Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336666643a3a2f34382d3438203d3e20323038353438.roa
File:                     326130613a363034303a336666643a3a2f34382d3438203d3e20323038353438.roa (raw, json)
Hash identifier:          CQFJnEgwqPjHT+eVNXaGE3b1Hu3SE1fHJc4QFNhi/HY=
Subject key identifier:   0D:B5:AD:60:85:CA:BD:92:BA:18:DA:69:D1:6B:51:41:BF:99:1A:FB
Certificate issuer:       /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial:       5544F473023B28081D99ED64C30CB8CDCEF072D4
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336666643a3a2f34382d3438203d3e20323038353438.roa
Signing time:             Wed 20 Dec 2023 01:56:53 +0000
ROA not before:           Wed 20 Dec 2023 01:51:53 +0000
ROA not after:            Wed 18 Dec 2024 01:56:53 +0000
asID:                     208548
IP address blocks:        2a0a:6040:3ffd::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 29 Jan 2024 13:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:44:f4:73:02:3b:28:08:1d:99:ed:64:c3:0c:b8:cd:ce:f0:72:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
        Validity
            Not Before: Dec 20 01:51:53 2023 GMT
            Not After : Dec 18 01:56:53 2024 GMT
        Subject: CN=0DB5AD6085CABD92BA18DA69D16B5141BF991AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e6:08:7e:10:3b:28:5f:c5:4a:5d:6b:e0:23:
                    fe:5a:33:6c:9b:7d:8e:f5:b6:c3:17:4c:9f:6c:89:
                    3c:54:e7:26:18:31:d8:84:9e:16:80:c7:90:c8:e0:
                    1c:d6:f6:73:b0:cc:bd:a7:1a:96:8d:8b:e4:bf:40:
                    a7:52:69:aa:e1:fa:bb:e8:65:3e:97:ba:ec:91:69:
                    a1:06:76:02:86:53:9b:cd:ed:82:a6:fe:fe:4c:a6:
                    78:31:ba:02:69:1b:56:7c:53:e5:4a:56:f9:04:de:
                    64:9a:63:34:87:8a:d4:29:a5:3a:13:1e:67:8e:ad:
                    60:37:7c:b6:1f:92:ac:52:4b:c8:ea:7d:f1:99:64:
                    ea:76:96:68:f7:1c:aa:d6:21:41:e2:4c:a0:77:70:
                    06:3c:3e:fd:54:df:0b:4a:34:d9:88:66:57:70:dc:
                    fc:20:8f:26:40:6f:a3:5b:7b:01:35:cc:87:8f:a9:
                    a0:60:5c:e3:58:36:9f:86:4d:7f:a1:da:c2:41:69:
                    b0:e8:de:4f:7a:8a:35:9e:91:0e:b6:bb:c8:5c:0e:
                    18:56:97:00:3e:ac:96:da:e5:73:12:c2:8f:70:c9:
                    49:83:db:75:02:48:4a:71:31:7e:d3:08:a2:e1:bc:
                    01:43:12:7c:7d:af:61:2b:08:6f:15:68:92:0d:7d:
                    5e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B5:AD:60:85:CA:BD:92:BA:18:DA:69:D1:6B:51:41:BF:99:1A:FB
            X509v3 Authority Key Identifier:
                keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/326130613a363034303a336666643a3a2f34382d3438203d3e20323038353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3ffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:e5:af:3c:6e:f1:12:6e:d3:c6:9f:8b:e1:3c:e2:19:2d:d8:
         7a:6b:a4:8e:f1:10:c7:13:4b:7a:87:12:e2:54:c5:ac:a7:3b:
         95:fd:83:23:67:da:08:83:5a:06:96:6e:a6:91:b3:aa:78:24:
         38:30:1d:45:d2:93:aa:1e:50:4a:3b:26:56:06:b3:81:89:c2:
         ca:68:a9:73:f7:7b:23:a2:a6:34:84:57:e4:f8:a3:1a:93:b2:
         b8:b1:7b:8c:38:72:cc:24:bc:e2:35:1b:63:2d:45:2f:2c:ee:
         99:63:09:a9:d1:51:83:94:66:a7:96:9f:4c:e0:fa:0b:15:75:
         d2:86:28:49:4c:59:e3:dd:1c:04:19:21:94:d8:ef:54:d8:9f:
         18:43:9c:68:c0:e9:e4:1f:d4:79:d2:0b:68:d9:ef:78:08:cb:
         d9:27:16:ce:7a:98:27:2b:85:a0:1c:02:ab:e2:98:66:da:e2:
         ef:13:97:a9:9e:8a:9e:3c:b7:2c:b9:dd:da:65:08:35:b5:26:
         3c:37:dc:f6:4d:8d:9f:19:1f:7d:b6:63:70:db:87:b2:5b:63:
         bc:15:55:b7:fb:1e:e6:1d:41:4c:e8:2a:f5:d7:29:d6:b1:a5:
         0f:95:45:44:56:40:a1:fa:61:77:eb:ee:c4:1e:b1:f0:53:b8:
         af:db:38:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----