Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/323630323a666332333a3132653a3a2f34372d3438203d3e203134363138.roa
File:                     323630323a666332333a3132653a3a2f34372d3438203d3e203134363138.roa (raw, json)
Hash identifier:          boW3s8xeyLOupgw5DhlMisliZC1xdLYziseBlKalagI=
Subject key identifier:   EB:29:C0:42:BF:79:AE:A4:E3:BD:91:C8:F3:31:6B:48:7C:CB:B1:05
Certificate issuer:       /CN=52E8DFFC6F676D33CB89DE115CEEF286B5017228
Certificate serial:       3D9524601CF54DDC1F2CA4B576C383D6D9E2C862
Authority key identifier: 52:E8:DF:FC:6F:67:6D:33:CB:89:DE:11:5C:EE:F2:86:B5:01:72:28
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/52E8DFFC6F676D33CB89DE115CEEF286B5017228.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/323630323a666332333a3132653a3a2f34372d3438203d3e203134363138.roa
Signing time:             Thu 22 Aug 2024 02:12:01 +0000
ROA not before:           Thu 22 Aug 2024 02:07:01 +0000
ROA not after:            Thu 21 Aug 2025 02:12:01 +0000
asID:                     14618
IP address blocks:        2602:fc23:12e::/47 maxlen: 48

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 02:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:95:24:60:1c:f5:4d:dc:1f:2c:a4:b5:76:c3:83:d6:d9:e2:c8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E8DFFC6F676D33CB89DE115CEEF286B5017228
        Validity
            Not Before: Aug 22 02:07:01 2024 GMT
            Not After : Aug 21 02:12:01 2025 GMT
        Subject: CN=EB29C042BF79AEA4E3BD91C8F3316B487CCBB105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:d7:8e:ad:0b:b9:0f:66:53:c7:67:8b:46:
                    ee:38:fd:62:70:90:38:b8:94:23:3a:76:6e:bd:4d:
                    18:b4:0f:8d:a2:0b:dc:1e:bf:4b:ff:01:26:7e:48:
                    bd:8c:85:98:f6:ec:97:a8:dc:f9:a4:7f:d3:7c:ee:
                    52:44:2b:59:91:6c:4f:b0:7e:80:15:62:8a:37:ab:
                    35:e5:33:fd:b7:6e:6d:e1:5e:26:40:52:aa:a0:49:
                    33:af:25:bc:33:c7:9c:38:54:76:55:10:33:38:ad:
                    c0:5f:c3:c3:6c:6d:a8:29:f8:62:e5:07:e0:95:80:
                    06:d1:6c:bb:1f:e6:5a:0b:9b:c5:0c:27:a3:d0:8b:
                    31:02:01:be:5d:bd:f3:63:15:9f:b1:1f:d3:c0:60:
                    ba:21:90:e9:49:37:0b:01:f3:9f:0b:13:e4:ac:77:
                    2b:d3:9e:ae:97:92:cd:47:bb:30:d4:23:ab:1e:30:
                    90:38:5c:9c:ed:83:0b:ea:81:a5:45:c5:ba:c0:54:
                    4e:b7:66:a2:4a:e5:8d:57:5f:de:5e:63:44:b4:6c:
                    22:ab:b3:06:0b:b6:1d:f3:45:65:b1:f3:86:98:28:
                    0d:e3:63:60:fd:e4:af:ec:c5:aa:e6:a5:97:eb:e7:
                    9a:8c:0b:98:1b:61:d4:78:7c:84:f2:27:86:d4:8f:
                    24:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:29:C0:42:BF:79:AE:A4:E3:BD:91:C8:F3:31:6B:48:7C:CB:B1:05
            X509v3 Authority Key Identifier:
                keyid:52:E8:DF:FC:6F:67:6D:33:CB:89:DE:11:5C:EE:F2:86:B5:01:72:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/52E8DFFC6F676D33CB89DE115CEEF286B5017228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/52E8DFFC6F676D33CB89DE115CEEF286B5017228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/323630323a666332333a3132653a3a2f34372d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:12e::/47

    Signature Algorithm: sha256WithRSAEncryption
         ae:d7:9f:8f:b4:8f:cd:6a:bc:bc:9e:b0:7f:8d:dc:ec:41:15:
         12:d3:2c:f7:65:90:d7:07:61:69:1e:bc:59:09:05:53:20:88:
         24:76:01:58:52:da:79:5f:20:59:57:d6:4c:75:f9:7a:92:b1:
         29:13:58:eb:ed:bf:9a:df:29:f2:cf:e2:b1:73:3f:22:3d:41:
         0c:07:bb:b1:98:99:b2:03:13:c5:f1:b6:5f:ee:ec:33:e5:bf:
         52:b0:70:94:b0:48:28:10:f6:ac:cf:17:bf:3c:08:5a:90:a8:
         92:c4:70:49:80:a8:97:ad:a4:72:10:88:84:02:3d:97:3b:cd:
         28:9f:e1:c7:4c:27:a9:76:0a:6e:2f:c0:d4:63:3c:01:de:cd:
         ac:96:92:14:2f:17:c8:c3:9a:d2:e2:f0:ce:98:37:45:bc:6f:
         24:0f:99:bf:c2:68:7d:08:4e:ae:53:b5:7f:d3:90:00:ce:d0:
         5e:fc:86:54:eb:5f:84:6f:d4:ab:65:1a:19:19:cc:9c:e0:83:
         17:bc:d0:63:62:4a:24:2e:9b:0e:4f:57:ab:97:17:12:2f:a6:
         48:4b:f7:3f:5f:3b:b3:a1:d3:5b:4b:53:09:43:4e:60:96:1d:
         81:14:21:7d:0b:d3:d9:a2:28:1d:61:2e:3d:6e:ea:3b:e1:cf:
         75:22:f0:48
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUPZUkYBz1TdwfLKS1dsOD1tniyGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJFOERGRkM2RjY3NkQzM0NCODlERTExNUNFRUYyODZC
NTAxNzIyODAeFw0yNDA4MjIwMjA3MDFaFw0yNTA4MjEwMjEyMDFaMDMxMTAvBgNV
BAMTKEVCMjlDMDQyQkY3OUFFQTRFM0JEOTFDOEYzMzE2QjQ4N0NDQkIxMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC029eOrQu5D2ZTx2eLRu44/WJw
kDi4lCM6dm69TRi0D42iC9wev0v/ASZ+SL2MhZj27Jeo3Pmkf9N87lJEK1mRbE+w
foAVYoo3qzXlM/23bm3hXiZAUqqgSTOvJbwzx5w4VHZVEDM4rcBfw8Nsbagp+GLl
B+CVgAbRbLsf5loLm8UMJ6PQizECAb5dvfNjFZ+xH9PAYLohkOlJNwsB858LE+Ss
dyvTnq6Xks1HuzDUI6seMJA4XJztgwvqgaVFxbrAVE63ZqJK5Y1XX95eY0S0bCKr
swYLth3zRWWx84aYKA3jY2D95K/sxarmpZfr55qMC5gbYdR4fITyJ4bUjyRnAgMB
AAGjggJ2MIICcjAdBgNVHQ4EFgQU6ynAQr95rqTjvZHI8zFrSHzLsQUwHwYDVR0j
BBgwFoAUUujf/G9nbTPLid4RXO7yhrUBcigwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzUvNTJFOERGRkM2RjY3NkQzM0NCODlERTExNUNFRUYyODZCNTAxNzIyOC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMzNk
YmRlY2M0ZmE0LzIvNTJFOERGRkM2RjY3NkQzM0NCODlERTExNUNFRUYyODZCNTAx
NzIyOC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWJmOGU5Nzct
NzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRlLzUvMzIzNjMwMzIzYTY2NjMzMjMz
M2EzMTMyNjUzYTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcBJgL8IwEuMA0GCSqGSIb3DQEBCwUAA4IBAQCu15+PtI/Nary8nrB/jdzs
QRUS0yz3ZZDXB2FpHrxZCQVTIIgkdgFYUtp5XyBZV9ZMdfl6krEpE1jr7b+a3yny
z+Kxcz8iPUEMB7uxmJmyAxPF8bZf7uwz5b9SsHCUsEgoEPaszxe/PAhakKiSxHBJ
gKiXraRyEIiEAj2XO80on+HHTCepdgpuL8DUYzwB3s2slpIULxfIw5rS4vDOmDdF
vG8kD5m/wmh9CE6uU7V/05AAztBe/IZU61+Eb9SrZRoZGcyc4IMXvNBjYkokLpsO
T1erlxcSL6ZIS/c/XzuzodNbS1MJQ05glh2BFCF9C9PZoigdYS49buo74c91IvBI
-----END CERTIFICATE-----