Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a366265633a3a2f34372d3437203d3e20323136333131.roa
File:                     326130613a363034343a366265633a3a2f34372d3437203d3e20323136333131.roa (raw, json)
Hash identifier:          9QTCOX3LWjU+Eqy5DefAaQydb8jPWukxOGPYPnQlL1g=
Subject key identifier:   47:51:F6:A8:45:49:41:23:9D:3E:EB:E7:A4:1E:AF:6C:DB:6D:5A:34
Certificate issuer:       /CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
Certificate serial:       784D63EF5AC214FAEB537ADEF959EB6BFD0B3DBB
Authority key identifier: F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a366265633a3a2f34372d3437203d3e20323136333131.roa
Signing time:             Mon 15 Jul 2024 09:13:26 +0000
ROA not before:           Mon 15 Jul 2024 09:08:26 +0000
ROA not after:            Mon 14 Jul 2025 09:13:26 +0000
asID:                     216311
IP address blocks:        2a0a:6044:6bec::/47 maxlen: 47

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 10:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4d:63:ef:5a:c2:14:fa:eb:53:7a:de:f9:59:eb:6b:fd:0b:3d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
        Validity
            Not Before: Jul 15 09:08:26 2024 GMT
            Not After : Jul 14 09:13:26 2025 GMT
        Subject: CN=4751F6A8454941239D3EEBE7A41EAF6CDB6D5A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:6f:bf:fd:65:3c:04:a6:af:5d:75:0e:e9:
                    2c:ac:bc:ed:14:12:31:26:3c:1b:e9:f2:20:0c:4d:
                    28:1a:f8:be:00:36:f6:dd:41:38:34:95:5b:03:14:
                    8a:f7:ac:4b:72:d5:6e:fb:a4:1a:cd:82:53:cd:c6:
                    d8:f8:2a:78:b8:5a:65:60:45:14:5e:5e:aa:b5:4a:
                    ae:95:cb:40:8b:24:d3:b6:3a:29:7b:48:49:f4:d5:
                    49:01:ad:18:a4:71:f3:11:d8:57:d4:06:c0:5d:1f:
                    39:00:17:91:1e:df:23:e1:f8:98:3e:5b:71:df:38:
                    3e:b5:d8:9e:3c:4e:3d:cc:03:8e:61:80:03:12:2d:
                    d2:bb:d5:07:c5:42:c4:66:a7:ed:ab:08:0d:6b:89:
                    8a:11:c3:69:9a:ec:bf:e6:1c:8c:61:04:da:32:3d:
                    06:cc:9a:61:f4:10:99:24:b6:2d:b6:e2:bc:a1:44:
                    b5:e4:fe:54:77:e0:c9:c0:9c:be:1d:01:aa:43:f5:
                    ac:b3:93:2f:a7:fe:9f:01:32:03:c0:80:cd:f7:01:
                    1c:b1:71:0b:96:cd:ea:3d:6b:97:36:3d:df:41:07:
                    9b:1b:c4:f2:5e:3c:ad:f2:9f:49:fe:5c:f8:c4:09:
                    fb:7c:e8:4d:b3:52:8c:81:27:57:4c:5f:fc:ae:b1:
                    a0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:51:F6:A8:45:49:41:23:9D:3E:EB:E7:A4:1E:AF:6C:DB:6D:5A:34
            X509v3 Authority Key Identifier:
                keyid:F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a366265633a3a2f34372d3437203d3e20323136333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:6bec::/47

    Signature Algorithm: sha256WithRSAEncryption
         5f:4a:f8:25:03:29:b0:fb:d7:73:15:80:01:7f:f6:7a:c0:ee:
         4c:29:36:c4:9d:d7:38:b8:0e:c7:9d:ec:34:7f:73:f5:95:2b:
         5b:bd:4b:4c:b1:e9:a5:cc:c3:f0:6a:5e:d7:fc:cd:fa:9b:b9:
         81:8b:db:3e:45:a5:ef:fa:73:f0:67:4f:07:95:f4:36:9b:7e:
         5b:b4:ff:94:20:0d:d5:ea:e3:c4:8c:82:75:ba:35:43:da:4d:
         d3:cb:0c:e3:9e:20:a6:0d:75:9f:2a:88:18:c1:21:77:2e:22:
         7c:c2:61:de:ce:5d:c7:4d:ff:4b:df:2a:ba:a1:4d:00:79:71:
         e1:f3:9a:d1:cb:2f:a5:e0:67:fb:27:06:61:99:a2:34:85:d3:
         4a:60:37:40:09:77:47:6a:f8:b1:27:26:f0:36:72:ad:34:ed:
         18:92:d8:8c:08:34:80:fb:72:c7:5c:c5:cd:f0:fe:32:9c:ff:
         ef:ef:c9:75:28:35:1c:26:d6:f6:a8:03:7e:1a:08:07:e1:96:
         05:74:7d:35:2c:6b:33:ce:c3:3c:87:10:70:2d:cf:1d:75:10:
         94:40:c4:3b:0d:d9:4c:7e:6a:a4:88:33:24:a5:dc:97:58:3a:
         4b:08:f8:48:50:b2:c2:0a:ca:17:55:20:6e:06:bb:b5:0e:76:
         dd:7b:c0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----