Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3231353a3a2f34382d3438203d3e20323135353839.roa
File:                     326130623a346530373a3231353a3a2f34382d3438203d3e20323135353839.roa (raw, json)
Hash identifier:          Jb5d5YfyvWD8kQZAik2tnmnQLe4YpPSJ5y8mFqvfpT4=
Subject key identifier:   C4:16:7B:B9:1D:82:03:CF:CF:B4:C8:BE:56:FE:36:52:81:2C:64:73
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       5C0FE4AD83B2F3B6860C2B14C01BB1A6DD9566AB
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3231353a3a2f34382d3438203d3e20323135353839.roa
Signing time:             Fri 26 Jul 2024 09:06:51 +0000
ROA not before:           Fri 26 Jul 2024 09:01:51 +0000
ROA not after:            Fri 25 Jul 2025 09:06:51 +0000
asID:                     215589
IP address blocks:        2a0b:4e07:215::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 13:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0f:e4:ad:83:b2:f3:b6:86:0c:2b:14:c0:1b:b1:a6:dd:95:66:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Jul 26 09:01:51 2024 GMT
            Not After : Jul 25 09:06:51 2025 GMT
        Subject: CN=C4167BB91D8203CFCFB4C8BE56FE3652812C6473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:93:61:42:75:7a:be:04:d1:ca:72:91:e7:
                    cd:12:f0:16:7e:b7:c5:3e:1e:1c:c3:89:70:81:00:
                    3b:25:d7:eb:7c:6c:72:58:c1:22:39:56:ab:b2:fa:
                    99:69:78:3b:2a:49:60:8c:87:a1:25:d5:f2:1b:2e:
                    20:34:2b:34:fb:40:ec:7f:eb:4c:9a:7e:d7:61:4f:
                    03:48:ee:40:19:30:fd:f0:4a:5a:75:a0:06:d5:04:
                    fa:04:6b:4c:64:1b:63:bb:5a:eb:3b:5f:57:3e:41:
                    4a:a3:5a:bc:ba:44:77:63:cb:2e:48:2c:6d:db:4d:
                    7e:ef:32:23:83:37:ba:d1:05:a5:4b:fe:6d:7f:0d:
                    d4:12:6e:ac:40:b8:6b:b7:3f:69:32:ad:2b:64:bf:
                    f0:a4:eb:e3:67:9f:a2:ff:14:8c:f4:a0:85:5c:ca:
                    31:ba:79:94:f1:ed:2b:4a:49:4f:a0:80:04:bd:6b:
                    d2:a1:30:d1:83:0b:a3:d8:da:7b:61:7f:c8:a9:ce:
                    75:56:d5:8e:39:ff:ed:7c:cb:b5:6a:7d:3c:03:8c:
                    7d:e9:eb:51:ab:03:ab:a4:e8:69:11:d3:b8:4e:18:
                    b8:c7:ec:85:81:fc:c1:17:95:eb:d5:85:37:c0:6a:
                    90:e8:72:ee:2c:2f:73:64:39:f3:f3:67:9e:65:b7:
                    f4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:16:7B:B9:1D:82:03:CF:CF:B4:C8:BE:56:FE:36:52:81:2C:64:73
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3231353a3a2f34382d3438203d3e20323135353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:215::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:b1:8b:37:c4:89:63:27:ff:9c:f6:c5:97:0b:89:6d:8d:3b:
         bc:f6:07:80:e1:4e:0c:fb:60:d1:b6:a9:32:45:31:4e:61:d0:
         1f:68:d9:64:0b:83:53:29:52:f7:97:51:ac:91:ee:bb:6d:ce:
         91:e7:4e:d8:34:22:f6:a0:23:28:42:a9:c7:5d:90:6e:9b:ac:
         b9:f5:7a:99:a1:dc:22:7a:93:f6:cb:9d:98:4c:96:1f:23:5d:
         dc:3e:bc:9c:99:da:18:ce:43:0d:90:c6:88:75:a1:8a:48:83:
         45:58:1f:54:6a:bd:97:98:40:70:05:5c:aa:f1:1c:73:b9:89:
         df:50:1e:0b:4e:47:86:0a:86:77:e5:22:fc:66:0e:7f:57:6c:
         63:08:81:3f:1e:72:cb:62:fd:5a:da:d8:58:b4:12:05:f2:bc:
         3f:f6:51:43:47:31:63:40:9d:c3:a1:fa:79:bd:ae:f4:3d:c4:
         6d:e3:2b:da:a0:00:0b:55:90:cd:ad:cc:fb:cc:f2:2d:00:eb:
         f3:15:57:3d:b1:a1:97:0e:f5:30:71:e3:ee:97:0f:72:14:98:
         67:05:97:df:eb:63:44:8e:f7:12:09:a7:15:c9:ec:ef:f2:94:
         85:76:8d:79:11:0f:8e:b9:7e:21:43:87:e1:2f:89:75:66:95:
         ee:d1:8c:72
-----BEGIN CERTIFICATE-----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