Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326231333a3a2f34382d3438203d3e20323136333234.roa
File:                     326131343a373538313a326231333a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          2L5cQlFhUem+fk45vy/ujxpLx24LujY5vN6tltep7V8=
Subject key identifier:   8F:DD:07:F5:59:BA:AC:8E:F5:11:DC:D7:DF:6D:BF:91:65:D7:1D:89
Certificate issuer:       /CN=30EC341CC59263F48799F70A95490826E78E6E11
Certificate serial:       21D3E6C7210310FE21C0AE8FD8E5A1D967AD98C2
Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326231333a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Wed 17 Jul 2024 14:27:20 +0000
ROA not before:           Wed 17 Jul 2024 14:22:20 +0000
ROA not after:            Wed 16 Jul 2025 14:27:20 +0000
asID:                     216324
IP address blocks:        2a14:7581:2b13::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 08:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d3:e6:c7:21:03:10:fe:21:c0:ae:8f:d8:e5:a1:d9:67:ad:98:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11
        Validity
            Not Before: Jul 17 14:22:20 2024 GMT
            Not After : Jul 16 14:27:20 2025 GMT
        Subject: CN=8FDD07F559BAAC8EF511DCD7DF6DBF9165D71D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5d:ec:04:9c:a6:9c:32:0e:ad:12:87:cd:13:
                    1c:36:ce:18:cf:60:77:9c:72:25:7c:1b:9d:13:6a:
                    55:b7:1e:57:79:32:61:52:b1:f1:c0:7d:d7:e9:28:
                    49:e3:45:03:85:d0:a2:63:52:2c:bc:90:48:5c:d2:
                    30:12:75:2a:a7:55:52:60:17:3f:92:2e:29:ab:57:
                    23:a4:2d:de:e6:bf:19:ae:ae:21:63:66:c8:d1:a7:
                    0d:a6:bf:88:d8:73:81:63:ef:16:4d:e8:26:93:01:
                    5e:e3:ac:bc:2d:df:1f:0d:3b:6e:89:47:54:8a:e4:
                    3d:0f:12:c1:07:30:0e:fa:8a:97:d6:da:3c:2c:f4:
                    2a:b2:28:17:e3:13:6c:70:93:c4:6c:5c:da:cc:6a:
                    b8:db:bd:d3:ec:df:5d:cf:d0:42:7f:28:a1:dd:db:
                    40:d8:be:da:39:36:14:ce:01:db:b9:ed:6f:b5:b0:
                    0e:52:5e:cc:71:b0:4d:76:6d:a5:00:01:67:d6:01:
                    bd:5c:ae:58:94:e4:e5:5f:81:82:d5:11:04:61:70:
                    8d:f0:7a:ec:81:76:a8:65:ac:1f:03:6e:4d:db:04:
                    1f:50:25:7e:85:8d:2d:90:81:8b:e0:87:ce:be:94:
                    c5:89:8b:35:20:e4:91:bc:91:d5:8e:8a:34:3c:93:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DD:07:F5:59:BA:AC:8E:F5:11:DC:D7:DF:6D:BF:91:65:D7:1D:89
            X509v3 Authority Key Identifier:
                keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326231333a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:2b13::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:8c:a8:3c:39:2b:1b:f8:84:01:22:54:7c:5f:ae:db:90:b8:
         0f:49:66:10:7d:7f:c1:d8:25:50:ee:ef:fa:b5:88:65:c0:2d:
         93:8f:56:b6:6b:54:b3:6c:92:c5:3e:b2:ec:bb:0c:93:e8:23:
         bb:52:aa:6d:a1:fa:ae:12:81:e9:20:94:4c:e5:ff:ee:41:fb:
         b6:2c:53:91:94:c3:b8:55:f8:30:1f:f2:ee:61:b8:5d:22:b5:
         f2:57:ef:8e:36:00:d7:ee:0f:42:79:cb:62:fe:db:08:49:4a:
         3f:58:2f:13:2d:9a:9b:f0:0b:71:86:05:6a:a1:17:8a:52:6f:
         f9:b1:78:c9:18:79:a5:7b:d5:91:df:3f:e8:a4:aa:38:ba:f8:
         be:9f:42:bf:cf:52:eb:74:61:eb:d0:41:73:9f:fc:2d:b7:f9:
         8f:eb:1b:14:9c:4f:06:73:01:45:ef:be:ff:4e:3c:1c:8e:98:
         8f:d5:40:a6:59:81:b5:3f:a0:40:ce:0a:9d:50:86:bc:8b:d9:
         64:d0:81:8c:a2:be:c5:aa:74:ff:e0:e6:0f:b5:77:2f:3a:9e:
         1d:56:91:c1:20:e5:1e:6a:f6:3a:bd:59:5b:12:8a:ed:53:1e:
         5e:39:1c:d0:e8:87:a5:2b:e6:1f:0a:f9:07:8f:d9:13:86:70:
         c3:1e:d7:79
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUIdPmxyEDEP4hwK6P2OWh2WetmMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF
NzhFNkUxMTAeFw0yNDA3MTcxNDIyMjBaFw0yNTA3MTYxNDI3MjBaMDMxMTAvBgNV
BAMTKDhGREQwN0Y1NTlCQUFDOEVGNTExRENEN0RGNkRCRjkxNjVENzFEODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYXewEnKacMg6tEofNExw2zhjP
YHecciV8G50TalW3Hld5MmFSsfHAfdfpKEnjRQOF0KJjUiy8kEhc0jASdSqnVVJg
Fz+SLimrVyOkLd7mvxmuriFjZsjRpw2mv4jYc4Fj7xZN6CaTAV7jrLwt3x8NO26J
R1SK5D0PEsEHMA76ipfW2jws9CqyKBfjE2xwk8RsXNrMarjbvdPs313P0EJ/KKHd
20DYvto5NhTOAdu57W+1sA5SXsxxsE12baUAAWfWAb1crliU5OVfgYLVEQRhcI3w
euyBdqhlrB8Dbk3bBB9QJX6FjS2QgYvgh86+lMWJizUg5JG8kdWOijQ8kym1AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUj90H9Vm6rI71EdzX322/kWXXHYkwHwYDVR0j
BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz
NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5
NTQ5MDgyNkU3OEU2RTExLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTMyNjIzMTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM2MzMzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gSsTMA0GCSqGSIb3DQEBCwUAA4IBAQBo
jKg8OSsb+IQBIlR8X67bkLgPSWYQfX/B2CVQ7u/6tYhlwC2Tj1a2a1SzbJLFPrLs
uwyT6CO7UqptofquEoHpIJRM5f/uQfu2LFORlMO4VfgwH/LuYbhdIrXyV++ONgDX
7g9Cecti/tsISUo/WC8TLZqb8AtxhgVqoReKUm/5sXjJGHmle9WR3z/opKo4uvi+
n0K/z1LrdGHr0EFzn/wtt/mP6xsUnE8GcwFF777/TjwcjpiP1UCmWYG1P6BAzgqd
UIa8i9lk0IGMor7FqnT/4OYPtXcvOp4dVpHBIOUeavY6vVlbEortUx5eORzQ6Iel
K+YfCvkHj9kThnDDHtd5
-----END CERTIFICATE-----