Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/326130353a646663313a313436393a3a2f34382d3438203d3e20313939353832.roa
File:                     326130353a646663313a313436393a3a2f34382d3438203d3e20313939353832.roa (raw, json)
Hash identifier:          I//ChQMhIlw5PNek41s3mvFqIMa6xADjl3Wf1SGfoBE=
Subject key identifier:   22:28:78:9F:B8:46:D0:97:D4:EF:89:F3:17:86:08:77:2E:90:62:21
Certificate issuer:       /CN=A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1
Certificate serial:       115E9353D500C2515646AA505EB15667F9511FF7
Authority key identifier: A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/326130353a646663313a313436393a3a2f34382d3438203d3e20313939353832.roa
Signing time:             Sun 18 Feb 2024 15:22:52 +0000
ROA not before:           Sun 18 Feb 2024 15:17:52 +0000
ROA not after:            Sun 16 Feb 2025 15:22:52 +0000
asID:                     199582
IP address blocks:        2a05:dfc1:1469::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 20:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5e:93:53:d5:00:c2:51:56:46:aa:50:5e:b1:56:67:f9:51:1f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1
        Validity
            Not Before: Feb 18 15:17:52 2024 GMT
            Not After : Feb 16 15:22:52 2025 GMT
        Subject: CN=2228789FB846D097D4EF89F3178608772E906221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:69:85:1e:3d:c4:4f:c5:7e:df:27:d0:ce:
                    f7:ad:4b:3a:62:92:2b:ab:b2:16:b6:61:94:99:eb:
                    02:db:e0:a7:e1:8e:a7:d1:ea:f8:30:ce:c6:10:ea:
                    7f:fd:23:6f:f6:88:5d:76:cd:a5:bd:4d:99:67:a0:
                    fa:33:22:44:e3:d6:7c:ae:a4:13:d7:de:88:1d:2e:
                    68:67:ee:4f:7d:00:76:c0:21:ab:25:b4:9d:98:bc:
                    30:ab:6e:c0:f4:21:2e:f8:61:59:ef:35:6a:be:04:
                    73:a9:e8:21:08:bd:f1:99:36:5a:a7:31:52:e5:5b:
                    11:6f:7c:a2:6a:8e:bd:a0:5a:0d:f4:e4:56:e6:7d:
                    cf:05:7d:fb:5a:6f:1b:ee:3f:90:6c:bb:bb:02:f3:
                    32:6c:94:73:c1:05:f2:42:d6:cb:a1:4b:81:9c:7f:
                    0d:52:43:02:c3:4a:99:76:dc:da:46:a5:8c:e2:5b:
                    ce:2e:d7:27:22:a3:39:42:b5:c2:9e:cf:07:1e:84:
                    e5:9b:f3:5a:cc:9c:af:04:a6:4a:88:85:61:e4:cc:
                    e1:a8:19:6c:b5:f8:ac:46:e7:63:21:82:79:51:81:
                    1f:f0:b6:16:09:d5:d8:ed:f1:ce:5f:a4:ee:4a:28:
                    60:47:99:50:08:cc:68:d7:cd:b0:4b:4c:8d:ed:1a:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:28:78:9F:B8:46:D0:97:D4:EF:89:F3:17:86:08:77:2E:90:62:21
            X509v3 Authority Key Identifier:
                keyid:A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/326130353a646663313a313436393a3a2f34382d3438203d3e20313939353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1469::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:cf:ff:e9:84:0f:8a:cc:70:15:a5:7d:fd:74:7e:07:f3:6b:
         0b:9e:24:cf:49:9d:8a:10:b3:02:b8:09:ca:57:4d:70:cd:d1:
         4b:20:88:ce:4d:e0:8f:7b:22:b7:14:ff:e8:b7:54:2f:4c:a5:
         3c:7c:74:70:23:1b:0f:bb:4b:cf:89:61:ed:b2:29:ee:4a:2b:
         96:8d:a9:82:dc:f5:40:0c:15:72:41:bc:ec:98:29:79:0c:e6:
         22:40:e2:2a:8f:37:e5:99:77:aa:c7:85:94:c1:2c:86:d5:f0:
         af:b4:e8:89:17:ab:44:77:71:17:c0:a1:14:64:c5:09:6d:90:
         0b:e4:94:ed:40:fd:12:65:e2:29:88:38:2e:20:c5:e0:bb:c9:
         53:34:52:2f:59:99:5d:55:ea:de:b5:96:0f:ae:82:16:b5:6b:
         9c:c9:0a:d4:07:56:fa:dd:e2:80:5e:92:ff:0b:26:78:98:d0:
         47:90:51:07:a0:44:3b:1b:d2:5d:c0:53:08:43:d9:5c:ba:ef:
         b6:02:1b:21:75:72:6a:da:55:ea:49:89:4f:a2:a9:c5:c4:3a:
         de:61:83:ca:71:06:ea:66:56:c8:a9:77:3c:85:4e:12:d3:28:
         88:b7:d7:ed:23:d3:2c:24:83:f9:36:1f:2b:8e:da:93:a0:cc:
         09:b0:45:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----