Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/326130623a396534303a3a2f34342d3434203d3e20323134343531.roa
File:                     326130623a396534303a3a2f34342d3434203d3e20323134343531.roa (raw, json)
Hash identifier:          RDNDBEyrmJXBoq5F/VJrTovJS09scQbQ4bjTMbygeAI=
Subject key identifier:   0F:C9:BB:73:32:B9:B6:A0:5F:56:C6:19:AB:E6:FB:91:57:7B:7E:85
Certificate issuer:       /CN=D9227930A3E025CD3EE91059F57EFC7573645142
Certificate serial:       326B884F4722EC3A3E48A4448E321D99ABE15567
Authority key identifier: D9:22:79:30:A3:E0:25:CD:3E:E9:10:59:F5:7E:FC:75:73:64:51:42
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D9227930A3E025CD3EE91059F57EFC7573645142.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/326130623a396534303a3a2f34342d3434203d3e20323134343531.roa
Signing time:             Thu 26 Dec 2024 13:50:28 +0000
ROA not before:           Thu 26 Dec 2024 13:45:28 +0000
ROA not after:            Thu 25 Dec 2025 13:50:28 +0000
asID:                     214451
IP address blocks:        2a0b:9e40::/44 maxlen: 44
Validation:               Failed, certificate revoked on Sat 04 Jan 2025 20:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6b:88:4f:47:22:ec:3a:3e:48:a4:44:8e:32:1d:99:ab:e1:55:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9227930A3E025CD3EE91059F57EFC7573645142
        Validity
            Not Before: Dec 26 13:45:28 2024 GMT
            Not After : Dec 25 13:50:28 2025 GMT
        Subject: CN=0FC9BB7332B9B6A05F56C619ABE6FB91577B7E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:50:a2:94:97:26:1c:46:d5:39:05:f4:49:
                    2b:2a:9b:9d:15:5a:5f:84:41:bd:f5:15:a1:f4:a3:
                    49:8e:c5:f9:eb:a6:81:6a:32:68:64:b2:64:ee:ea:
                    98:03:47:26:6b:8f:93:64:bc:75:53:c9:26:bb:11:
                    f6:35:10:e3:75:d7:b4:8c:3e:e9:36:d5:88:58:c4:
                    80:3e:0f:4a:72:27:cf:0a:62:80:08:b1:c9:a2:da:
                    2a:ef:cd:79:43:e2:82:24:86:c9:7d:2f:c6:b3:07:
                    15:01:1f:db:b9:e2:32:3c:7a:1c:a0:b5:ab:f2:23:
                    cd:72:c3:44:af:02:7d:8d:78:e0:bc:fb:b4:9c:33:
                    9f:93:59:07:d5:1e:52:81:f9:e0:ac:01:7b:b1:db:
                    a2:a5:0a:f2:ee:79:2f:1e:fa:62:c1:ba:93:3c:c9:
                    2e:b3:72:fc:aa:fe:26:44:98:91:f8:8e:e6:51:d7:
                    d9:4a:3a:39:f7:49:ca:2d:70:95:60:d5:39:9e:01:
                    eb:c1:6c:70:c2:b0:4a:3c:ae:9d:1d:b9:b6:a0:58:
                    7e:a5:98:cd:c1:df:3b:df:3d:23:17:98:50:2b:95:
                    28:35:4d:2c:0c:c0:b3:92:bc:6b:f4:91:02:ff:00:
                    ad:87:79:3e:c7:d3:32:2e:a3:c4:a8:81:2e:1d:5d:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C9:BB:73:32:B9:B6:A0:5F:56:C6:19:AB:E6:FB:91:57:7B:7E:85
            X509v3 Authority Key Identifier:
                keyid:D9:22:79:30:A3:E0:25:CD:3E:E9:10:59:F5:7E:FC:75:73:64:51:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D9227930A3E025CD3EE91059F57EFC7573645142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/326130623a396534303a3a2f34342d3434203d3e20323134343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9e40::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:c7:54:0d:46:71:1b:95:36:a6:5b:90:9e:f1:4a:81:6b:02:
         e3:e2:35:9f:d8:cb:ac:70:ea:8d:58:b9:0f:f3:ca:91:da:5e:
         a3:7f:bf:a1:b6:85:d2:6b:ed:86:84:1a:77:0c:6f:c3:7d:b9:
         bd:8e:6e:bf:15:6e:bc:7e:fe:91:ac:62:1d:f9:e5:f7:d4:0b:
         dd:ae:00:cb:2e:c9:f9:4b:a4:70:43:02:fd:09:f3:5e:5f:9f:
         36:91:6d:29:27:67:0c:68:ff:58:eb:5d:fa:18:72:52:bd:25:
         8f:52:2d:52:8e:7e:7b:49:f2:35:22:fe:e0:26:e4:80:e6:be:
         5f:aa:09:df:30:fb:0b:5f:5f:55:e2:62:3d:b2:87:d0:e7:a0:
         45:58:bd:7d:63:a9:be:c4:6d:37:dd:91:82:95:01:a8:b9:37:
         be:41:e5:55:08:f6:9f:2e:58:1a:54:ed:e7:d7:46:d3:81:fc:
         63:1a:9d:87:49:0c:ad:22:45:c1:1f:19:85:ac:86:c4:b5:85:
         5b:2c:4f:68:15:ea:46:ca:5b:35:d5:c3:50:fe:26:01:71:c4:
         4f:c8:b4:71:d5:a5:21:d2:fb:b0:da:76:f8:f8:9c:2b:50:64:
         29:86:f7:15:6e:27:0b:ac:0a:93:28:ac:38:0c:87:df:ac:26:
         9c:e6:3f:3b
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIUMmuIT0ci7Do+SKREjjIdmavhVWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkyMjc5MzBBM0UwMjVDRDNFRTkxMDU5RjU3RUZDNzU3
MzY0NTE0MjAeFw0yNDEyMjYxMzQ1MjhaFw0yNTEyMjUxMzUwMjhaMDMxMTAvBgNV
BAMTKDBGQzlCQjczMzJCOUI2QTA1RjU2QzYxOUFCRTZGQjkxNTc3QjdFODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXl1CilJcmHEbVOQX0SSsqm50V
Wl+EQb31FaH0o0mOxfnrpoFqMmhksmTu6pgDRyZrj5NkvHVTySa7EfY1EON117SM
Puk21YhYxIA+D0pyJ88KYoAIscmi2irvzXlD4oIkhsl9L8azBxUBH9u54jI8ehyg
tavyI81yw0SvAn2NeOC8+7ScM5+TWQfVHlKB+eCsAXux26KlCvLueS8e+mLBupM8
yS6zcvyq/iZEmJH4juZR19lKOjn3ScotcJVg1TmeAevBbHDCsEo8rp0dubagWH6l
mM3B3zvfPSMXmFArlSg1TSwMwLOSvGv0kQL/AK2HeT7H0zIuo8SogS4dXYEDAgMB
AAGjggJwMIICbDAdBgNVHQ4EFgQUD8m7czK5tqBfVsYZq+b7kVd7foUwHwYDVR0j
BBgwFoAU2SJ5MKPgJc0+6RBZ9X78dXNkUUIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl
OTUwLzQvRDkyMjc5MzBBM0UwMjVDRDNFRTkxMDU5RjU3RUZDNzU3MzY0NTE0Mi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvRDkyMjc5MzBBM0UwMjVDRDNFRTkxMDU5RjU3RUZDNzU3MzY0
NTE0Mi5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJjZjhiYTct
Y2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdlOTUwLzQvMzI2MTMwNjIzYTM5NjUzNDMw
M2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzMTM0MzQzNTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcE
KgueQAAAMA0GCSqGSIb3DQEBCwUAA4IBAQB5x1QNRnEblTamW5Ce8UqBawLj4jWf
2MuscOqNWLkP88qR2l6jf7+htoXSa+2GhBp3DG/Dfbm9jm6/FW68fv6RrGId+eX3
1AvdrgDLLsn5S6RwQwL9CfNeX582kW0pJ2cMaP9Y6136GHJSvSWPUi1Sjn57SfI1
Iv7gJuSA5r5fqgnfMPsLX19V4mI9sofQ56BFWL19Y6m+xG033ZGClQGouTe+QeVV
CPafLlgaVO3n10bTgfxjGp2HSQytIkXBHxmFrIbEtYVbLE9oFepGyls11cNQ/iYB
ccRPyLRx1aUh0vuw2nb4+JwrUGQphvcVbicLrAqTKKw4DIffrCac5j87
-----END CERTIFICATE-----
Generated at Wed Feb 5 22:47:27 2025 by rpki-client