Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030303a3a2f33362d3336203d3e20323136333234.roa
File:                     326131343a373538313a313030303a3a2f33362d3336203d3e20323136333234.roa (raw, json)
Hash identifier:          Sp/7mMRilVizSbtIiIfUVmVVb0GSeIs34Q8PSIkP+ks=
Subject key identifier:   97:2B:84:F4:27:D4:74:8D:36:F4:9D:C3:3E:A8:BF:A3:30:6B:C8:46
Certificate issuer:       /CN=30EC341CC59263F48799F70A95490826E78E6E11
Certificate serial:       215E7451B9B655267A16F97CDBCEC76A50DF075F
Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030303a3a2f33362d3336203d3e20323136333234.roa
Signing time:             Mon 04 Mar 2024 09:31:22 +0000
ROA not before:           Mon 04 Mar 2024 09:26:22 +0000
ROA not after:            Mon 03 Mar 2025 09:31:22 +0000
asID:                     216324
IP address blocks:        2a14:7581:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 18:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5e:74:51:b9:b6:55:26:7a:16:f9:7c:db:ce:c7:6a:50:df:07:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11
        Validity
            Not Before: Mar  4 09:26:22 2024 GMT
            Not After : Mar  3 09:31:22 2025 GMT
        Subject: CN=972B84F427D4748D36F49DC33EA8BFA3306BC846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:ef:0c:a9:9b:c3:e2:ba:ac:28:c0:db:a6:
                    c4:d8:f1:6c:f1:14:d2:17:4f:84:ec:e1:84:e5:01:
                    99:07:1d:aa:4c:cf:af:e2:d4:dc:67:bd:3d:36:81:
                    be:2e:16:05:61:02:30:e5:0b:aa:90:2d:13:84:70:
                    63:58:74:71:99:0f:e0:93:72:0e:fc:cd:fc:59:18:
                    bd:ca:a6:44:20:76:ff:53:04:dc:27:fb:62:30:ee:
                    53:29:76:04:91:86:81:5e:89:45:77:2c:90:3b:a6:
                    d7:02:92:e9:54:53:c7:fb:79:fd:2c:e7:b5:fb:35:
                    42:ea:c8:b7:32:4c:bd:4b:80:65:90:8d:40:79:56:
                    10:35:4f:1f:12:63:79:1b:3a:fa:77:a7:4c:dc:7a:
                    fa:c2:a9:d0:a0:fa:de:c7:be:7e:f4:e5:eb:92:58:
                    92:79:9c:c0:cb:50:4f:41:61:05:2f:c9:ca:13:de:
                    95:24:38:e7:19:b2:b4:45:0b:eb:7e:68:a3:43:df:
                    fe:82:63:d9:aa:5c:ff:95:ee:da:78:b5:75:15:1e:
                    e3:00:39:69:17:78:43:ea:87:34:f8:52:50:50:f5:
                    d5:f3:d0:af:6a:aa:9c:df:82:39:9d:ae:b5:6f:33:
                    63:ca:55:9c:32:9c:7f:78:70:8f:8a:21:8d:66:91:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2B:84:F4:27:D4:74:8D:36:F4:9D:C3:3E:A8:BF:A3:30:6B:C8:46
            X509v3 Authority Key Identifier:
                keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030303a3a2f33362d3336203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:86:2e:d4:9f:d8:b2:d8:70:0c:4b:0e:26:54:b2:97:c5:a1:
         7c:7d:32:5e:86:7d:32:44:25:76:7a:ad:93:8d:82:f8:dd:9e:
         69:6f:25:5e:83:7b:c1:1a:27:e0:cb:c9:c6:80:87:34:3b:96:
         42:18:18:cb:52:fa:50:1b:00:38:f7:54:f2:93:62:49:e2:21:
         e3:55:db:5b:ae:6f:d2:25:ce:7f:cc:89:2a:bb:18:85:46:89:
         07:dc:c6:b5:63:d4:a2:ec:e3:b6:0b:0b:92:d2:0f:59:87:1c:
         df:5c:8e:d7:c7:a7:63:ee:ea:52:31:b8:ec:d2:bf:ea:13:98:
         06:70:1e:db:48:2b:36:4f:33:72:20:6d:c8:d5:e6:b4:ba:e7:
         3a:e0:2f:b2:7d:9d:d5:cb:32:22:56:67:b9:53:74:b2:a9:b3:
         50:d0:c9:f9:e2:f9:3a:88:92:d1:65:68:a7:53:3a:0d:a4:e7:
         97:3a:a6:4a:25:f2:c3:9a:ae:d8:47:90:47:aa:ef:e1:ce:55:
         d3:66:eb:d1:3e:c1:27:4c:c4:8a:5d:c2:5b:5f:96:f1:cb:cd:
         c1:05:e6:a2:6f:3f:ef:79:be:48:e5:d2:67:a4:c9:44:23:0b:
         1b:db:26:0d:fe:ec:87:de:59:46:c8:56:bd:6a:8a:05:e2:b9:
         35:2d:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----