Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a6362343a3a2f34362d3438203d3e20323134333933.roa
File:                     326130623a346530373a6362343a3a2f34362d3438203d3e20323134333933.roa (raw, json)
Hash identifier:          zhaX+bCXZqcN6H7HrcVAssELD/pE37dJEyA3gAIMZm8=
Subject key identifier:   18:19:16:D9:9A:A0:E0:6D:33:1F:7C:23:50:DB:7A:BA:6B:B9:A5:39
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       2E275E9A5497716B99407B490CE4A6C1F38A4490
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a6362343a3a2f34362d3438203d3e20323134333933.roa
Signing time:             Mon 12 Aug 2024 07:25:02 +0000
ROA not before:           Mon 12 Aug 2024 07:20:02 +0000
ROA not after:            Mon 11 Aug 2025 07:25:02 +0000
asID:                     214393
IP address blocks:        2a0b:4e07:cb4::/46 maxlen: 48

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 13:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:27:5e:9a:54:97:71:6b:99:40:7b:49:0c:e4:a6:c1:f3:8a:44:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Aug 12 07:20:02 2024 GMT
            Not After : Aug 11 07:25:02 2025 GMT
        Subject: CN=181916D99AA0E06D331F7C2350DB7ABA6BB9A539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:3d:8a:af:59:95:29:6a:4e:8d:f4:a1:61:
                    14:a3:14:45:83:20:5e:64:c7:f8:cf:a6:a3:a4:cc:
                    30:d8:fb:b0:da:c1:62:52:ce:ad:63:13:ca:ac:82:
                    70:b6:b2:5e:d1:7c:d7:e9:6f:74:96:a9:81:13:0f:
                    86:11:1b:48:3f:1d:99:05:9f:db:16:d3:76:30:f9:
                    ce:32:5e:38:9f:ee:e2:3b:20:73:84:2b:65:15:db:
                    f7:9d:ca:0a:26:ee:5c:24:ec:7d:27:84:ca:28:b4:
                    8c:82:29:48:c0:f1:0f:8f:2d:a3:18:d5:63:ad:30:
                    fa:c6:1e:3d:54:70:0b:bb:55:ef:fd:f9:45:7e:4c:
                    27:00:0d:2c:d6:e9:d5:77:b6:2c:7a:50:d0:f5:b8:
                    91:e3:f5:4d:03:e4:ec:8c:e4:d5:18:bb:26:f7:45:
                    c9:d1:76:ba:ad:b4:16:20:ee:f5:39:ae:4c:5f:da:
                    e6:e2:1a:fa:19:0d:60:39:e7:55:f0:cb:25:1a:23:
                    6f:1e:bd:4e:be:15:26:f9:59:8c:27:9a:a2:cc:3b:
                    8e:fb:75:c2:a0:35:46:58:c1:fb:8e:a6:ea:b9:19:
                    98:8b:b8:0e:a7:4b:aa:45:31:50:9a:8b:15:c5:96:
                    9d:d0:ae:ef:06:0a:73:29:0f:96:6a:57:7e:dd:58:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:19:16:D9:9A:A0:E0:6D:33:1F:7C:23:50:DB:7A:BA:6B:B9:A5:39
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a6362343a3a2f34362d3438203d3e20323134333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:cb4::/46

    Signature Algorithm: sha256WithRSAEncryption
         45:fc:ec:ee:a4:61:8d:42:bb:21:e0:3b:ec:06:56:92:48:dc:
         96:83:f8:12:76:4c:03:a8:1c:31:0d:82:10:60:18:a6:bb:9a:
         6a:ed:b5:2b:3c:27:5d:d3:01:b1:a6:73:67:dc:c4:a9:90:0f:
         64:ee:b6:68:73:cf:88:7d:2d:5f:95:f4:88:9c:f2:ef:aa:b2:
         f8:f8:e3:3b:0d:df:a3:bf:96:f6:67:3e:3a:11:00:39:83:7f:
         09:b2:a1:5e:ce:f3:3b:13:cb:51:0b:a6:ab:10:c9:a3:6b:6a:
         01:be:b4:6e:0d:3b:a0:11:98:98:48:d3:98:f5:57:8b:fc:4c:
         8c:29:74:12:ba:a5:09:c2:b7:87:e4:c8:f1:2f:99:33:dc:d8:
         96:cc:2f:c5:19:e5:b1:c5:c4:cf:eb:6c:27:f8:a1:c4:0f:5a:
         14:5c:9a:0e:c1:34:41:a7:64:b4:53:64:b8:d1:27:2f:70:3e:
         20:58:6a:8e:4a:44:5d:a9:e5:ec:3f:a8:f3:c3:54:91:48:af:
         2f:75:5a:18:b5:b8:1e:9c:d7:f7:7e:f9:e8:b4:9d:da:3a:a2:
         21:1a:e2:dd:3d:9e:33:39:d1:0a:8f:8b:45:07:a0:56:40:b2:
         b8:33:7a:8a:74:7a:2e:43:a7:71:0a:6e:e3:8a:16:8f:57:81:
         69:97:0d:8b
-----BEGIN CERTIFICATE-----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