Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3232323a3a2f34382d3438203d3e20323136333131.roa
File:                     326130623a346530373a3232323a3a2f34382d3438203d3e20323136333131.roa (raw, json)
Hash identifier:          YRGDNIaxR4OPR/UnZAyZTA7naJfc55SlvoOkmofkerM=
Subject key identifier:   75:55:FA:67:1D:3E:18:A1:F1:FB:AA:F5:FB:6C:0C:4E:28:D3:58:65
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       7DAABC14B8FF48A88902F6F619ED87ADBAC3BE5C
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3232323a3a2f34382d3438203d3e20323136333131.roa
Signing time:             Mon 23 Sep 2024 22:44:10 +0000
ROA not before:           Mon 23 Sep 2024 22:39:10 +0000
ROA not after:            Mon 22 Sep 2025 22:44:10 +0000
asID:                     216311
IP address blocks:        2a0b:4e07:222::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 14:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:aa:bc:14:b8:ff:48:a8:89:02:f6:f6:19:ed:87:ad:ba:c3:be:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Sep 23 22:39:10 2024 GMT
            Not After : Sep 22 22:44:10 2025 GMT
        Subject: CN=7555FA671D3E18A1F1FBAAF5FB6C0C4E28D35865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:09:3e:39:1b:2c:97:3d:d9:74:83:6a:81:
                    8a:69:7b:d9:38:a0:3a:7e:b9:9c:c4:85:69:5b:63:
                    b7:9a:3c:71:49:1c:b3:43:a2:cc:89:9e:9e:97:4d:
                    dc:4f:17:86:e2:8b:56:8d:5b:b7:38:af:80:1d:a4:
                    89:2e:0f:52:70:6d:1c:d7:3c:f7:36:3c:df:b6:b7:
                    6f:c6:60:5a:bb:82:fc:1d:3a:4f:c8:c2:ff:9d:2a:
                    0f:23:cd:aa:4c:fb:2e:6d:93:56:b7:20:8f:e5:7a:
                    96:3f:00:1a:a3:f4:d4:a4:50:78:6a:54:c8:ba:89:
                    31:36:5d:cd:73:66:a4:83:7f:40:85:6c:ff:d5:37:
                    5f:61:c1:0c:b0:da:0f:8f:d5:29:6e:9c:7a:5d:ff:
                    80:77:e2:78:a9:42:4b:43:f8:bd:58:48:e4:7e:3f:
                    6d:94:48:28:89:96:2a:42:23:88:c1:ae:11:ba:b7:
                    3f:21:ac:c3:ef:dd:ae:8b:88:4a:68:2a:2d:60:7a:
                    81:ea:b2:00:3a:65:d2:d3:0a:c3:2c:2e:29:f7:26:
                    87:dd:bb:13:70:14:af:41:99:2a:85:e4:0e:44:4f:
                    c6:44:40:7d:85:fc:98:26:06:64:3a:62:7e:08:45:
                    d9:2c:25:db:2c:f8:33:8d:5e:47:7e:84:00:54:bd:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:55:FA:67:1D:3E:18:A1:F1:FB:AA:F5:FB:6C:0C:4E:28:D3:58:65
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3232323a3a2f34382d3438203d3e20323136333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:222::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:38:d8:ad:8f:46:33:d4:61:9e:bb:8e:12:f2:e7:3c:a4:
         3a:71:9d:9f:fe:1c:62:95:f1:2b:23:0a:f1:82:96:b4:1f:a9:
         a7:79:8c:a8:55:d1:4a:2d:31:b7:5b:15:8b:3f:44:b0:79:fd:
         b6:4c:26:c0:71:83:e7:3e:f7:d3:ef:60:76:f3:46:c1:66:3e:
         10:79:7c:05:9e:47:1e:ad:92:b2:f3:d5:14:d3:74:75:e5:11:
         5a:a1:2e:63:2a:34:d4:08:df:ea:83:79:47:41:57:f1:6e:9e:
         0c:e6:e7:49:61:62:2f:d0:1a:19:84:fb:4c:6e:d0:b4:00:8d:
         f8:67:59:5c:69:9f:0f:f2:62:c9:27:ca:b8:bf:1b:ca:eb:b0:
         d0:ed:23:86:61:6b:a5:86:86:16:05:da:40:33:2a:c5:de:9d:
         40:16:cf:cf:cb:19:4f:dd:e3:a3:ec:7b:97:94:17:c7:ec:9c:
         dd:a9:4f:57:03:6f:41:2c:b6:13:ff:bb:50:e4:7a:40:be:0c:
         fa:a0:e3:39:38:bf:2d:00:0e:b9:b5:bc:99:13:6a:22:6d:80:
         7f:a8:3c:00:67:8f:e7:c6:c1:02:6e:a0:e3:e7:ca:8e:ab:7d:
         19:cb:79:42:7f:f5:ca:02:59:96:c0:77:02:45:98:9a:ce:ff:
         a5:27:ce:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----