Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a65353a3a2f34382d3438203d3e20323136333131.roa
File:                     326130623a346530373a65353a3a2f34382d3438203d3e20323136333131.roa (raw, json)
Hash identifier:          YhoI9EVw1jnC0SFRDvYgGlgEjnBkprcBvwjgmnuXYQY=
Subject key identifier:   84:60:42:2B:E9:14:4A:4F:98:D5:B8:26:3C:D1:91:F2:8E:CA:90:28
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       534084D8D5F5DDF51475A389C15A8019C2E6EAF6
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a65353a3a2f34382d3438203d3e20323136333131.roa
Signing time:             Sat 21 Sep 2024 18:01:06 +0000
ROA not before:           Sat 21 Sep 2024 17:56:06 +0000
ROA not after:            Sat 20 Sep 2025 18:01:06 +0000
asID:                     216311
IP address blocks:        2a0b:4e07:e5::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 14:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:40:84:d8:d5:f5:dd:f5:14:75:a3:89:c1:5a:80:19:c2:e6:ea:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Sep 21 17:56:06 2024 GMT
            Not After : Sep 20 18:01:06 2025 GMT
        Subject: CN=8460422BE9144A4F98D5B8263CD191F28ECA9028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:31:78:f6:f4:75:a3:4a:43:b4:92:56:20:
                    fe:71:93:73:ea:2a:e8:6a:41:64:43:29:8b:37:09:
                    82:b2:c4:c7:50:2d:62:94:19:7e:e2:b2:48:c1:84:
                    66:d8:c1:8e:a6:8a:e2:21:c3:4a:9a:a4:a2:bf:e8:
                    03:f1:f1:b7:50:72:b4:3d:98:b5:1f:e9:f2:79:01:
                    dc:90:04:15:05:2e:c5:40:3b:f0:86:d2:9d:92:f0:
                    6e:01:f1:99:53:cb:7d:33:41:69:f9:02:35:ee:f1:
                    bf:a8:15:3f:2d:01:48:13:ac:11:e3:e8:df:fb:6a:
                    da:13:8c:78:47:91:de:f3:c4:af:f9:61:c2:55:c5:
                    55:b3:da:08:0b:54:48:b6:dc:88:cb:f2:fb:09:45:
                    7b:68:94:44:b8:ca:36:99:4e:42:cb:7a:3f:98:59:
                    47:3e:e6:2a:a3:e3:ee:58:cc:68:6b:27:09:44:93:
                    e8:a3:6e:0a:ba:bf:2e:66:32:b4:d6:64:6e:56:5b:
                    b5:77:e5:65:29:1d:12:78:94:ae:5d:b9:7d:25:fd:
                    a1:41:0a:13:0d:97:6f:0b:7f:60:7c:92:fc:ac:7a:
                    6e:ef:6e:0e:39:e9:3a:95:2c:8b:2a:cb:6b:90:bd:
                    f1:75:1d:fa:f3:5d:0c:0d:75:d6:a9:5e:ab:10:d4:
                    da:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:60:42:2B:E9:14:4A:4F:98:D5:B8:26:3C:D1:91:F2:8E:CA:90:28
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a65353a3a2f34382d3438203d3e20323136333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:e5::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:55:38:6d:0e:67:22:30:91:3d:47:31:cb:56:64:15:cc:35:
         bb:fc:ac:17:d4:02:22:51:86:d5:ed:f2:15:4c:20:80:11:43:
         5d:89:c9:5c:fe:5e:6c:93:34:c7:4a:a0:25:16:dd:d5:34:dc:
         51:27:3d:32:51:a7:87:c3:af:2c:52:74:72:7c:cc:a4:06:68:
         8b:0a:25:4f:fd:7f:7f:bf:29:19:64:87:46:bc:61:37:ea:be:
         cc:57:40:b5:9f:a1:c3:cd:52:be:84:53:3b:c6:94:f8:ff:7e:
         ad:3a:4d:d1:38:7f:cd:e8:41:ca:cd:54:d6:49:ce:b3:88:ee:
         0e:e3:96:72:3b:fe:42:22:94:51:46:58:62:ec:69:24:dc:14:
         b8:58:72:e8:16:6b:e5:9c:bd:af:5c:53:bd:af:b9:7b:f0:8d:
         9e:18:b7:9e:d1:ee:86:0f:c0:e4:63:91:eb:c5:14:4f:5d:94:
         4f:85:12:f1:3c:78:74:a1:4a:cb:9a:49:a3:d2:38:83:a0:f3:
         e1:c2:ad:65:70:32:d8:05:80:0f:84:cc:d0:55:72:47:28:15:
         2f:ea:c5:12:c9:32:11:85:dd:3b:67:45:80:70:49:c9:32:86:
         fd:e6:91:cc:e5:e8:16:d4:f1:7e:72:7f:e5:3c:91:c3:11:41:
         92:b3:3d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----