Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323130303a3a2f34302d3438203d3e20343031333836.roa
File:                     326131343a373538313a323130303a3a2f34302d3438203d3e20343031333836.roa (raw, json)
Hash identifier:          Rag+SJDRXBGJr6PdkwHaoeZOpHVTF8pko0XKA91fCCc=
Subject key identifier:   44:99:A6:00:9B:2E:19:0C:84:82:82:D6:22:8A:BF:23:30:AA:47:4A
Certificate issuer:       /CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
Certificate serial:       42BBCA7F095599E77C379A9C1DCB9F0C2B298B48
Authority key identifier: AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323130303a3a2f34302d3438203d3e20343031333836.roa
Signing time:             Sat 12 Oct 2024 17:24:48 +0000
ROA not before:           Sat 12 Oct 2024 17:19:48 +0000
ROA not after:            Sat 11 Oct 2025 17:24:48 +0000
asID:                     401386
IP address blocks:        2a14:7581:2100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 05:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bb:ca:7f:09:55:99:e7:7c:37:9a:9c:1d:cb:9f:0c:2b:29:8b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
        Validity
            Not Before: Oct 12 17:19:48 2024 GMT
            Not After : Oct 11 17:24:48 2025 GMT
        Subject: CN=4499A6009B2E190C848282D6228ABF2330AA474A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:79:d9:12:57:c6:63:6a:c1:13:43:9b:b2:fe:
                    5a:47:aa:2e:3c:c9:d6:91:d1:f0:ea:9a:45:8d:6e:
                    0e:b6:37:db:b5:a1:4d:5b:b2:db:8a:4e:6d:f2:85:
                    31:72:7e:72:3d:4d:25:ef:69:ff:15:38:13:09:b9:
                    2c:18:ce:c5:fc:1c:3f:a9:e5:01:f7:1c:db:85:83:
                    8e:bb:72:0d:40:30:0c:ba:82:cf:b6:15:1a:07:c8:
                    35:48:4f:2f:af:cc:83:ea:78:15:f1:d8:58:33:50:
                    73:f1:63:1d:17:68:16:2a:8e:df:2c:d7:36:b1:90:
                    bd:04:5a:cd:5c:24:2b:08:1e:67:3a:76:ec:00:d1:
                    f3:57:35:5c:06:b9:3f:c0:c4:9d:d9:a2:87:b9:c0:
                    3d:c7:ea:8a:cf:c7:e1:fe:ae:55:22:2d:de:05:6e:
                    35:4a:a4:3f:97:dd:1e:96:ef:9a:52:8e:e3:b2:24:
                    04:d5:d4:82:56:ab:5d:21:c4:92:a9:c3:88:dc:f4:
                    74:e2:2f:cd:50:26:39:ff:2c:a9:e9:51:6f:64:2d:
                    65:5d:88:b5:bd:63:db:2e:43:0a:76:7b:0c:02:db:
                    1d:e8:f8:4b:9b:d6:ea:57:a6:a0:d8:72:ce:4a:1c:
                    57:f3:17:0f:8a:83:9e:9a:d4:e4:43:f6:0b:ce:cc:
                    81:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:99:A6:00:9B:2E:19:0C:84:82:82:D6:22:8A:BF:23:30:AA:47:4A
            X509v3 Authority Key Identifier:
                keyid:AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323130303a3a2f34302d3438203d3e20343031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:ed:b2:93:1f:3f:f9:5c:62:45:d7:48:47:70:85:00:94:fe:
         5d:f3:cb:2a:2b:8d:6c:a7:bf:95:a2:3d:d4:b2:55:55:33:67:
         39:9c:7d:f1:79:74:bc:c8:08:e5:31:e0:6e:c0:23:f3:12:e4:
         04:07:d1:2d:12:bb:9a:e1:df:8d:3e:3f:02:f7:42:44:91:db:
         ad:d4:86:64:d2:75:23:8d:39:55:5b:e1:bb:92:ab:50:b7:48:
         73:d2:5a:ef:b3:d5:a3:5a:81:53:54:cc:e2:79:47:d5:32:59:
         ef:e5:b7:1d:11:3d:ef:26:58:41:ab:49:b5:02:73:6b:9a:87:
         b8:f1:20:86:d8:a8:b1:f2:a8:3b:06:a1:eb:3e:39:3a:b1:f2:
         b4:73:00:c8:3d:f7:1a:1d:4c:3f:0c:0d:b7:56:87:d4:9c:3e:
         73:35:6a:d6:9f:47:53:ee:b9:ff:61:83:22:34:c8:63:2f:e4:
         35:9d:ba:7c:0d:aa:8f:c0:45:0b:ac:1f:3a:49:d4:da:ba:d9:
         cd:11:96:2c:a9:a8:34:21:61:c1:8d:fa:4f:0c:7f:df:35:3e:
         05:c0:e2:e4:c4:f8:f7:80:9a:7e:d5:06:2c:48:0d:14:9b:4d:
         00:fd:28:e5:43:44:1b:94:f1:9f:bd:33:9d:4d:58:4e:5a:e2:
         f4:2e:9b:53
-----BEGIN CERTIFICATE-----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