Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326230383a3a2f34382d3438203d3e203533333536.roa
File:                     326131343a373538313a326230383a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          sRouzUY3c4GK+hRmyQh/CmvMpy6FJsKjjtRHOG4COHY=
Subject key identifier:   25:E3:56:EE:18:45:93:8D:99:89:62:6A:AF:2D:DD:E3:29:BA:48:12
Certificate issuer:       /CN=30EC341CC59263F48799F70A95490826E78E6E11
Certificate serial:       67531E64316F0AB1704C1B0E111E08E7A349F460
Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326230383a3a2f34382d3438203d3e203533333536.roa
Signing time:             Wed 29 May 2024 16:07:15 +0000
ROA not before:           Wed 29 May 2024 16:02:15 +0000
ROA not after:            Wed 28 May 2025 16:07:15 +0000
asID:                     53356
IP address blocks:        2a14:7581:2b08::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 08:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:53:1e:64:31:6f:0a:b1:70:4c:1b:0e:11:1e:08:e7:a3:49:f4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11
        Validity
            Not Before: May 29 16:02:15 2024 GMT
            Not After : May 28 16:07:15 2025 GMT
        Subject: CN=25E356EE1845938D9989626AAF2DDDE329BA4812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:49:43:19:8b:81:a6:4a:46:f9:eb:c8:fa:b3:
                    6c:92:0d:67:fd:ef:d8:78:64:01:f5:94:38:1a:8c:
                    cd:e9:3f:8e:ba:61:77:44:61:c1:12:68:8e:c2:33:
                    61:d0:cc:19:28:14:24:5a:83:95:60:64:39:d6:8b:
                    b6:aa:7b:30:4f:49:33:02:f5:47:af:08:de:17:71:
                    82:44:78:e1:f1:2a:e6:65:bc:35:26:b8:19:7e:04:
                    7b:de:7d:90:e8:2f:9a:bc:80:d3:5c:85:24:cd:c1:
                    c9:50:3b:33:ed:e9:82:61:db:20:9d:da:97:fe:ae:
                    61:4e:5c:19:75:ed:6e:77:cb:f5:b8:d6:68:f3:a4:
                    63:99:3f:3b:b8:26:27:7a:b8:cf:69:25:df:72:cf:
                    b1:19:6f:72:7d:08:2c:51:2c:27:f0:05:ed:61:30:
                    fb:95:13:1e:f3:09:d9:64:c8:8f:18:08:bb:77:f2:
                    f3:0a:99:d1:a3:95:e7:fd:90:d3:1e:ad:26:70:ea:
                    54:0e:ee:15:f6:3d:50:f0:dd:21:c6:e4:9f:f1:eb:
                    67:1e:dd:fe:de:92:52:84:1f:6b:17:cb:0c:41:02:
                    64:d0:67:45:a5:eb:49:94:a3:cf:58:b1:2e:6d:d6:
                    61:90:dd:43:d2:3e:e7:d0:36:f0:77:90:94:a6:b5:
                    0d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E3:56:EE:18:45:93:8D:99:89:62:6A:AF:2D:DD:E3:29:BA:48:12
            X509v3 Authority Key Identifier:
                keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326230383a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:2b08::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:80:10:2f:6e:99:a0:d8:87:b1:54:4e:7e:6e:fc:45:68:c1:
         61:70:07:bd:37:24:0b:39:f3:fb:80:9d:5c:d7:e4:3b:82:6a:
         37:fb:12:95:22:e1:f9:dd:4d:67:f3:9c:e7:03:a0:70:7a:92:
         2d:61:e4:47:c9:e0:e6:a3:19:50:e0:b5:be:2a:1e:43:46:a1:
         29:0a:d1:51:9f:85:e2:00:ba:57:df:3e:5a:33:27:79:23:64:
         15:66:3b:d5:15:a4:b8:57:9e:54:ac:84:ef:74:de:1c:6e:94:
         a7:b1:7c:68:7a:ad:9e:f7:72:e9:9d:d0:c7:44:7a:10:ce:4b:
         d1:96:31:30:c3:87:e6:d9:a0:c0:4d:9e:20:52:d8:88:5a:34:
         c3:fd:5f:3e:9d:84:a5:57:08:74:ce:81:f2:1d:6c:c7:00:f8:
         e4:4a:0f:da:9b:61:7a:c9:5a:4a:16:ba:49:d9:e2:0b:a6:7c:
         19:56:71:83:5a:a4:b1:cc:9a:7b:80:4a:07:5d:a7:dd:dc:ea:
         71:1c:3d:85:9d:7d:b2:6e:a7:68:7f:20:31:05:4c:d2:ec:87:
         12:84:d3:51:c3:20:c3:6e:70:ab:68:3a:ca:53:76:aa:39:48:
         76:bc:89:b9:4c:e9:11:9b:91:c3:e5:46:4e:ac:4b:81:63:5c:
         c3:4b:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----