Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030303a3a2f34352d3435203d3e20323135333634.roa
File:                     326131343a373538313a313030303a3a2f34352d3435203d3e20323135333634.roa (raw, json)
Hash identifier:          fvM971eHSObEA34w9niw1hRX86tIRd9CqPEiiSPBObw=
Subject key identifier:   06:08:45:D9:1D:9E:F6:B1:D8:39:B4:39:6B:57:86:77:9A:07:BD:1E
Certificate issuer:       /CN=30EC341CC59263F48799F70A95490826E78E6E11
Certificate serial:       6C91C1E5B82D3480122EAB0F57A461DFBBF57C19
Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030303a3a2f34352d3435203d3e20323135333634.roa
Signing time:             Wed 03 Apr 2024 14:14:23 +0000
ROA not before:           Wed 03 Apr 2024 14:09:23 +0000
ROA not after:            Wed 02 Apr 2025 14:14:23 +0000
asID:                     215364
IP address blocks:        2a14:7581:1000::/45 maxlen: 45

Validation:               Failed, certificate revoked on Thu 04 Apr 2024 11:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:91:c1:e5:b8:2d:34:80:12:2e:ab:0f:57:a4:61:df:bb:f5:7c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11
        Validity
            Not Before: Apr  3 14:09:23 2024 GMT
            Not After : Apr  2 14:14:23 2025 GMT
        Subject: CN=060845D91D9EF6B1D839B4396B5786779A07BD1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:9b:1a:c0:d4:16:98:e2:de:a4:b2:b4:af:
                    45:e5:ca:4c:66:93:17:2b:b9:e9:24:5a:71:d3:4f:
                    d4:71:91:65:25:97:16:3d:6a:0f:2b:a4:fd:b6:43:
                    18:9c:87:40:84:db:dc:8c:8b:39:95:8a:14:eb:b9:
                    08:ed:ca:00:89:dd:ba:1b:50:4c:46:72:fa:35:ce:
                    dd:b0:f6:cb:58:03:a2:dc:9b:e7:af:a2:80:01:28:
                    28:52:bb:30:57:9d:9e:32:55:25:bb:6f:b1:7f:e4:
                    5a:82:76:b7:97:db:1a:5d:7e:ca:e5:d3:03:ce:81:
                    f1:5c:e4:e9:b5:07:a9:23:ec:f3:21:0f:65:39:6b:
                    d1:62:ed:6b:d8:49:fd:7c:13:a4:f2:13:b7:e0:17:
                    45:bb:ea:49:69:2d:b1:8a:cb:21:8c:b1:06:f0:a4:
                    5a:55:f8:02:43:8f:79:0e:08:fe:b9:b5:2c:0b:c1:
                    b8:f0:7c:45:46:4c:32:b5:e1:90:97:04:4d:82:d6:
                    6d:9c:92:9d:c6:ae:a6:06:dd:eb:e8:c3:06:a7:e5:
                    95:db:e5:68:60:14:6b:c8:b8:b6:f4:14:a6:c2:e6:
                    9c:2d:11:f8:0c:d8:35:33:34:f7:06:47:3d:64:9b:
                    ab:e0:50:46:98:c8:f5:0e:c5:0b:ad:8a:ff:6b:88:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:08:45:D9:1D:9E:F6:B1:D8:39:B4:39:6B:57:86:77:9A:07:BD:1E
            X509v3 Authority Key Identifier:
                keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030303a3a2f34352d3435203d3e20323135333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:1000::/45

    Signature Algorithm: sha256WithRSAEncryption
         5f:73:f6:93:ed:64:76:ad:a6:b3:b6:04:b5:0b:1c:2d:7e:a3:
         8a:ae:92:64:e7:90:af:89:d4:b1:b4:c1:90:9b:0f:40:8a:37:
         a0:e7:12:fd:8c:4c:13:cc:1f:17:70:97:00:27:9d:8c:61:12:
         52:62:d6:e5:63:36:1a:49:cf:96:aa:36:e9:45:d8:b6:7a:17:
         c1:23:f7:db:79:f9:6f:c7:52:ce:f7:d8:9a:aa:91:4e:5b:d8:
         39:9e:68:b5:35:cc:c5:80:a9:6f:95:21:d9:85:20:2f:90:32:
         95:2c:15:ce:42:9a:94:9f:98:ef:77:41:bc:2b:ef:6a:15:59:
         a6:f4:df:75:81:fd:f9:41:ee:01:fa:07:34:c3:be:0d:96:fc:
         16:f8:0c:81:b3:02:02:a3:15:b8:c6:6c:9c:07:e9:9f:24:2b:
         08:bb:74:31:cb:e1:f2:6d:19:7a:cc:fe:8c:3c:c7:d6:76:d0:
         a6:21:cf:91:18:d2:a7:51:14:e1:0b:b7:f6:09:79:48:52:00:
         f0:13:cf:1c:84:5f:a6:ea:e7:8d:a3:cb:3b:86:ec:4a:dc:a6:
         ae:e5:3c:75:97:0d:10:fd:80:d2:f4:ed:60:0b:e7:f0:bd:8c:
         d2:ec:fc:96:a9:f6:46:13:62:d1:6d:d5:5d:15:f1:9e:2b:cf:
         a3:c6:2a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----