Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/326130353a646663353a666666643a3a2f34382d3438203d3e203531303139.roa
File:                     326130353a646663353a666666643a3a2f34382d3438203d3e203531303139.roa (raw, json)
Hash identifier:          22DFeSeYTRcvRYskbp1yPl689/aD1WBsV4CtdfPMLKk=
Subject key identifier:   6F:8D:B3:44:3E:E4:0A:DC:B5:35:E5:EF:6F:02:EE:56:40:73:5F:9B
Certificate issuer:       /CN=847138B5401830B89B52403C777718BB40B2B6B5
Certificate serial:       1636F0A136B92E47AE94C1474F435CA669FF5558
Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/326130353a646663353a666666643a3a2f34382d3438203d3e203531303139.roa
Signing time:             Wed 20 Dec 2023 01:56:59 +0000
ROA not before:           Wed 20 Dec 2023 01:51:59 +0000
ROA not after:            Wed 18 Dec 2024 01:56:59 +0000
asID:                     51019
IP address blocks:        2a05:dfc5:fffd::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 29 Jan 2024 13:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:36:f0:a1:36:b9:2e:47:ae:94:c1:47:4f:43:5c:a6:69:ff:55:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5
        Validity
            Not Before: Dec 20 01:51:59 2023 GMT
            Not After : Dec 18 01:56:59 2024 GMT
        Subject: CN=6F8DB3443EE40ADCB535E5EF6F02EE5640735F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:6d:16:4d:fc:4b:59:6d:f1:8c:72:85:6b:
                    f1:e7:b6:a2:38:07:58:9e:de:ba:c6:3c:6c:40:6d:
                    33:d8:cc:ac:1d:df:e4:20:71:dc:c3:38:0c:2c:9e:
                    84:52:44:15:ae:74:be:72:55:65:93:64:9a:39:7b:
                    a1:b9:be:a3:ad:88:ab:48:e6:cb:94:a7:bf:fa:98:
                    d1:db:46:05:5e:e2:b9:07:ce:11:a8:e0:c0:f5:da:
                    34:7f:12:a1:74:45:1d:82:d4:06:e1:66:5b:6f:93:
                    c4:63:f4:5e:03:5e:2b:ed:b8:32:e9:80:b4:a5:96:
                    d0:d7:cb:dc:1f:d5:3f:4b:36:8b:58:71:11:41:c6:
                    3a:1a:72:cd:e7:b2:ab:a8:16:e3:b6:1d:6d:c9:ad:
                    da:bf:d1:3c:06:f4:a1:71:a3:95:bf:c1:65:20:e3:
                    67:d0:75:48:62:34:b5:2d:df:2f:73:d8:02:fe:cf:
                    63:36:f0:11:f0:30:91:da:bb:f2:bd:2e:1a:eb:34:
                    1c:1c:b5:f8:d5:02:22:9b:90:63:cf:d2:0d:2d:b8:
                    82:43:18:07:8f:d1:29:7f:65:b7:d8:7a:ba:a3:e5:
                    0e:4e:1c:3e:2c:a5:5e:61:02:4c:bc:08:34:1e:4d:
                    c4:49:72:75:5a:a3:13:01:0a:b0:6d:79:2d:ba:dd:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:B3:44:3E:E4:0A:DC:B5:35:E5:EF:6F:02:EE:56:40:73:5F:9B
            X509v3 Authority Key Identifier:
                keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/326130353a646663353a666666643a3a2f34382d3438203d3e203531303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc5:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:21:c3:42:21:e7:1d:d5:29:ec:87:f1:cb:56:df:25:06:f0:
         15:72:18:9c:47:c9:f4:84:d1:ad:11:56:9e:d8:42:b6:ff:c0:
         9e:9d:7c:14:42:ba:88:c6:11:0f:a4:b3:5b:ce:79:09:35:a2:
         ba:e6:0d:db:f5:e8:19:c4:f0:f4:17:34:5e:80:a2:25:fb:7e:
         37:37:a7:5a:ae:02:38:b8:b0:8f:11:04:83:d5:18:4e:3d:0a:
         f9:fb:00:26:a5:a4:2d:e9:22:f9:11:d6:16:fa:5e:e3:a1:a8:
         50:5e:f0:6a:89:96:1e:79:9c:5e:d8:00:30:29:b0:17:ba:8a:
         02:5a:83:9d:f8:e5:9c:90:db:d9:69:cd:8d:77:28:7c:97:ce:
         31:5a:3b:be:73:ed:18:fb:f2:39:2d:72:3c:2c:cd:b3:e8:50:
         82:4d:24:e0:00:f2:81:ca:f1:c6:20:2e:5f:69:e0:91:17:c8:
         f3:b4:5c:bb:56:98:1d:1f:f1:d3:87:6b:d5:08:73:07:0f:13:
         b9:6d:87:ad:3f:d4:20:97:c1:62:a4:24:df:eb:e8:43:20:c1:
         91:e2:c0:70:f4:fe:17:90:4b:e9:82:d5:ce:3c:0f:34:9d:63:
         7a:da:66:fe:90:ae:81:31:a7:b2:74:89:55:68:ba:9f:78:ff:
         7a:20:59:09
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUFjbwoTa5LkeulMFHT0Ncpmn/VVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0
MEIyQjZCNTAeFw0yMzEyMjAwMTUxNTlaFw0yNDEyMTgwMTU2NTlaMDMxMTAvBgNV
BAMTKDZGOERCMzQ0M0VFNDBBRENCNTM1RTVFRjZGMDJFRTU2NDA3MzVGOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52G0WTfxLWW3xjHKFa/HntqI4
B1ie3rrGPGxAbTPYzKwd3+QgcdzDOAwsnoRSRBWudL5yVWWTZJo5e6G5vqOtiKtI
5suUp7/6mNHbRgVe4rkHzhGo4MD12jR/EqF0RR2C1AbhZltvk8Rj9F4DXivtuDLp
gLSlltDXy9wf1T9LNotYcRFBxjoacs3nsquoFuO2HW3Jrdq/0TwG9KFxo5W/wWUg
42fQdUhiNLUt3y9z2AL+z2M28BHwMJHau/K9LhrrNBwctfjVAiKbkGPP0g0tuIJD
GAeP0Sl/ZbfYerqj5Q5OHD4spV5hAky8CDQeTcRJcnVaoxMBCrBteS263e/FAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUb42zRD7kCty1NeXvbwLuVkBzX5swHwYDVR0j
BBgwFoAUhHE4tUAYMLibUkA8d3cYu0CytrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzQvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIyQjZCNS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIy
QjZCNS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWJmOGU5Nzct
NzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRlLzQvMzI2MTMwMzUzYTY0NjY2MzM1
M2E2NjY2NjY2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzEzMDMxMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqBd/F//0wDQYJKoZIhvcNAQELBQADggEBAH4hw0Ih5x3VKeyH8ctW
3yUG8BVyGJxHyfSE0a0RVp7YQrb/wJ6dfBRCuojGEQ+ks1vOeQk1orrmDdv16BnE
8PQXNF6AoiX7fjc3p1quAji4sI8RBIPVGE49Cvn7ACalpC3pIvkR1hb6XuOhqFBe
8GqJlh55nF7YADApsBe6igJag5345ZyQ29lpzY13KHyXzjFaO75z7Rj78jktcjws
zbPoUIJNJOAA8oHK8cYgLl9p4JEXyPO0XLtWmB0f8dOHa9UIcwcPE7lth60/1CCX
wWKkJN/r6EMgwZHiwHD0/heQS+mC1c48DzSdY3raZv6QroExp7J0iVVoup94/3og
WQk=
-----END CERTIFICATE-----