Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323135333a3a2f34382d3438203d3e20343031333836.roa
File:                     326131343a373538313a323135333a3a2f34382d3438203d3e20343031333836.roa (raw, json)
Hash identifier:          1OB4r3FMtdvHFEviM1Xhalr0ozxAE8/AeRhg7scPrSQ=
Subject key identifier:   C2:51:54:33:10:E0:BB:FF:F9:F7:D0:8D:5C:3C:C3:FD:0B:F8:F1:D6
Certificate issuer:       /CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
Certificate serial:       69D49514DF3DBF20C5AC0C6E2D6C84A1A51B678E
Authority key identifier: AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323135333a3a2f34382d3438203d3e20343031333836.roa
Signing time:             Wed 16 Oct 2024 05:25:09 +0000
ROA not before:           Wed 16 Oct 2024 05:20:09 +0000
ROA not after:            Wed 15 Oct 2025 05:25:09 +0000
asID:                     401386
IP address blocks:        2a14:7581:2153::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 13:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d4:95:14:df:3d:bf:20:c5:ac:0c:6e:2d:6c:84:a1:a5:1b:67:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
        Validity
            Not Before: Oct 16 05:20:09 2024 GMT
            Not After : Oct 15 05:25:09 2025 GMT
        Subject: CN=C251543310E0BBFFF9F7D08D5C3CC3FD0BF8F1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:36:31:a3:94:d8:c7:bc:98:04:4c:fe:3b:
                    a3:e4:84:19:cf:c3:10:33:34:eb:11:fa:9b:6b:72:
                    ab:e3:4a:77:0c:08:65:40:f5:95:5d:aa:58:89:d7:
                    01:79:70:3b:79:6d:6e:b4:90:29:10:20:3e:27:0c:
                    bb:d6:08:17:4f:7e:fd:e7:3b:ea:dd:de:43:f2:71:
                    6d:5c:6b:35:af:19:01:90:3d:88:0c:2e:76:2e:13:
                    08:f1:ec:70:7f:8b:f6:f0:25:2d:5a:6d:0e:db:16:
                    83:06:21:f0:c9:97:81:f3:76:9c:9a:93:e0:c9:c9:
                    14:78:1f:ea:87:32:bc:1a:fb:f4:b0:2a:bf:ee:cf:
                    15:06:02:28:bd:3f:84:0e:33:d3:13:74:ec:aa:6b:
                    96:aa:32:c9:78:5c:82:b4:86:de:27:83:39:9a:c7:
                    3a:99:da:d0:c0:ca:88:c2:c8:c5:2b:34:91:c9:85:
                    51:6c:5f:b7:82:7e:8b:b3:b3:df:61:e7:c2:a2:bd:
                    5a:7b:7a:73:13:c6:ef:e5:50:8c:fc:54:e5:4c:a5:
                    fc:8c:2c:e3:88:a8:a2:50:fe:bb:7b:15:a3:e6:ea:
                    88:48:77:0a:49:3c:37:14:82:f9:0a:46:e2:16:2a:
                    28:e9:f2:f5:9d:a7:d6:ee:41:76:1f:07:b0:13:9b:
                    d1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:51:54:33:10:E0:BB:FF:F9:F7:D0:8D:5C:3C:C3:FD:0B:F8:F1:D6
            X509v3 Authority Key Identifier:
                keyid:AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323135333a3a2f34382d3438203d3e20343031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:2153::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:00:01:ea:b5:49:a7:f6:2f:7a:99:06:43:6f:7d:db:dd:d0:
         9e:28:0f:7f:d0:9e:7b:c5:7a:45:1e:17:1d:c0:11:e1:cf:6e:
         9e:97:e0:86:8b:33:a6:d7:3e:71:e1:ab:30:5b:c4:5f:ce:3e:
         53:b4:23:9b:f3:af:da:b9:54:eb:56:1f:be:3f:af:1c:34:f4:
         bf:f2:6e:f7:f2:76:30:91:80:f8:84:32:ba:40:f1:0e:a5:27:
         70:a1:9c:9a:fd:72:8c:c4:93:4a:6c:54:c3:86:80:e7:3a:4d:
         7a:4a:30:42:1b:52:7b:09:4f:36:0c:9c:b5:43:1d:7f:88:a7:
         74:00:e3:e8:31:91:fd:8a:9d:21:9b:a4:11:9b:34:f4:8d:15:
         1e:5e:d0:9d:87:56:a3:c7:71:91:5c:fa:06:c1:e6:8c:03:1c:
         0e:f9:ab:78:ac:5a:e2:48:7a:90:16:cc:dd:4b:19:58:db:9a:
         c6:f5:65:c8:82:41:f2:df:7c:63:4b:8f:3c:21:cd:78:32:8a:
         0b:19:06:fc:86:17:46:34:48:04:a0:57:95:c6:bb:d0:a4:12:
         f6:b7:39:95:a2:b9:3d:59:3e:17:4a:1a:62:1a:1c:16:4d:93:
         7a:1c:ec:72:a5:93:10:c1:13:40:d9:5d:bf:c0:1f:6e:6e:ea:
         7d:07:91:f7
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUadSVFN89vyDFrAxuLWyEoaUbZ44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVERUQzREVDQjFEQThBNEU2QUFFNjcyNkU4MDU1MzA0
NjA4OUFGRDAeFw0yNDEwMTYwNTIwMDlaFw0yNTEwMTUwNTI1MDlaMDMxMTAvBgNV
BAMTKEMyNTE1NDMzMTBFMEJCRkZGOUY3RDA4RDVDM0NDM0ZEMEJGOEYxRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CDYxo5TYx7yYBEz+O6PkhBnP
wxAzNOsR+ptrcqvjSncMCGVA9ZVdqliJ1wF5cDt5bW60kCkQID4nDLvWCBdPfv3n
O+rd3kPycW1cazWvGQGQPYgMLnYuEwjx7HB/i/bwJS1abQ7bFoMGIfDJl4Hzdpya
k+DJyRR4H+qHMrwa+/SwKr/uzxUGAii9P4QOM9MTdOyqa5aqMsl4XIK0ht4ngzma
xzqZ2tDAyojCyMUrNJHJhVFsX7eCfouzs99h58KivVp7enMTxu/lUIz8VOVMpfyM
LOOIqKJQ/rt7FaPm6ohIdwpJPDcUgvkKRuIWKijp8vWdp9buQXYfB7ATm9G5AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUwlFUMxDgu//599CNXDzD/Qv48dYwHwYDVR0j
BBgwFoAUrt7T3ssdqKTmquZyboBVMEYImv0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTI1NDk5NDMtNjQ1Ny00NWUwLWE1NGYtYzE5MzA4MTVi
NmY3LzAvQUVERUQzREVDQjFEQThBNEU2QUFFNjcyNkU4MDU1MzA0NjA4OUFGRC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BRURFRDNERUNCMURBOEE0RTZBQUU2NzI2
RTgwNTUzMDQ2MDg5QUZELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8xMjU0OTk0My02NDU3LTQ1ZTAtYTU0Zi1jMTkzMDgxNWI2ZjcvMC8zMjYxMzEz
NDNhMzczNTM4MzEzYTMyMzEzNTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz
MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gSFTMA0GCSqGSIb3DQEBCwUAA4IBAQA6
AAHqtUmn9i96mQZDb33b3dCeKA9/0J57xXpFHhcdwBHhz26el+CGizOm1z5x4asw
W8Rfzj5TtCOb86/auVTrVh++P68cNPS/8m738nYwkYD4hDK6QPEOpSdwoZya/XKM
xJNKbFTDhoDnOk16SjBCG1J7CU82DJy1Qx1/iKd0AOPoMZH9ip0hm6QRmzT0jRUe
XtCdh1ajx3GRXPoGweaMAxwO+at4rFriSHqQFszdSxlY25rG9WXIgkHy33xjS488
Ic14MooLGQb8hhdGNEgEoFeVxrvQpBL2tzmVork9WT4XShpiGhwWTZN6HOxypZMQ
wRNA2V2/wB9ubup9B5H3
-----END CERTIFICATE-----