Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/3/326130363a396638353a3a2f33322d3332203d3e20323134343531.roa
File:                     326130363a396638353a3a2f33322d3332203d3e20323134343531.roa (raw, json)
Hash identifier:          YNbsmCdBOm1G/FTfk/m4Graus7tuENvLP7GuOn/0hks=
Subject key identifier:   2E:BC:44:7B:9B:9D:D1:3A:A1:DE:83:08:A9:0D:2E:B4:C9:F8:94:91
Certificate issuer:       /CN=469D308DBBB88444EF4530905C6C6D40559ADF4D
Certificate serial:       2862E07A5FD292E5096383A665D407610B91B99B
Authority key identifier: 46:9D:30:8D:BB:B8:84:44:EF:45:30:90:5C:6C:6D:40:55:9A:DF:4D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/469D308DBBB88444EF4530905C6C6D40559ADF4D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/3/326130363a396638353a3a2f33322d3332203d3e20323134343531.roa
Signing time:             Mon 18 Nov 2024 16:47:21 +0000
ROA not before:           Mon 18 Nov 2024 16:42:21 +0000
ROA not after:            Mon 17 Nov 2025 16:47:21 +0000
asID:                     214451
IP address blocks:        2a06:9f85::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 23:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:62:e0:7a:5f:d2:92:e5:09:63:83:a6:65:d4:07:61:0b:91:b9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469D308DBBB88444EF4530905C6C6D40559ADF4D
        Validity
            Not Before: Nov 18 16:42:21 2024 GMT
            Not After : Nov 17 16:47:21 2025 GMT
        Subject: CN=2EBC447B9B9DD13AA1DE8308A90D2EB4C9F89491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:24:c4:2b:e9:2e:34:1f:ea:18:5f:89:da:
                    3f:88:88:20:cf:55:c8:49:a0:32:1a:7a:9d:29:57:
                    5e:63:ad:43:ae:cd:0b:f2:be:b5:a9:96:be:3f:2e:
                    89:a3:0f:f4:7f:fc:49:a3:4b:25:bd:a3:30:23:73:
                    0d:1e:af:1a:04:ea:d2:eb:8d:e7:e8:db:0f:11:61:
                    69:b2:12:54:dc:e7:fb:6c:1e:07:20:36:74:f0:e1:
                    60:62:2c:3f:bd:33:fa:39:7d:16:54:99:bb:21:a3:
                    ea:6d:49:f5:2b:20:44:4a:88:b1:3b:4c:1f:43:b7:
                    2a:b9:01:77:a7:e2:d2:65:6a:5a:ae:c1:61:ad:76:
                    e7:a2:45:dc:23:f9:d3:1a:fb:f1:35:a0:0c:57:d6:
                    65:85:46:e5:71:a8:74:04:91:34:08:c1:4d:d1:1e:
                    8c:e4:70:a0:3b:f0:0a:1d:c3:92:c2:88:43:be:8d:
                    a0:e6:fc:ff:f4:bd:04:85:2f:16:6b:5c:0f:c6:b2:
                    24:ab:75:cf:53:f7:03:8c:b5:cb:46:a5:1d:39:a4:
                    4b:68:2e:2e:cc:d4:4a:26:f2:09:bd:c4:e3:f6:49:
                    a1:89:84:66:46:5d:c7:28:d1:3d:b9:b8:51:34:5b:
                    92:7d:8d:8e:4e:f7:90:10:17:7f:a1:1d:31:ad:67:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BC:44:7B:9B:9D:D1:3A:A1:DE:83:08:A9:0D:2E:B4:C9:F8:94:91
            X509v3 Authority Key Identifier:
                keyid:46:9D:30:8D:BB:B8:84:44:EF:45:30:90:5C:6C:6D:40:55:9A:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/3/469D308DBBB88444EF4530905C6C6D40559ADF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/469D308DBBB88444EF4530905C6C6D40559ADF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/3/326130363a396638353a3a2f33322d3332203d3e20323134343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f85::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:7b:a1:39:2e:16:14:8c:6c:17:18:77:c5:71:42:11:04:53:
         c6:fc:86:5e:c8:11:0a:d0:79:2c:ef:d4:de:a8:22:5d:ee:d1:
         e5:a4:ca:f3:70:d1:6d:a8:60:58:3e:68:c8:4f:9c:36:2c:d1:
         e3:df:de:32:18:81:f8:fd:36:55:08:1f:36:83:58:5c:1b:b2:
         1e:7b:c7:a8:b9:03:6e:39:2a:65:ba:cc:5e:c6:db:63:3c:45:
         af:3b:f5:30:66:8e:84:10:ba:28:32:65:d5:72:9c:58:36:94:
         e8:f7:7c:aa:dc:70:74:bc:d9:a3:bc:cd:0b:11:7a:36:3e:7e:
         8e:2e:f9:0d:aa:cc:2e:be:40:61:77:cc:2c:49:07:e0:e7:c8:
         ba:84:79:ed:3f:99:18:12:05:9f:73:0e:6d:56:73:5e:0d:75:
         f1:ca:f5:ca:1b:16:3f:4d:d8:f9:10:f0:56:34:56:fb:54:f3:
         0d:12:63:80:54:1c:17:5e:05:5c:1b:32:6e:c5:1f:27:60:75:
         f7:b7:15:0a:4c:56:ba:60:61:aa:aa:a3:1e:4e:ba:f3:06:80:
         ad:88:32:41:7e:29:09:58:c6:c7:b0:27:d7:5b:85:cf:a3:ab:
         b6:a6:3e:ef:7b:df:3a:fa:01:16:f9:82:82:a4:71:4f:81:39:
         89:bf:b0:6e
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUKGLgel/SkuUJY4OmZdQHYQuRuZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY5RDMwOERCQkI4ODQ0NEVGNDUzMDkwNUM2QzZENDA1
NTlBREY0RDAeFw0yNDExMTgxNjQyMjFaFw0yNTExMTcxNjQ3MjFaMDMxMTAvBgNV
BAMTKDJFQkM0NDdCOUI5REQxM0FBMURFODMwOEE5MEQyRUI0QzlGODk0OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5yTEK+kuNB/qGF+J2j+IiCDP
VchJoDIaep0pV15jrUOuzQvyvrWplr4/LomjD/R//EmjSyW9ozAjcw0erxoE6tLr
jefo2w8RYWmyElTc5/tsHgcgNnTw4WBiLD+9M/o5fRZUmbsho+ptSfUrIERKiLE7
TB9Dtyq5AXen4tJlalquwWGtdueiRdwj+dMa+/E1oAxX1mWFRuVxqHQEkTQIwU3R
HozkcKA78Aodw5LCiEO+jaDm/P/0vQSFLxZrXA/GsiSrdc9T9wOMtctGpR05pEto
Li7M1Eom8gm9xOP2SaGJhGZGXcco0T25uFE0W5J9jY5O95AQF3+hHTGtZ0iNAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQULrxEe5ud0Tqh3oMIqQ0utMn4lJEwHwYDVR0j
BBgwFoAURp0wjbu4hETvRTCQXGxtQFWa300wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl
OTUwLzMvNDY5RDMwOERCQkI4ODQ0NEVGNDUzMDkwNUM2QzZENDA1NTlBREY0RC5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ2OUQzMDhEQkJCODg0
NDRFRjQ1MzA5MDVDNkM2RDQwNTU5QURGNEQuY2VyMIGtBggrBgEFBQcBCwSBoDCB
nTCBmgYIKwYBBQUHMAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzIyY2Y4YmE3LWNiMDItNDE4Yi1iZTA0LTRkOWYzYTA3ZTk1
MC8zLzMyNjEzMDM2M2EzOTY2MzgzNTNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMy
MzEzNDM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEF
BQcBBwEB/wQRMA8wDQQCAAIwBwMFACoGn4UwDQYJKoZIhvcNAQELBQADggEBAJ17
oTkuFhSMbBcYd8VxQhEEU8b8hl7IEQrQeSzv1N6oIl3u0eWkyvNw0W2oYFg+aMhP
nDYs0ePf3jIYgfj9NlUIHzaDWFwbsh57x6i5A245KmW6zF7G22M8Ra879TBmjoQQ
uigyZdVynFg2lOj3fKrccHS82aO8zQsRejY+fo4u+Q2qzC6+QGF3zCxJB+DnyLqE
ee0/mRgSBZ9zDm1Wc14NdfHK9cobFj9N2PkQ8FY0VvtU8w0SY4BUHBdeBVwbMm7F
Hydgdfe3FQpMVrpgYaqqox5OuvMGgK2IMkF+KQlYxsewJ9dbhc+jq7amPu973zr6
ARb5goKkcU+BOYm/sG4=