Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326230363a3a2f34382d3438203d3e20323136333234.roa
File:                     326131343a373538313a326230363a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          4F3VVl3bZYbpIgc3iRMaz8jksA0E2Bulxyq6hu50m44=
Subject key identifier:   E1:D4:21:E6:07:D6:B1:58:35:1E:EE:0C:41:6D:55:F7:69:42:AA:8B
Certificate issuer:       /CN=30EC341CC59263F48799F70A95490826E78E6E11
Certificate serial:       0FC98BD281782E35D732996FEE180D7BFD335E23
Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326230363a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Mon 08 Jul 2024 11:18:30 +0000
ROA not before:           Mon 08 Jul 2024 11:13:30 +0000
ROA not after:            Mon 07 Jul 2025 11:18:30 +0000
asID:                     216324
IP address blocks:        2a14:7581:2b06::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 08:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c9:8b:d2:81:78:2e:35:d7:32:99:6f:ee:18:0d:7b:fd:33:5e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11
        Validity
            Not Before: Jul  8 11:13:30 2024 GMT
            Not After : Jul  7 11:18:30 2025 GMT
        Subject: CN=E1D421E607D6B158351EEE0C416D55F76942AA8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:0a:bb:ef:09:91:64:9e:8b:2b:43:9e:86:
                    27:a6:2a:d1:e8:19:d3:11:55:32:7f:8a:20:18:bd:
                    f7:ab:ff:c4:7b:fd:c8:12:31:3c:e3:81:b0:a1:b6:
                    59:4b:53:90:6d:d2:83:b0:44:04:52:94:60:41:17:
                    45:5c:fc:57:9d:58:73:84:b5:87:ec:30:64:dc:e9:
                    7c:9b:39:07:28:d1:e2:f2:01:ba:aa:a8:09:38:d8:
                    79:47:0b:4c:86:cb:13:a3:3a:87:a6:55:12:82:95:
                    1d:f0:8c:a0:b9:ab:22:bb:63:25:10:15:f4:be:f0:
                    9e:a2:8f:b4:dd:46:41:f1:d4:81:9f:fb:24:87:a0:
                    45:88:d1:c4:51:5b:23:00:88:7c:df:29:fb:07:3c:
                    ee:47:c3:ee:18:f4:d8:6f:de:58:db:77:a2:06:50:
                    13:df:8c:34:5b:97:90:d8:23:97:78:cc:e3:8b:b9:
                    55:67:e6:b9:c9:f1:48:af:0a:53:61:fe:6c:d1:1d:
                    05:58:39:41:79:1a:32:b7:03:51:22:7a:b6:0f:fa:
                    59:68:d3:1e:57:75:33:d0:5c:c8:5a:e2:e2:a0:32:
                    e8:97:91:ef:8a:ec:64:8d:26:04:9e:da:9c:0b:64:
                    ad:fe:e4:a8:7c:c8:3a:6e:6a:a4:28:e7:f4:28:21:
                    0b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D4:21:E6:07:D6:B1:58:35:1E:EE:0C:41:6D:55:F7:69:42:AA:8B
            X509v3 Authority Key Identifier:
                keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326230363a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:2b06::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:e7:ad:9b:9e:1c:ac:0c:63:36:d4:7d:f5:cc:8a:9d:9d:4a:
         3c:44:64:5a:ae:5e:6d:7c:c6:7f:a9:d1:c4:20:9c:40:91:eb:
         69:28:5c:06:05:5d:9c:d9:61:38:61:dc:5a:fb:80:a6:2c:bc:
         fd:43:d2:d8:19:85:4c:7c:c8:4d:f4:4f:60:db:ad:2b:27:c0:
         2c:fb:78:30:dd:16:d2:22:0b:68:46:48:13:dd:45:ca:2a:f6:
         43:93:11:d2:28:2d:f9:24:7a:39:c9:90:a6:bb:6d:e0:6e:8e:
         55:a4:36:bf:14:65:75:0c:8d:0a:c6:fe:ce:94:6c:f6:19:26:
         5e:ad:19:fa:7b:98:b3:54:09:3a:0d:66:c6:a1:48:47:2a:7a:
         11:c1:49:19:79:7c:f4:b1:f3:34:08:85:d7:20:ec:dd:67:ed:
         0d:53:56:90:eb:e3:cb:08:e2:9b:83:48:f9:8c:c6:42:9c:a1:
         ed:1b:d2:27:27:28:e8:08:60:23:6e:33:78:18:8f:7a:09:e9:
         19:f4:6d:94:96:ac:db:0d:b2:4e:48:f9:9a:80:7d:c2:26:25:
         f7:60:91:e1:49:39:29:dc:99:14:68:67:02:7d:4a:78:b4:63:
         40:e3:0f:8f:b2:6e:0c:be:c2:5e:f8:05:f5:97:f7:20:7a:12:
         84:b1:1e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----