Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a653663303a3a2f34342d3438203d3e20323136333131.roa
File:                     326130613a363034343a653663303a3a2f34342d3438203d3e20323136333131.roa (raw, json)
Hash identifier:          02j4EGuUDUXpchFPlFBTECGKyk4/dCNWwXHXWtJ+IfA=
Subject key identifier:   E4:DB:38:C7:C7:FD:F5:7F:F5:90:56:B1:AB:D7:C2:33:70:6A:8B:BC
Certificate issuer:       /CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
Certificate serial:       62046BC53430766973F26B4B424E643C9318706E
Authority key identifier: F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a653663303a3a2f34342d3438203d3e20323136333131.roa
Signing time:             Tue 18 Jun 2024 13:03:46 +0000
ROA not before:           Tue 18 Jun 2024 12:58:46 +0000
ROA not after:            Tue 17 Jun 2025 13:03:46 +0000
asID:                     216311
IP address blocks:        2a0a:6044:e6c0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 10:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:04:6b:c5:34:30:76:69:73:f2:6b:4b:42:4e:64:3c:93:18:70:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
        Validity
            Not Before: Jun 18 12:58:46 2024 GMT
            Not After : Jun 17 13:03:46 2025 GMT
        Subject: CN=E4DB38C7C7FDF57FF59056B1ABD7C233706A8BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5d:df:1c:ac:e9:26:d4:ea:73:44:57:45:e4:
                    6c:bf:0c:46:97:99:d8:f7:cf:1b:a6:b9:26:cf:74:
                    00:4d:96:56:d5:8c:54:63:b9:bf:c6:a7:95:67:ba:
                    bd:91:99:3e:d2:d1:66:60:85:83:2d:98:05:f2:e5:
                    cf:2c:08:b4:02:17:98:50:79:23:73:71:31:eb:b8:
                    b3:7c:55:6d:d1:90:6a:03:c0:ef:c8:59:69:a2:0f:
                    b2:7a:56:2a:84:69:ce:3e:d7:6d:59:8d:2a:cc:ef:
                    18:99:fc:44:e7:b1:43:e9:97:d8:df:67:3e:84:ec:
                    13:a9:87:18:8f:d4:e6:7d:dd:b1:44:12:56:f0:39:
                    ad:f5:db:08:5b:df:06:f6:94:2b:bf:9b:83:67:06:
                    76:25:f7:c7:1f:74:4f:5c:30:0f:60:de:b7:00:cc:
                    ad:eb:60:23:05:49:e0:da:d3:85:46:9d:15:96:ca:
                    dc:6e:51:a1:46:a7:6a:a8:83:bd:56:20:97:17:16:
                    e6:e3:fe:1b:8f:96:e3:1e:f0:72:03:ac:6c:bb:ab:
                    93:a8:92:62:a6:d5:06:46:29:af:a4:80:5f:fe:b0:
                    b9:73:b5:8a:a1:de:a4:79:cf:08:78:5c:0e:63:e6:
                    8b:cb:4a:a5:6f:c8:d6:04:49:2b:d3:de:b0:3e:3a:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DB:38:C7:C7:FD:F5:7F:F5:90:56:B1:AB:D7:C2:33:70:6A:8B:BC
            X509v3 Authority Key Identifier:
                keyid:F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/326130613a363034343a653663303a3a2f34342d3438203d3e20323136333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:e6c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:72:6b:b1:98:6e:24:b4:40:cd:41:59:09:a8:c4:78:77:45:
         4f:41:dd:6e:1e:25:f2:b5:e0:a6:8b:f2:77:88:cd:f2:b6:aa:
         a6:21:a2:e0:d1:f4:5c:07:5b:c7:f0:50:60:3c:a3:57:31:a0:
         d0:2c:9c:38:9c:ac:36:d5:18:1e:7a:75:c1:de:df:7a:3f:0d:
         84:4c:bf:7e:32:3b:66:03:2e:c8:da:88:24:3b:b4:c6:b1:1b:
         2b:48:70:64:7c:16:6e:ce:6d:be:36:33:65:eb:92:29:40:c5:
         f4:b5:e1:85:a8:e3:f6:e8:df:7e:7d:5e:9b:9d:e6:d5:3a:64:
         c5:88:c4:6e:bb:00:b5:5f:ee:f2:a4:e5:1e:54:d0:31:bd:45:
         42:c9:fa:ba:5e:bb:bf:4e:50:d3:c5:42:15:a1:1a:1d:1e:cf:
         dd:d0:f9:45:d9:d2:0c:52:e1:8e:d3:c1:2b:b1:93:8f:02:37:
         a5:6f:65:1c:1d:9f:fc:c3:91:38:e2:8e:77:5a:79:fd:30:ac:
         ef:34:61:ea:d0:97:00:15:cf:c4:40:b5:86:2b:c6:6e:a5:af:
         86:3d:79:f1:ee:c6:31:47:a8:88:56:e9:6d:73:b8:f2:cc:42:
         b7:62:c5:a9:66:d7:05:03:4a:64:57:bc:93:2b:7c:68:f4:47:
         b6:bb:4a:d9
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUYgRrxTQwdmlz8mtLQk5kPJMYcG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhCMkREOTQ4Qzg4MUI1MTdBMjBCODU2Njc1OEFCNEFC
QzdCNzJEMDAeFw0yNDA2MTgxMjU4NDZaFw0yNTA2MTcxMzAzNDZaMDMxMTAvBgNV
BAMTKEU0REIzOEM3QzdGREY1N0ZGNTkwNTZCMUFCRDdDMjMzNzA2QThCQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxXd8crOkm1OpzRFdF5Gy/DEaX
mdj3zxumuSbPdABNllbVjFRjub/Gp5Vnur2RmT7S0WZghYMtmAXy5c8sCLQCF5hQ
eSNzcTHruLN8VW3RkGoDwO/IWWmiD7J6ViqEac4+121ZjSrM7xiZ/ETnsUPpl9jf
Zz6E7BOphxiP1OZ93bFEElbwOa312whb3wb2lCu/m4NnBnYl98cfdE9cMA9g3rcA
zK3rYCMFSeDa04VGnRWWytxuUaFGp2qog71WIJcXFubj/huPluMe8HIDrGy7q5Oo
kmKm1QZGKa+kgF/+sLlztYqh3qR5zwh4XA5j5ovLSqVvyNYESSvT3rA+Oni1AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU5Ns4x8f99X/1kFaxq9fCM3Bqi7wwHwYDVR0j
BBgwFoAU+LLdlIyIG1F6ILhWZ1irSrx7ctAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM3MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5
M2U2LzAvRjhCMkREOTQ4Qzg4MUI1MTdBMjBCODU2Njc1OEFCNEFCQzdCNzJEMC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9GOEIyREQ5NDhDODgxQjUxN0EyMEI4NTY2
NzU4QUI0QUJDN0I3MkQwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wYzcwNDAxYy03ZjQxLTRhNmItOTQzNC1jYzgwZGNhMDkzZTYvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTY1MzY2MzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz
MTM2MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRObAMA0GCSqGSIb3DQEBCwUAA4IBAQBy
cmuxmG4ktEDNQVkJqMR4d0VPQd1uHiXyteCmi/J3iM3ytqqmIaLg0fRcB1vH8FBg
PKNXMaDQLJw4nKw21RgeenXB3t96Pw2ETL9+MjtmAy7I2ogkO7TGsRsrSHBkfBZu
zm2+NjNl65IpQMX0teGFqOP26N9+fV6bnebVOmTFiMRuuwC1X+7ypOUeVNAxvUVC
yfq6Xru/TlDTxUIVoRodHs/d0PlF2dIMUuGO08ErsZOPAjelb2UcHZ/8w5E44o53
Wnn9MKzvNGHq0JcAFc/EQLWGK8Zupa+GPXnx7sYxR6iIVultc7jyzEK3YsWpZtcF
A0pkV7yTK3xo9Ee2u0rZ
-----END CERTIFICATE-----