Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/326130353a646663313a313439393a3a2f34382d3438203d3e20313939353832.roa
File:                     326130353a646663313a313439393a3a2f34382d3438203d3e20313939353832.roa (raw, json)
Hash identifier:          lZDftnaunH8zVS/bL75OZIsL08DycNr7O9e7S8Hkrow=
Subject key identifier:   27:94:DD:CE:36:76:17:58:20:EE:D6:47:BC:2B:87:A3:57:6E:DB:0D
Certificate issuer:       /CN=A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1
Certificate serial:       2DDC085A14F6D4DC933F9FE36C375B28F8F8D15A
Authority key identifier: A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/326130353a646663313a313439393a3a2f34382d3438203d3e20313939353832.roa
Signing time:             Fri 19 Jan 2024 18:07:51 +0000
ROA not before:           Fri 19 Jan 2024 18:02:51 +0000
ROA not after:            Fri 17 Jan 2025 18:07:51 +0000
asID:                     199582
IP address blocks:        2a05:dfc1:1499::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 11:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:dc:08:5a:14:f6:d4:dc:93:3f:9f:e3:6c:37:5b:28:f8:f8:d1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1
        Validity
            Not Before: Jan 19 18:02:51 2024 GMT
            Not After : Jan 17 18:07:51 2025 GMT
        Subject: CN=2794DDCE3676175820EED647BC2B87A3576EDB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:90:81:c4:93:be:e5:dd:f7:04:b3:5b:b4:5d:
                    89:25:67:d4:36:45:47:3d:28:33:79:06:6d:71:c7:
                    bd:b8:fa:94:86:c1:c2:2b:d0:5e:4c:b1:9c:02:40:
                    90:e7:24:96:9e:1a:3c:15:50:ab:1c:74:ac:3d:05:
                    52:82:49:cf:10:ae:da:a3:eb:87:8b:cb:7b:48:6b:
                    87:77:a2:24:1c:47:89:8d:1b:2d:ea:3f:d4:e9:1a:
                    d0:59:09:d0:63:74:20:40:b2:ad:2a:99:87:7d:97:
                    62:02:61:ed:a3:0b:e4:23:f4:09:1f:b5:34:df:f8:
                    90:8f:ce:22:5a:3c:64:54:21:e5:f4:1c:82:63:c4:
                    6d:dd:7a:0c:50:71:58:ca:02:ad:55:bd:fc:6a:45:
                    5e:2b:c9:11:37:50:8f:93:b3:c3:d8:8b:b2:31:6f:
                    11:ae:e1:10:d1:c3:c9:3e:24:89:57:2d:74:cc:f1:
                    5f:24:f0:13:f0:a5:48:9b:00:44:d0:e3:f8:9a:13:
                    ab:c1:19:75:d1:69:e7:40:94:05:56:71:0a:ab:80:
                    24:73:67:6e:97:ef:a1:3f:92:d1:43:47:5c:70:a6:
                    fc:f7:15:68:fc:90:fc:42:22:92:bd:2f:97:ca:e9:
                    d8:44:e0:59:cd:3e:27:47:36:b0:94:85:f7:75:bf:
                    97:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:94:DD:CE:36:76:17:58:20:EE:D6:47:BC:2B:87:A3:57:6E:DB:0D
            X509v3 Authority Key Identifier:
                keyid:A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/326130353a646663313a313439393a3a2f34382d3438203d3e20313939353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1499::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:b0:81:43:45:ca:ea:e9:2b:7a:f6:df:06:15:f8:34:12:d8:
         f8:36:92:22:9c:d0:48:40:f4:42:cf:80:e4:4e:2f:c3:63:f3:
         19:e3:c9:9b:29:24:00:d7:6d:da:47:89:29:30:b9:c3:cb:69:
         ab:43:c7:62:d4:9b:0a:56:06:19:e7:98:22:4a:ec:a0:fb:05:
         40:28:f1:fd:7c:82:cb:cb:53:c8:7b:dd:bc:3b:06:06:1a:fb:
         b0:38:95:8a:00:ac:33:67:7b:1d:d6:44:cb:6a:61:a7:5f:18:
         79:15:b9:6e:5f:d7:6f:c3:e5:64:f0:03:fb:b4:3b:95:b7:db:
         dd:1c:be:9d:0c:94:4e:2b:60:56:ab:d6:99:1b:9b:4b:03:09:
         94:01:3a:9d:15:58:55:1d:28:3a:56:1b:25:2c:2e:50:43:97:
         e7:bf:fb:c1:8d:d9:93:2f:b0:ee:8f:39:7a:e0:1f:dc:4a:43:
         97:23:4f:27:f4:25:16:e9:0b:be:e5:38:7b:f6:f0:d8:f5:ab:
         18:52:71:fb:37:fc:28:49:3d:de:60:e4:5d:59:8f:f9:6e:6c:
         cf:c3:91:8b:4a:33:35:66:41:55:a4:98:fb:93:4d:0a:2a:36:
         55:9f:37:cf:72:ec:33:8c:97:68:f2:65:5b:4f:40:c0:62:5e:
         f7:1c:22:47
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIULdwIWhT21NyTP5/jbDdbKPj40VowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTg0NUQ4NDdCMjdDMThEMkE4QzQzRjQ3RURBQUVFQUI1
Q0NDMEJFMTAeFw0yNDAxMTkxODAyNTFaFw0yNTAxMTcxODA3NTFaMDMxMTAvBgNV
BAMTKDI3OTRERENFMzY3NjE3NTgyMEVFRDY0N0JDMkI4N0EzNTc2RURCMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvkIHEk77l3fcEs1u0XYklZ9Q2
RUc9KDN5Bm1xx724+pSGwcIr0F5MsZwCQJDnJJaeGjwVUKscdKw9BVKCSc8Qrtqj
64eLy3tIa4d3oiQcR4mNGy3qP9TpGtBZCdBjdCBAsq0qmYd9l2ICYe2jC+Qj9Akf
tTTf+JCPziJaPGRUIeX0HIJjxG3degxQcVjKAq1VvfxqRV4ryRE3UI+Ts8PYi7Ix
bxGu4RDRw8k+JIlXLXTM8V8k8BPwpUibAETQ4/iaE6vBGXXRaedAlAVWcQqrgCRz
Z26X76E/ktFDR1xwpvz3FWj8kPxCIpK9L5fK6dhE4FnNPidHNrCUhfd1v5eTAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUJ5TdzjZ2F1gg7tZHvCuHo1du2w0wHwYDVR0j
BBgwFoAUqEXYR7J8GNKoxD9H7aruq1zMC+EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWQyMGJlNGMtOGRiMy00NWUxLTgxNjktMGYyZTQwODQx
MzJjLzEvQTg0NUQ4NDdCMjdDMThEMkE4QzQzRjQ3RURBQUVFQUI1Q0NDMEJFMS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0E4NDVEODQ3QjI3QzE4
RDJBOEM0M0Y0N0VEQUFFRUFCNUNDQzBCRTEuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzFkMjBiZTRjLThkYjMtNDVlMS04MTY5LTBmMmU0MDg0MTMy
Yy8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzEzNDM5MzkzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMTM5MzkzNTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/BFJkwDQYJKoZIhvcN
AQELBQADggEBAFiwgUNFyurpK3r23wYV+DQS2Pg2kiKc0EhA9ELPgOROL8Nj8xnj
yZspJADXbdpHiSkwucPLaatDx2LUmwpWBhnnmCJK7KD7BUAo8f18gsvLU8h73bw7
BgYa+7A4lYoArDNnex3WRMtqYadfGHkVuW5f12/D5WTwA/u0O5W3290cvp0MlE4r
YFar1pkbm0sDCZQBOp0VWFUdKDpWGyUsLlBDl+e/+8GN2ZMvsO6POXrgH9xKQ5cj
Tyf0JRbpC77lOHv28Nj1qxhScfs3/ChJPd5g5F1Zj/lubM/DkYtKMzVmQVWkmPuT
TQoqNlWfN89y7DOMl2jyZVtPQMBiXvccIkc=
-----END CERTIFICATE-----