Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666230303a3a2f34302d3430203d3e20323134373435.roa
File:                     326131343a316563373a666230303a3a2f34302d3430203d3e20323134373435.roa (raw, json)
Hash identifier:          VTAbIsOiZPx/dWopDpIO6Mpokm16uj1Bky56GakSuL4=
Subject key identifier:   EC:6C:77:18:BB:E1:2E:2F:50:98:4C:63:BD:61:45:D9:89:93:75:5D
Certificate issuer:       /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial:       619E93AD1007FF45DFEEE00F8489AAFF67630212
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666230303a3a2f34302d3430203d3e20323134373435.roa
Signing time:             Wed 03 Jul 2024 19:39:44 +0000
ROA not before:           Wed 03 Jul 2024 19:34:44 +0000
ROA not after:            Wed 02 Jul 2025 19:39:44 +0000
asID:                     214745
IP address blocks:        2a14:1ec7:fb00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 21:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9e:93:ad:10:07:ff:45:df:ee:e0:0f:84:89:aa:ff:67:63:02:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
        Validity
            Not Before: Jul  3 19:34:44 2024 GMT
            Not After : Jul  2 19:39:44 2025 GMT
        Subject: CN=EC6C7718BBE12E2F50984C63BD6145D98993755D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:87:5f:eb:7a:8e:04:5a:13:ad:2e:9a:17:
                    c6:79:5e:3a:54:26:1a:cc:54:47:a8:a8:d2:8f:9d:
                    25:c8:2f:80:9f:17:4e:67:62:69:35:77:49:d8:df:
                    0f:e0:6f:41:8d:4a:9e:ce:67:f8:04:8c:d6:7a:28:
                    14:b1:7f:0e:ee:2a:06:43:9b:25:77:40:77:ba:4e:
                    82:6e:d5:4a:50:3e:58:36:7f:e5:40:2a:ab:a7:9e:
                    e9:07:6d:f8:7f:0b:d7:7e:d8:c5:e1:1f:b0:57:53:
                    44:ef:19:94:1b:db:e7:b6:43:4d:74:a4:41:60:f8:
                    90:53:de:d1:97:c6:52:2d:e4:50:27:af:e7:5f:e9:
                    d2:c3:95:97:15:ee:04:12:c8:f3:55:a7:a6:9a:b2:
                    78:33:07:a7:10:86:89:de:3c:8e:f7:13:a9:6c:b5:
                    7c:82:42:ef:9d:4b:0b:fb:5b:3e:4b:42:bb:6a:60:
                    90:9d:2a:a8:86:2e:02:a8:3b:f3:25:6b:46:35:03:
                    31:e0:87:ec:e1:f3:e7:ac:da:56:d2:60:69:e1:3c:
                    86:15:81:27:73:ad:2d:fc:36:34:15:18:78:8c:f6:
                    f6:26:cb:b5:48:6a:90:b9:6a:a5:0d:ce:03:55:21:
                    1d:06:90:f1:bd:47:b0:0f:c9:87:46:87:30:87:33:
                    bb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6C:77:18:BB:E1:2E:2F:50:98:4C:63:BD:61:45:D9:89:93:75:5D
            X509v3 Authority Key Identifier:
                keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a666230303a3a2f34302d3430203d3e20323134373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:1ec7:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:e2:3d:a2:73:b7:85:8d:84:7f:c1:e9:a0:58:91:43:8f:b3:
         e1:09:3b:93:1b:a0:eb:a1:8b:b4:e6:dd:42:4b:c0:b6:e3:f4:
         53:f6:50:71:7b:d6:e3:7a:e7:ba:2e:3b:fe:1e:bb:ce:91:cc:
         d1:68:c9:a1:4f:17:96:ba:25:5e:a3:71:62:c4:be:e7:ba:81:
         20:41:09:e2:e3:f3:08:2a:a0:79:e4:62:0a:c1:a9:82:cf:cb:
         b5:3f:46:b9:ec:ca:e8:95:e6:ba:58:04:40:d1:fa:d5:1f:d6:
         ea:b6:a8:39:f0:72:0b:09:5b:6f:71:f5:ff:32:c9:99:21:ee:
         9a:e8:b5:cb:f2:17:8a:ce:1f:04:22:31:6f:2c:f6:2e:d7:9e:
         dd:a0:83:da:59:47:f8:58:56:a1:aa:6e:1b:2d:b4:fe:55:35:
         13:59:58:68:a7:12:cb:10:69:d8:30:88:fb:ae:e3:9e:f6:bc:
         be:d2:fc:94:c5:69:4e:09:fa:e2:a2:3b:81:e9:8a:c9:92:79:
         94:c3:ac:90:98:2c:27:fc:f2:38:40:99:fb:a7:8e:b7:ce:f4:
         50:d7:d6:ea:cb:d3:b5:d8:8a:92:4c:8b:59:d0:83:63:7f:3c:
         9b:61:b1:08:0f:43:db:b3:d4:8d:a8:48:e4:45:0e:c1:8d:42:
         0c:13:a3:92
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUYZ6TrRAH/0Xf7uAPhImq/2djAhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj
NGYzNTQzNDAeFw0yNDA3MDMxOTM0NDRaFw0yNTA3MDIxOTM5NDRaMDMxMTAvBgNV
BAMTKEVDNkM3NzE4QkJFMTJFMkY1MDk4NEM2M0JENjE0NUQ5ODk5Mzc1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwe4df63qOBFoTrS6aF8Z5XjpU
JhrMVEeoqNKPnSXIL4CfF05nYmk1d0nY3w/gb0GNSp7OZ/gEjNZ6KBSxfw7uKgZD
myV3QHe6ToJu1UpQPlg2f+VAKqunnukHbfh/C9d+2MXhH7BXU0TvGZQb2+e2Q010
pEFg+JBT3tGXxlIt5FAnr+df6dLDlZcV7gQSyPNVp6aasngzB6cQhonePI73E6ls
tXyCQu+dSwv7Wz5LQrtqYJCdKqiGLgKoO/Mla0Y1AzHgh+zh8+es2lbSYGnhPIYV
gSdzrS38NjQVGHiM9vYmy7VIapC5aqUNzgNVIR0GkPG9R7APyYdGhzCHM7uHAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQU7Gx3GLvhLi9QmExjvWFF2YmTdV0wHwYDVR0j
BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4
NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U
elZEUS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEzYmI5M2Yt
OThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzI2MTMxMzQzYTMxNjU2MzM3
M2E2NjYyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzNDM3MzQzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoUHsf7MA0GCSqGSIb3DQEBCwUAA4IBAQBl4j2ic7eFjYR/wemg
WJFDj7PhCTuTG6DroYu05t1CS8C24/RT9lBxe9bjeue6Ljv+HrvOkczRaMmhTxeW
uiVeo3FixL7nuoEgQQni4/MIKqB55GIKwamCz8u1P0a57Mrolea6WARA0frVH9bq
tqg58HILCVtvcfX/MsmZIe6a6LXL8heKzh8EIjFvLPYu157doIPaWUf4WFahqm4b
LbT+VTUTWVhopxLLEGnYMIj7ruOe9ry+0vyUxWlOCfriojuB6YrJknmUw6yQmCwn
/PI4QJn7p463zvRQ19bqy9O12IqSTItZ0INjfzybYbEID0Pbs9SNqEjkRQ7BjUIM
E6OS