fa:85:af:cf:a0:63:31:69:df:d0:a2:3d:c5:ee:15:f2:f7:
         70:80:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----