Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323139393a3a2f34382d3438203d3e20343031333836.roa
File:                     326131343a373538313a323139393a3a2f34382d3438203d3e20343031333836.roa (raw, json)
Hash identifier:          BZdpzYQHjNIRpd/VipMhSnmKAqr2FyGgKYgL2WrDXaQ=
Subject key identifier:   F1:9B:0E:14:9A:6A:3E:2F:A2:4C:6F:BD:00:A7:8B:74:BB:3A:A4:82
Certificate issuer:       /CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
Certificate serial:       773A186AF52380CA1477384B1C9BF3C6C913F7DC
Authority key identifier: AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323139393a3a2f34382d3438203d3e20343031333836.roa
Signing time:             Wed 16 Oct 2024 05:25:38 +0000
ROA not before:           Wed 16 Oct 2024 05:20:38 +0000
ROA not after:            Wed 15 Oct 2025 05:25:38 +0000
asID:                     401386
IP address blocks:        2a14:7581:2199::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 07 Nov 2024 13:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3a:18:6a:f5:23:80:ca:14:77:38:4b:1c:9b:f3:c6:c9:13:f7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
        Validity
            Not Before: Oct 16 05:20:38 2024 GMT
            Not After : Oct 15 05:25:38 2025 GMT
        Subject: CN=F19B0E149A6A3E2FA24C6FBD00A78B74BB3AA482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:7b:17:4c:cd:ac:83:f4:4a:78:bc:8d:bd:
                    2b:9a:5e:db:0e:69:1c:4b:7f:f0:74:2a:9d:75:ee:
                    47:de:7f:23:19:6a:f3:26:de:b4:04:f2:20:58:43:
                    b1:cc:e4:7a:dc:7c:53:6e:fa:c1:62:65:70:28:01:
                    fe:8a:df:4c:bd:99:90:df:a5:b7:63:d7:53:a5:58:
                    f3:14:99:36:5b:04:b3:8e:4d:68:53:c2:da:18:e8:
                    04:71:bf:b7:aa:89:f2:56:c7:7c:23:ab:b7:e0:08:
                    ce:d5:9b:a8:9d:34:81:f8:35:c9:67:53:cf:ad:7a:
                    3e:73:a7:37:cd:f6:d3:91:10:2d:41:04:96:28:93:
                    d7:bb:6f:8c:09:af:c4:80:66:1b:a3:6a:0e:b5:b6:
                    c2:18:a6:16:22:d5:de:74:6b:83:9e:57:8b:43:e3:
                    6e:14:84:4a:a7:55:05:cc:ba:8b:cd:72:90:3b:21:
                    0a:ae:ca:fd:41:d9:07:05:3e:1a:81:ea:a8:5b:35:
                    fe:f4:81:13:67:19:fe:01:6c:95:dc:b1:d0:ba:ad:
                    fa:74:ed:a1:dd:a1:ab:8a:9e:e4:17:76:42:ec:bf:
                    9e:03:b1:a1:9a:91:b1:c5:07:24:8a:ce:38:5a:b8:
                    76:4f:58:7a:3c:86:74:f2:14:f7:5b:e9:96:c5:df:
                    e6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9B:0E:14:9A:6A:3E:2F:A2:4C:6F:BD:00:A7:8B:74:BB:3A:A4:82
            X509v3 Authority Key Identifier:
                keyid:AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323139393a3a2f34382d3438203d3e20343031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:2199::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:a4:d4:9f:47:ff:a2:cc:28:41:53:16:3d:95:26:44:43:f4:
         66:ba:77:13:ff:ea:2b:a7:cd:55:d6:cf:6f:f0:e1:28:9c:80:
         6b:32:95:2b:43:24:fa:7c:c3:5f:02:56:49:ac:61:e0:75:34:
         92:5b:01:91:4a:04:25:d9:e9:97:e2:9a:7d:77:2a:24:7a:ad:
         2a:38:cd:50:39:b4:8c:50:ef:57:b0:96:ac:18:f2:31:81:41:
         62:33:98:bb:5d:0e:0f:fa:dd:1d:1a:7c:b3:8f:4a:a6:cc:2f:
         e1:40:f5:27:82:21:4f:00:ed:4a:fa:81:f2:02:0d:f3:ba:c7:
         6d:e4:c9:8d:f9:55:7b:78:68:79:9d:ce:a0:9a:bd:12:81:09:
         c8:2b:bc:da:92:b7:ca:c7:b3:d6:35:cd:92:95:9a:04:09:c4:
         8b:74:b0:97:32:fe:06:8f:14:95:b3:65:4e:a4:ed:b1:5f:9d:
         29:1a:08:9d:a7:3a:e1:8a:0a:2c:5c:c1:94:dc:fb:b7:68:2a:
         00:31:01:13:c3:df:93:6a:4d:13:18:a1:01:4b:f8:d5:80:19:
         a0:20:59:63:4c:7c:a0:39:54:fa:66:b9:25:62:60:bb:9e:2b:
         20:90:fa:f7:3f:e3:0a:cb:e4:b6:6c:b5:39:4d:23:8c:6d:51:
         df:63:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----