Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323131313a3a2f34382d3438203d3e20343031333836.roa
File:                     326131343a373538313a323131313a3a2f34382d3438203d3e20343031333836.roa (raw, json)
Hash identifier:          7M5tTpK1Iqa8eegsy++0NmBxqU1yEXqM3hfc4updQhw=
Subject key identifier:   05:D3:42:14:A6:D0:D0:CB:81:E6:E6:9B:7B:6F:7F:9E:F2:37:C1:97
Certificate issuer:       /CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
Certificate serial:       5EC733C3408DE6798C214209C48D8B476A8273C7
Authority key identifier: AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323131313a3a2f34382d3438203d3e20343031333836.roa
Signing time:             Wed 16 Oct 2024 05:21:08 +0000
ROA not before:           Wed 16 Oct 2024 05:16:08 +0000
ROA not after:            Wed 15 Oct 2025 05:21:08 +0000
asID:                     401386
IP address blocks:        2a14:7581:2111::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 13:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c7:33:c3:40:8d:e6:79:8c:21:42:09:c4:8d:8b:47:6a:82:73:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
        Validity
            Not Before: Oct 16 05:16:08 2024 GMT
            Not After : Oct 15 05:21:08 2025 GMT
        Subject: CN=05D34214A6D0D0CB81E6E69B7B6F7F9EF237C197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:62:75:21:36:33:f6:d1:ac:a2:fe:e1:95:
                    cd:d0:48:f4:ee:31:d2:ca:88:e9:e4:1e:7e:e2:d9:
                    1d:11:8a:99:84:f4:e6:73:e4:44:89:31:e5:70:6f:
                    40:bd:1f:b8:36:49:d0:63:0c:3e:f8:29:d1:14:d6:
                    1a:90:00:ce:f9:9d:26:d2:20:f1:82:b5:7f:6c:1e:
                    49:e0:4d:1c:7c:7d:e6:73:8a:0a:1a:de:ad:77:21:
                    d7:0c:8e:d6:05:7e:db:37:e5:6b:b2:f0:ce:57:1c:
                    e2:c1:97:68:a7:c7:1b:30:2a:10:e9:50:ec:91:f4:
                    d7:4b:87:42:7c:cb:8a:98:26:c0:ef:d4:f6:fc:72:
                    12:20:18:61:e7:39:7c:26:bd:66:74:86:98:a8:a2:
                    8f:72:ad:ad:0c:a7:17:06:ea:01:0c:c4:75:e5:1e:
                    e1:12:ec:07:a7:48:a6:01:35:fe:24:97:38:12:9e:
                    74:9c:d5:bd:d5:aa:cd:74:55:0e:f2:99:e2:0c:5e:
                    e8:a7:3a:0c:33:d3:ae:bf:dd:fd:68:27:6d:8d:f7:
                    d1:83:5e:d2:74:61:0c:be:7e:c7:45:32:39:c3:42:
                    7d:0f:71:d3:da:8a:b1:7d:e6:be:92:9d:d8:01:c2:
                    21:8f:9c:3e:51:19:8d:a8:79:f7:57:0c:94:b4:18:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D3:42:14:A6:D0:D0:CB:81:E6:E6:9B:7B:6F:7F:9E:F2:37:C1:97
            X509v3 Authority Key Identifier:
                keyid:AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323131313a3a2f34382d3438203d3e20343031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:2111::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:51:71:e4:eb:09:b9:5a:99:5b:30:4d:2f:8c:b1:a7:83:eb:
         e9:0b:7f:dd:aa:34:84:50:c0:4d:4c:9f:0f:86:81:16:84:46:
         7e:68:74:be:b5:f7:ca:9a:03:67:7a:bf:96:02:51:68:93:e6:
         77:e5:a7:74:b1:51:cd:6c:cd:66:fa:a4:2b:8b:ea:90:46:81:
         d0:fe:ff:e5:0c:89:ee:c9:86:d5:42:cd:ba:2b:35:03:cc:73:
         1a:69:b0:6a:ff:7e:cf:f1:07:9b:ed:77:1f:9b:d2:4a:4b:6e:
         f7:3d:02:07:8a:4c:40:1d:e0:35:f6:ca:ec:41:dd:61:ee:b1:
         b3:02:8a:15:31:4b:4e:81:bb:6b:da:c0:2a:ac:d5:9e:e6:0e:
         6a:03:1e:99:1a:56:c3:e5:28:7e:46:3e:76:a6:26:de:7e:54:
         77:cf:c5:f9:e6:99:47:87:23:f2:c6:a5:1d:e7:8a:0a:43:0d:
         fd:c1:b2:34:b7:e4:60:94:31:75:ee:58:63:80:48:b7:29:39:
         e0:ec:9f:bb:a1:7a:74:84:09:73:94:53:6c:2a:07:c3:b8:55:
         f2:ee:19:02:c7:df:db:a4:91:b9:1b:8a:7c:6e:46:34:e3:b0:
         c3:01:5f:48:50:f0:39:b3:18:04:90:6b:9e:54:57:b0:1e:75:
         ce:02:c7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----