Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326231313a3a2f34382d3438203d3e20323136333234.roa
File:                     326131343a373538313a326231313a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          U8J5STTVZ+ZRu6AfHO6Oz2mF1xkjIZjMb2QUkcJ/vm8=
Subject key identifier:   69:74:D8:DF:58:6E:4B:92:F8:E7:2D:2A:71:65:4E:E6:89:E9:D0:32
Certificate issuer:       /CN=30EC341CC59263F48799F70A95490826E78E6E11
Certificate serial:       324D7A6B12890BAAD09BB126C6C7FD12180CCBE5
Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326231313a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Tue 28 May 2024 13:44:11 +0000
ROA not before:           Tue 28 May 2024 13:39:11 +0000
ROA not after:            Tue 27 May 2025 13:44:11 +0000
asID:                     216324
IP address blocks:        2a14:7581:2b11::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 08:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4d:7a:6b:12:89:0b:aa:d0:9b:b1:26:c6:c7:fd:12:18:0c:cb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11
        Validity
            Not Before: May 28 13:39:11 2024 GMT
            Not After : May 27 13:44:11 2025 GMT
        Subject: CN=6974D8DF586E4B92F8E72D2A71654EE689E9D032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:55:de:40:07:d9:97:35:67:ea:5b:4f:df:
                    56:75:c4:e4:3a:82:21:0b:ed:44:e3:c6:b0:9a:ae:
                    89:f1:95:bc:35:0a:90:79:18:1b:79:0d:1a:60:26:
                    2e:ca:9a:1c:49:16:ec:c5:50:37:a6:48:4a:d4:95:
                    12:e3:0d:d2:b9:54:47:e9:15:1d:3e:5c:35:dd:b5:
                    07:9d:66:08:9b:bd:f8:34:a4:68:28:a2:64:12:e2:
                    e8:b5:c8:9f:b0:61:f5:9e:4a:3d:62:15:ef:55:30:
                    97:2d:1b:5b:a4:a0:8f:f5:31:36:48:9f:0f:ae:a0:
                    9e:9f:55:4f:eb:b5:8a:46:fe:8d:20:9a:b8:2e:09:
                    f4:c7:a8:0c:6f:71:b9:29:33:ca:85:8a:1f:66:2f:
                    f4:15:ce:1d:89:2d:aa:e6:79:20:6e:70:e3:76:cb:
                    28:9f:b9:03:bc:14:d8:20:4d:94:74:f8:ad:a8:fe:
                    84:29:fd:ba:4f:7c:27:7f:b0:c8:85:b5:7e:2d:da:
                    56:f8:4b:1f:f4:cc:0a:c9:65:f1:78:4f:52:ff:4c:
                    ec:72:dc:c4:5e:e4:bc:e7:c8:12:b3:0b:26:92:7a:
                    9c:8c:09:10:9c:4e:96:ee:88:6d:a5:d5:16:bc:07:
                    1c:0a:1a:ab:65:9d:6a:b2:21:f0:44:1a:a2:ec:ba:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:74:D8:DF:58:6E:4B:92:F8:E7:2D:2A:71:65:4E:E6:89:E9:D0:32
            X509v3 Authority Key Identifier:
                keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326231313a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:2b11::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:e9:7c:dc:17:c2:57:8b:73:e5:b8:be:30:c4:6f:de:d1:
         da:82:e3:93:dc:92:88:eb:39:6c:0c:98:c6:32:fc:44:7d:4e:
         93:b7:2f:15:14:b7:21:aa:b2:74:22:8d:dc:27:e7:78:bd:f1:
         9b:d8:3c:ed:2d:c3:44:36:c7:af:ad:89:dd:12:65:69:94:d2:
         49:c6:85:f4:65:1c:f1:ea:cc:fb:27:e1:82:a3:60:7a:b3:fe:
         40:53:f7:ea:d7:39:a7:75:11:29:cc:d2:f0:64:b6:d9:86:02:
         cd:5a:70:af:34:48:15:81:de:31:10:ee:01:fc:2a:ef:2b:2e:
         1a:5c:06:58:c9:3a:b0:94:df:40:ea:a5:11:40:92:dc:ed:1a:
         4b:cf:3c:11:97:9d:a6:4a:d1:06:a2:c8:8e:98:e1:5f:ea:f8:
         f8:e2:27:05:f1:99:95:3a:f7:24:ab:f5:98:d3:f4:15:cb:30:
         f4:b7:b0:a4:fe:36:24:b6:3f:49:a5:37:01:94:b1:04:ef:b1:
         97:17:cd:e1:42:20:66:b9:69:d3:03:f2:17:16:33:5f:b9:a0:
         37:07:6d:47:fe:4a:32:e6:2f:c4:f7:2e:74:7f:42:c6:5a:04:
         07:ca:69:46:cf:d3:b6:5c:29:88:3f:8a:cb:db:0f:60:85:b1:
         57:20:a1:8f
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUMk16axKJC6rQm7Emxsf9EhgMy+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF
NzhFNkUxMTAeFw0yNDA1MjgxMzM5MTFaFw0yNTA1MjcxMzQ0MTFaMDMxMTAvBgNV
BAMTKDY5NzREOERGNTg2RTRCOTJGOEU3MkQyQTcxNjU0RUU2ODlFOUQwMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+lXeQAfZlzVn6ltP31Z1xOQ6
giEL7UTjxrCaronxlbw1CpB5GBt5DRpgJi7KmhxJFuzFUDemSErUlRLjDdK5VEfp
FR0+XDXdtQedZgibvfg0pGgoomQS4ui1yJ+wYfWeSj1iFe9VMJctG1ukoI/1MTZI
nw+uoJ6fVU/rtYpG/o0gmrguCfTHqAxvcbkpM8qFih9mL/QVzh2JLarmeSBucON2
yyifuQO8FNggTZR0+K2o/oQp/bpPfCd/sMiFtX4t2lb4Sx/0zArJZfF4T1L/TOxy
3MRe5LznyBKzCyaSepyMCRCcTpbuiG2l1Ra8BxwKGqtlnWqyIfBEGqLsutibAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUaXTY31huS5L45y0qcWVO5onp0DIwHwYDVR0j
BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz
NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5
NTQ5MDgyNkU3OEU2RTExLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTMyNjIzMTMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM2MzMzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gSsRMA0GCSqGSIb3DQEBCwUAA4IBAQB/
OOl83BfCV4tz5bi+MMRv3tHaguOT3JKI6zlsDJjGMvxEfU6Tty8VFLchqrJ0Io3c
J+d4vfGb2DztLcNENsevrYndEmVplNJJxoX0ZRzx6sz7J+GCo2B6s/5AU/fq1zmn
dREpzNLwZLbZhgLNWnCvNEgVgd4xEO4B/CrvKy4aXAZYyTqwlN9A6qURQJLc7RpL
zzwRl52mStEGosiOmOFf6vj44icF8ZmVOvckq/WY0/QVyzD0t7Ck/jYktj9JpTcB
lLEE77GXF83hQiBmuWnTA/IXFjNfuaA3B21H/koy5i/E9y50f0LGWgQHymlGz9O2
XCmIP4rL2w9ghbFXIKGP
-----END CERTIFICATE-----