Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/326130353a646663353a666666643a3a2f34382d3438203d3e20323038353438.roa
File:                     326130353a646663353a666666643a3a2f34382d3438203d3e20323038353438.roa (raw, json)
Hash identifier:          MD3yF1bG4EWbuUl5ugGuJyTd5emX8U5iffgLkDjXNOU=
Subject key identifier:   0F:84:75:7B:C3:5B:71:29:1A:28:9B:63:0C:11:79:F0:EA:36:A3:13
Certificate issuer:       /CN=847138B5401830B89B52403C777718BB40B2B6B5
Certificate serial:       480251C5A8CCE9F88DEF38C1DD57A84E50B7FF86
Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/326130353a646663353a666666643a3a2f34382d3438203d3e20323038353438.roa
Signing time:             Wed 20 Dec 2023 01:56:55 +0000
ROA not before:           Wed 20 Dec 2023 01:51:55 +0000
ROA not after:            Wed 18 Dec 2024 01:56:55 +0000
asID:                     208548
IP address blocks:        2a05:dfc5:fffd::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 29 Jan 2024 13:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:02:51:c5:a8:cc:e9:f8:8d:ef:38:c1:dd:57:a8:4e:50:b7:ff:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5
        Validity
            Not Before: Dec 20 01:51:55 2023 GMT
            Not After : Dec 18 01:56:55 2024 GMT
        Subject: CN=0F84757BC35B71291A289B630C1179F0EA36A313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:17:88:0a:0b:c8:b3:66:95:25:7a:4b:a3:
                    16:05:49:09:ee:ba:6b:48:bb:ae:19:02:5a:fe:25:
                    c1:73:31:c5:26:28:1b:18:9e:8b:8f:87:33:b7:7a:
                    3f:31:07:48:f3:a2:d7:e1:cd:ce:b5:9e:57:f8:0d:
                    bc:38:ec:f2:fd:7f:75:66:77:98:8d:58:78:ad:9f:
                    bd:f0:3a:45:0d:99:b7:0c:0d:fc:30:f2:90:4d:b4:
                    43:1c:2b:67:4c:f6:12:ae:f2:29:bf:ad:2a:1b:bb:
                    ea:65:f7:39:c7:a7:1d:7c:c8:dc:20:9f:7f:de:8e:
                    26:66:47:ad:3f:17:38:2a:3b:77:df:13:17:55:34:
                    45:ed:9d:ce:f5:aa:43:54:02:95:67:12:c6:de:68:
                    c0:8e:d0:70:87:aa:2e:f3:08:44:ea:0c:d0:93:ef:
                    7d:c4:77:d0:11:d8:38:9e:62:d7:86:03:68:c6:16:
                    b8:50:e1:ea:2f:59:a0:ef:31:68:75:89:98:35:7e:
                    d9:fe:05:17:9e:16:02:5d:88:06:08:da:49:3b:71:
                    21:0d:4b:44:02:9d:e8:41:f6:7e:b4:72:91:e5:a8:
                    3c:70:9b:77:04:65:a5:83:35:c7:8d:a8:54:57:68:
                    f5:89:d6:3b:71:f1:2f:17:0f:dd:f6:e1:77:79:94:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:84:75:7B:C3:5B:71:29:1A:28:9B:63:0C:11:79:F0:EA:36:A3:13
            X509v3 Authority Key Identifier:
                keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/326130353a646663353a666666643a3a2f34382d3438203d3e20323038353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc5:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:58:75:cd:57:fc:71:82:54:5c:bf:3c:1b:f3:6e:30:f2:2f:
         c0:0f:fd:e8:36:4a:d3:fd:d7:d4:25:ba:cc:cc:81:f5:de:e6:
         6a:a0:1a:ba:3c:10:e8:2d:aa:04:86:c1:6c:ec:f0:6d:02:e8:
         44:9a:ae:44:f6:e1:a4:e8:ba:64:6c:b1:93:94:f2:a1:c8:b5:
         f3:88:04:19:d7:f3:34:c4:c8:a7:34:86:49:09:25:88:2a:29:
         04:9e:28:fd:a3:a6:88:4c:92:ef:71:4d:8f:4e:42:45:a0:4e:
         53:6e:ee:ea:26:f8:e1:79:bf:d6:c8:e7:b7:10:c3:9b:7f:cd:
         04:d1:98:9f:43:a9:96:1f:4d:d1:1a:e8:21:e3:40:78:fe:e1:
         92:44:3e:42:a3:c3:28:1b:52:e1:73:71:e3:67:be:c0:bd:fc:
         cc:45:c0:53:0e:ff:7b:be:e7:ec:f3:49:36:19:9f:1f:98:ea:
         ce:57:1d:98:b0:5e:ad:a2:fa:d1:0c:d3:2a:b1:44:4c:95:a7:
         e6:ff:49:87:27:64:07:8e:34:b5:b9:5e:af:f6:91:4a:4f:d9:
         43:ee:ee:54:81:df:19:5d:ff:51:ce:39:43:23:69:5d:96:f1:
         72:c6:18:65:72:5a:16:98:63:83:f3:6a:7a:2c:53:76:81:91:
         7b:ae:6c:fc
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUSAJRxajM6fiN7zjB3VeoTlC3/4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0
MEIyQjZCNTAeFw0yMzEyMjAwMTUxNTVaFw0yNDEyMTgwMTU2NTVaMDMxMTAvBgNV
BAMTKDBGODQ3NTdCQzM1QjcxMjkxQTI4OUI2MzBDMTE3OUYwRUEzNkEzMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfxeICgvIs2aVJXpLoxYFSQnu
umtIu64ZAlr+JcFzMcUmKBsYnouPhzO3ej8xB0jzotfhzc61nlf4Dbw47PL9f3Vm
d5iNWHitn73wOkUNmbcMDfww8pBNtEMcK2dM9hKu8im/rSobu+pl9znHpx18yNwg
n3/ejiZmR60/FzgqO3ffExdVNEXtnc71qkNUApVnEsbeaMCO0HCHqi7zCETqDNCT
733Ed9AR2DieYteGA2jGFrhQ4eovWaDvMWh1iZg1ftn+BReeFgJdiAYI2kk7cSEN
S0QCnehB9n60cpHlqDxwm3cEZaWDNceNqFRXaPWJ1jtx8S8XD9324Xd5lBUJAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUD4R1e8NbcSkaKJtjDBF58Oo2oxMwHwYDVR0j
BBgwFoAUhHE4tUAYMLibUkA8d3cYu0CytrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzQvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIyQjZCNS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIy
QjZCNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWJmOGU5Nzct
NzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRlLzQvMzI2MTMwMzUzYTY0NjY2MzM1
M2E2NjY2NjY2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzODM1MzQzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoF38X//TANBgkqhkiG9w0BAQsFAAOCAQEAgVh1zVf8cYJUXL88
G/NuMPIvwA/96DZK0/3X1CW6zMyB9d7maqAaujwQ6C2qBIbBbOzwbQLoRJquRPbh
pOi6ZGyxk5Tyoci184gEGdfzNMTIpzSGSQkliCopBJ4o/aOmiEyS73FNj05CRaBO
U27u6ib44Xm/1sjntxDDm3/NBNGYn0Oplh9N0RroIeNAeP7hkkQ+QqPDKBtS4XNx
42e+wL38zEXAUw7/e77n7PNJNhmfH5jqzlcdmLBeraL60QzTKrFETJWn5v9Jhydk
B440tbler/aRSk/ZQ+7uVIHfGV3/Uc45QyNpXZbxcsYYZXJaFphjg/NqeixTdoGR
e65s/A==
-----END CERTIFICATE-----