Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a6164333a3a2f34382d3438203d3e20323136333131.roa
File:                     326130613a363034343a6164333a3a2f34382d3438203d3e20323136333131.roa (raw, json)
Hash identifier:          z7YrE7Cwe2Lz2gKdsBTAGhQ7Gjal5ETIAw6Cu5eqzV8=
Subject key identifier:   06:CA:45:BC:27:14:42:C4:AC:03:45:A2:5F:16:A4:36:A5:8B:74:E8
Certificate issuer:       /CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
Certificate serial:       7861946E066E1CF5BB2CB135467058E21C2CD8DF
Authority key identifier: F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a6164333a3a2f34382d3438203d3e20323136333131.roa
Signing time:             Tue 18 Jun 2024 13:03:30 +0000
ROA not before:           Tue 18 Jun 2024 12:58:30 +0000
ROA not after:            Tue 17 Jun 2025 13:03:30 +0000
asID:                     216311
IP address blocks:        2a0a:6044:ad3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 10:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:61:94:6e:06:6e:1c:f5:bb:2c:b1:35:46:70:58:e2:1c:2c:d8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
        Validity
            Not Before: Jun 18 12:58:30 2024 GMT
            Not After : Jun 17 13:03:30 2025 GMT
        Subject: CN=06CA45BC271442C4AC0345A25F16A436A58B74E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:60:56:28:db:69:a5:51:a0:00:ff:3c:89:
                    7d:cf:de:65:6d:09:6c:87:39:fa:e6:67:6c:66:98:
                    b4:b3:8f:bb:b3:b6:89:cc:de:db:b1:9b:0b:0c:63:
                    0b:c5:9b:95:51:13:6d:ae:65:b0:9e:bb:94:c7:10:
                    c3:7c:3d:44:9e:4c:ce:92:05:cb:1b:d7:a3:e3:e4:
                    06:d2:dc:70:51:b9:33:f9:fc:d2:17:f4:d1:b0:85:
                    b5:15:0f:49:b3:29:4d:5e:b5:bb:50:9c:6d:8d:c9:
                    57:68:45:ae:98:ba:d7:49:c2:3e:bb:31:0e:25:af:
                    21:6f:ae:dd:d2:40:9a:8b:14:2a:dd:fd:55:2d:61:
                    30:63:c3:3d:00:36:29:3d:39:1f:ed:2f:bd:fa:4e:
                    f9:cc:33:77:30:2b:33:25:ac:d7:9f:e1:88:96:8d:
                    e0:89:38:20:1c:e7:19:72:69:bf:9d:2b:33:40:2e:
                    d0:4d:a5:2c:43:2f:58:f2:03:6b:a4:0a:94:d5:06:
                    80:12:53:3c:5e:c4:54:d4:f1:ca:df:30:2b:75:1a:
                    d2:0e:81:3e:fc:12:7d:16:8b:e1:e9:73:70:7d:a7:
                    61:2f:87:37:2e:8a:6d:8b:75:7b:1c:c7:f1:59:4f:
                    09:b9:30:6a:c5:fc:f6:6f:54:e2:3e:1d:68:39:f7:
                    c1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CA:45:BC:27:14:42:C4:AC:03:45:A2:5F:16:A4:36:A5:8B:74:E8
            X509v3 Authority Key Identifier:
                keyid:F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a6164333a3a2f34382d3438203d3e20323136333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ad3::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:8b:47:55:1a:23:30:9a:be:aa:31:b3:bf:d9:4e:72:32:18:
         04:6f:67:03:ec:81:c2:85:7a:38:31:b6:84:0c:a7:f3:6e:39:
         1e:e9:55:7f:5d:20:e9:bb:f5:20:04:d8:7c:0e:41:b9:ab:b0:
         2b:f6:05:ca:63:78:72:bb:99:f1:d4:ef:17:21:c2:07:78:a3:
         b4:a1:d8:60:d8:82:d8:49:cd:d0:bb:57:50:f4:1a:ef:f7:74:
         b2:9f:20:b1:3d:cb:d5:bb:de:e9:48:16:1a:11:e3:3f:1d:b9:
         dc:80:2b:c8:9f:74:24:a6:1e:df:7a:19:80:c6:0e:39:c9:f5:
         ad:24:b6:01:c6:99:1d:a8:6e:da:6d:90:87:eb:db:4a:c8:67:
         09:dc:f1:23:95:1d:6c:54:6d:8e:80:f6:dc:fa:75:93:7a:ab:
         3c:dd:b2:8d:b9:56:e7:45:e9:12:4a:ef:aa:a1:35:db:ae:62:
         11:63:cb:6a:c7:b8:99:f8:15:87:81:4b:8f:f7:30:78:ed:7c:
         61:c1:fd:ae:0a:61:a0:35:96:56:55:41:4e:ce:e7:8b:3d:ca:
         1a:86:22:1a:51:46:07:94:81:34:b1:2d:2d:2a:74:14:6e:74:
         57:fa:15:1c:c7:e1:80:6a:91:92:9c:22:11:c5:1c:f8:36:ef:
         2c:2f:b6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----