Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/326130363a396634343a3a2f33362d3336203d3e20313939343539.roa
File:                     326130363a396634343a3a2f33362d3336203d3e20313939343539.roa (raw, json)
Hash identifier:          H7gqF1qkGtT8ogMTwz99JUY2rrbCMDMdeYNIVXIVNWQ=
Subject key identifier:   B1:A8:F1:30:A1:3F:59:22:9B:C1:C8:CC:98:2C:5B:73:B7:63:78:FF
Certificate issuer:       /CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
Certificate serial:       12B4BDFBC9409988B1A441DC0B7C097EEA4DFAD4
Authority key identifier: B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/326130363a396634343a3a2f33362d3336203d3e20313939343539.roa
Signing time:             Wed 27 Dec 2023 23:54:29 +0000
ROA not before:           Wed 27 Dec 2023 23:49:29 +0000
ROA not after:            Wed 25 Dec 2024 23:54:29 +0000
asID:                     199459
IP address blocks:        2a06:9f44::/36 maxlen: 36

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 03:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b4:bd:fb:c9:40:99:88:b1:a4:41:dc:0b:7c:09:7e:ea:4d:fa:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
        Validity
            Not Before: Dec 27 23:49:29 2023 GMT
            Not After : Dec 25 23:54:29 2024 GMT
        Subject: CN=B1A8F130A13F59229BC1C8CC982C5B73B76378FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:37:8f:84:3d:cb:61:56:2b:5c:4a:a3:31:3d:
                    8c:34:3d:29:b0:c4:5a:60:39:e9:77:97:2a:ee:e9:
                    ae:58:f4:6b:08:1e:81:77:23:b7:8e:99:da:79:a6:
                    cb:cd:83:3f:e5:0d:44:11:c0:28:cb:39:0e:26:53:
                    c6:2d:a7:da:49:02:de:10:83:eb:38:ff:e1:c5:a1:
                    17:23:1f:4a:76:0e:d5:e9:39:ee:59:6a:3a:73:f8:
                    89:57:f7:bb:a1:c3:96:83:1c:5e:50:82:8e:5b:e1:
                    f3:93:83:d9:56:fa:10:4a:59:05:a7:51:e2:22:80:
                    28:5a:ee:6f:e6:c2:fb:eb:0b:66:ef:96:93:1c:f6:
                    ba:27:f4:97:03:8c:b4:53:ac:b7:25:61:94:da:e6:
                    da:4b:c0:ff:e7:d6:55:fe:71:73:a5:75:81:b7:0f:
                    fb:66:58:05:0d:99:71:38:09:2c:50:38:6f:9e:66:
                    c2:63:20:ee:f2:81:7b:b8:e3:39:8c:43:cb:06:c1:
                    39:49:eb:98:74:6b:c3:1e:2b:cc:34:e1:25:64:9e:
                    fb:bc:c6:53:50:26:b9:43:60:40:53:b8:3a:57:8e:
                    4f:cf:e6:c8:ad:d0:73:4c:a9:29:e1:d5:3e:bb:66:
                    4e:54:76:68:2d:3b:cc:a4:17:70:62:2d:9b:44:56:
                    38:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A8:F1:30:A1:3F:59:22:9B:C1:C8:CC:98:2C:5B:73:B7:63:78:FF
            X509v3 Authority Key Identifier:
                keyid:B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/326130363a396634343a3a2f33362d3336203d3e20313939343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f44::/36

    Signature Algorithm: sha256WithRSAEncryption
         0c:0c:8c:c6:c0:74:95:18:5f:19:e4:a8:3b:41:92:a3:e8:9a:
         ba:6b:cc:20:32:66:12:97:be:7f:e4:20:fd:31:24:ff:72:33:
         5f:9d:07:b8:bb:30:a5:c1:5d:f7:0c:49:99:75:bd:00:9c:60:
         15:ea:1b:28:e9:2d:26:1b:3b:37:0e:75:95:5e:53:01:cf:0f:
         a3:ef:bd:e8:a2:a1:41:fc:08:2b:d6:92:20:81:84:b9:3e:b1:
         d1:a8:97:3a:70:c4:09:01:a4:f2:d7:7a:e1:d9:f9:df:43:ac:
         f1:ce:6b:90:79:ed:0b:55:e5:a1:75:0f:f3:e9:c0:ce:72:01:
         65:ea:87:d9:d2:16:21:28:73:85:52:52:4a:73:0d:75:21:63:
         fe:56:bc:04:73:d4:70:a2:b7:ec:0f:db:09:c4:06:51:b5:bb:
         dd:38:9c:c0:f2:b5:fb:38:31:c9:d2:bc:6e:b5:9d:a6:89:02:
         c0:33:3b:91:0f:ff:33:69:a4:20:73:10:13:8f:79:39:0b:5a:
         00:b5:c5:e9:34:a3:04:d9:1d:2b:00:21:b9:99:a2:89:bc:87:
         21:50:2f:0d:d4:3b:6c:c1:a0:67:fc:1c:cf:de:93:b6:d2:ed:
         1a:49:c3:74:44:fd:bc:f8:e1:30:42:27:ad:e3:d8:0a:94:85:
         f9:47:64:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----