Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa
File:                     326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (raw, json)
Hash identifier:          tKr+mGQXboY+AkIUCPXtjTBzHpsb6xa1jSHl04VrFQ8=
Subject key identifier:   CD:20:EA:02:C6:AD:C3:20:F9:D0:B6:32:08:15:EA:15:29:06:5C:72
Certificate issuer:       /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial:       7DDA9B1B5BA652F8E3C14DAD81F648B7A13AE56C
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa
Signing time:             Sun 10 Dec 2023 17:55:59 +0000
ROA not before:           Sun 10 Dec 2023 17:50:59 +0000
ROA not after:            Sun 08 Dec 2024 17:55:59 +0000
asID:                     203069
IP address blocks:        2a0a:6040:1100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 22 Jun 2024 00:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:da:9b:1b:5b:a6:52:f8:e3:c1:4d:ad:81:f6:48:b7:a1:3a:e5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
        Validity
            Not Before: Dec 10 17:50:59 2023 GMT
            Not After : Dec  8 17:55:59 2024 GMT
        Subject: CN=CD20EA02C6ADC320F9D0B6320815EA1529065C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:07:42:79:e9:28:da:1a:b0:6c:fb:f3:01:
                    e1:c7:f0:7c:e8:6a:d9:87:42:08:76:96:94:1c:e9:
                    b0:5b:69:70:14:fa:07:7d:a9:c0:3a:60:3b:47:46:
                    5b:71:8c:36:a1:ee:0d:f9:dc:03:53:f4:8a:fc:bb:
                    48:f9:e9:80:e3:bd:2a:ca:b2:20:0c:28:c1:67:87:
                    db:aa:59:ae:72:50:d8:f3:a4:02:03:78:a9:3a:0e:
                    7c:02:23:06:a3:13:8b:f1:5e:31:cc:49:43:7d:47:
                    da:6c:a8:96:9f:3c:ac:85:05:a2:ef:b7:d0:82:7d:
                    70:2d:82:20:c6:bc:d8:a3:14:cd:c1:ef:dd:03:19:
                    b9:95:3b:c0:6c:1d:76:f2:2d:61:1d:99:88:7c:f0:
                    34:f7:05:f7:b5:4a:51:95:e0:eb:f2:1c:d9:1c:4e:
                    5b:8b:3d:3e:c8:b9:f5:e7:68:a7:64:57:13:70:94:
                    19:4d:9f:c3:c9:db:09:33:fc:6e:54:f4:b8:85:10:
                    40:cd:8f:6e:49:19:95:9b:d5:cc:84:8f:68:0d:a6:
                    ba:3a:67:b7:3f:aa:fe:89:cf:92:0e:98:24:d9:82:
                    43:0f:77:ea:f5:89:1b:16:27:64:2c:51:c9:fe:45:
                    c8:7c:e1:65:9b:be:4f:21:bf:15:31:d6:10:32:ae:
                    ae:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:20:EA:02:C6:AD:C3:20:F9:D0:B6:32:08:15:EA:15:29:06:5C:72
            X509v3 Authority Key Identifier:
                keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:a6:2d:92:9c:61:df:16:fe:67:ac:cc:2a:5d:8f:58:f4:eb:
         ea:7f:70:3c:f3:1a:2d:7f:e3:b7:89:cb:26:05:23:a5:5c:be:
         f7:d1:6c:58:49:b8:bd:eb:8e:ce:40:e3:32:05:28:82:b7:0a:
         e4:13:1b:e3:0f:99:19:a2:ed:98:00:f0:49:f4:5e:8c:d4:c9:
         73:4c:3f:71:89:d5:11:7e:39:04:e6:eb:68:1a:3d:c7:3c:65:
         88:0d:14:89:8a:fa:e5:59:0f:e6:28:de:73:fc:55:ab:78:39:
         56:18:93:dd:59:89:52:0a:35:be:c8:54:fb:a1:d3:ff:ce:c5:
         09:ea:5a:c3:ef:48:2f:2d:ab:4c:79:d6:01:6e:79:1f:39:96:
         86:f4:15:fa:78:b9:b2:d2:e1:6c:b8:a7:cc:58:31:d5:47:09:
         16:19:ed:79:a7:2f:20:bb:74:47:5d:40:f8:a5:ad:b5:9f:6d:
         70:cf:57:4c:31:0b:7d:93:9b:5e:6b:f8:ec:e5:4a:3f:9a:43:
         aa:39:d6:e7:fd:5f:1a:e0:c1:9e:77:9d:d0:81:1a:09:e9:68:
         5a:8d:71:b5:cb:08:d2:9b:1c:b5:dc:10:4d:84:2c:6a:1b:db:
         b3:05:ee:7e:d1:ed:66:4f:fd:84:70:3b:a8:31:4f:33:d6:49:
         62:31:96:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----