Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326231373a3a2f34382d3438203d3e20323136333234.roa
File:                     326131343a373538313a326231373a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          JeFWRtCYE70t8nsOxW8m6quXZcTjfY5q6+yB1uwS4B8=
Subject key identifier:   DB:20:2C:E1:7F:F7:49:E7:5B:3F:E4:59:10:C6:FA:2A:EA:FE:AE:93
Certificate issuer:       /CN=30EC341CC59263F48799F70A95490826E78E6E11
Certificate serial:       3F1132EE782D244F093E2E46746CC21045389789
Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326231373a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Wed 12 Jun 2024 09:32:56 +0000
ROA not before:           Wed 12 Jun 2024 09:27:56 +0000
ROA not after:            Wed 11 Jun 2025 09:32:56 +0000
asID:                     216324
IP address blocks:        2a14:7581:2b17::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 08:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:11:32:ee:78:2d:24:4f:09:3e:2e:46:74:6c:c2:10:45:38:97:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11
        Validity
            Not Before: Jun 12 09:27:56 2024 GMT
            Not After : Jun 11 09:32:56 2025 GMT
        Subject: CN=DB202CE17FF749E75B3FE45910C6FA2AEAFEAE93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:92:93:1d:bc:93:5e:e4:e3:c8:5d:cc:49:
                    ec:64:53:49:07:cb:76:1b:98:ec:ea:46:fd:97:69:
                    1d:f7:b8:3b:3e:7f:d7:8a:69:ff:38:3e:cb:14:64:
                    ad:ed:75:83:97:81:68:7e:79:dd:de:61:7c:ce:a0:
                    dd:9e:d9:8e:c9:d3:32:f6:2a:a3:90:86:e0:31:6d:
                    9a:26:5e:b2:7f:e3:59:0f:b6:71:d3:79:45:ce:cb:
                    f0:53:06:26:fb:38:9c:15:ac:65:ec:e0:22:3c:d7:
                    95:c7:fd:26:55:23:c6:cf:81:29:7f:e9:c7:7d:b2:
                    c0:03:ae:3b:a5:7a:52:d5:75:99:3f:6d:29:40:12:
                    f8:02:c5:4f:2c:01:a4:08:f0:42:61:2e:af:f6:e1:
                    71:68:c8:f1:b8:6b:dc:f4:02:ed:64:02:06:7d:c1:
                    54:d2:53:b2:69:f7:e7:6f:c8:8e:59:a0:9d:8d:06:
                    5d:52:d5:f8:fe:b6:77:23:52:a3:11:cf:a7:72:20:
                    3a:77:50:23:70:0f:20:13:7b:46:0a:e5:b7:37:2f:
                    d4:2d:d6:74:98:4d:94:6c:a2:44:ff:82:e7:78:4e:
                    5e:3c:65:3e:4c:fa:09:f5:c3:b2:3a:c9:41:ad:a9:
                    f6:04:8a:30:f8:e5:b8:90:bb:aa:6a:9b:a5:9c:5b:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:20:2C:E1:7F:F7:49:E7:5B:3F:E4:59:10:C6:FA:2A:EA:FE:AE:93
            X509v3 Authority Key Identifier:
                keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a326231373a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:2b17::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:3c:2f:16:a8:30:33:7a:df:0c:19:c0:d9:1c:94:e4:3d:19:
         b8:08:18:42:34:f2:00:41:4f:83:31:3b:ad:09:56:05:d4:45:
         9e:49:14:0b:12:d6:19:cd:b7:75:f5:8f:5a:c7:2e:24:fc:b2:
         79:61:28:b8:b8:cb:05:71:fa:69:99:ca:7a:a3:2b:b9:e8:b2:
         7a:15:2e:ce:e6:ac:5b:5d:91:9f:7c:9c:98:04:f1:6b:29:52:
         25:2c:79:43:8b:97:1e:b4:f8:48:77:47:6f:bd:7f:6d:72:d2:
         ca:98:73:c1:88:77:3c:47:05:12:fd:ef:f2:9f:4e:23:c5:22:
         6c:41:da:96:89:c3:ca:4c:fa:86:e4:f6:53:68:b1:d4:a2:d9:
         6c:18:46:6d:bc:20:1c:8d:ca:53:32:18:7e:30:06:f7:71:65:
         f8:38:52:cd:b5:c3:88:1f:17:3f:33:f1:a8:4a:47:49:97:75:
         52:91:e8:b3:f4:39:bd:4d:f8:ca:76:92:b0:c6:65:a6:30:e4:
         f6:4a:9f:5c:5f:7c:f3:2b:5f:e6:03:ab:ca:2a:61:b1:49:29:
         b7:ab:62:71:78:34:71:60:e0:08:9c:e4:21:29:d2:38:34:c1:
         a4:40:78:1f:da:d2:65:69:3b:0d:de:ea:b3:64:be:c5:3c:cb:
         53:38:6e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----