Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3630333a3a2f34382d3438203d3e20323136333234.roa
File:                     326130663a383563313a3630333a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          b761VFXMKHQXMBHKekVhlT8zKp9RkDSduRveTWt5Xvc=
Subject key identifier:   F4:0E:19:25:E3:34:BB:26:18:98:D0:85:B2:EA:5F:C2:07:C1:CE:B5
Certificate issuer:       /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Certificate serial:       209048BFE63421912AF673C99F19EC4FF5AA2CC8
Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3630333a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Tue 30 Apr 2024 07:02:27 +0000
ROA not before:           Tue 30 Apr 2024 06:57:27 +0000
ROA not after:            Tue 29 Apr 2025 07:02:27 +0000
asID:                     216324
IP address blocks:        2a0f:85c1:603::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 14 May 2024 05:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:90:48:bf:e6:34:21:91:2a:f6:73:c9:9f:19:ec:4f:f5:aa:2c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
        Validity
            Not Before: Apr 30 06:57:27 2024 GMT
            Not After : Apr 29 07:02:27 2025 GMT
        Subject: CN=F40E1925E334BB261898D085B2EA5FC207C1CEB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:00:32:51:55:f5:69:c3:07:e5:85:30:8d:09:
                    18:41:a7:2e:1b:97:53:5e:0d:49:1e:e8:de:c3:02:
                    83:7f:60:6b:e5:3a:f3:fc:e4:04:03:cc:79:be:2a:
                    93:ba:2a:1e:ec:0c:d5:5e:b8:33:8d:9c:35:6e:e6:
                    2f:f2:ec:68:2e:de:df:21:bc:68:e6:c0:c2:94:43:
                    f1:65:7c:44:8c:f0:fe:15:32:68:6e:56:4a:75:01:
                    a9:61:49:73:ea:3c:28:c7:a7:f1:ab:25:45:af:b8:
                    40:b1:b9:b2:22:60:43:37:c9:8b:85:c6:c1:3b:07:
                    c6:6f:61:4b:89:49:0c:0a:a0:2c:5b:29:1a:05:85:
                    f9:04:4d:5d:20:ed:0f:c0:74:d3:b5:1f:9a:f8:10:
                    2c:c2:b0:3e:7c:84:41:00:6b:58:5d:30:00:0c:eb:
                    f3:6b:7a:ef:10:c5:f1:8d:ed:21:bf:51:1e:81:06:
                    c3:ee:bd:25:52:ce:62:75:2f:57:4e:cb:41:98:c1:
                    4b:f8:ec:79:7d:aa:03:f2:fe:54:e1:ee:a6:8d:07:
                    70:3e:21:2d:26:0d:03:45:78:eb:4b:54:27:09:c7:
                    bf:70:1b:70:95:9a:a6:7a:9a:c0:2c:02:88:ab:8c:
                    53:5e:87:64:91:53:5c:34:2c:bb:20:94:2e:d9:35:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0E:19:25:E3:34:BB:26:18:98:D0:85:B2:EA:5F:C2:07:C1:CE:B5
            X509v3 Authority Key Identifier:
                keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3630333a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:603::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:ca:e5:0a:7a:1f:26:f7:b3:93:77:34:da:3d:87:e9:ae:a9:
         88:29:cc:96:6c:04:dd:61:ea:44:e1:7c:e3:c7:b5:a9:ec:93:
         1d:6e:0d:6f:a5:6d:56:53:3c:c5:e3:4a:0a:5f:a7:b1:23:a3:
         a6:bd:db:1c:22:6d:1b:06:8e:83:ed:2c:d0:a3:e8:10:98:e1:
         b1:88:59:8a:f9:9e:fd:d8:67:8a:d2:4e:f3:cc:9d:67:05:c7:
         20:2e:ed:22:9f:c6:1c:dd:83:f9:41:46:17:f3:f8:c6:72:72:
         73:74:20:54:65:68:fb:26:5f:7d:08:df:45:77:73:0e:ab:49:
         2f:1f:35:4a:a6:c4:f3:22:21:78:35:ac:42:5d:c5:02:89:f6:
         a6:db:0d:e0:c4:ea:d1:ad:0a:e7:08:8c:73:bb:22:c1:3c:6a:
         a2:1f:e4:48:e0:d0:e0:26:9a:05:b3:98:03:85:bd:01:67:d1:
         e3:9b:59:a6:74:90:2a:e1:57:92:9a:5e:f6:54:84:9a:2c:27:
         f8:2c:7c:78:ad:b9:40:a3:81:38:bb:fb:28:2d:49:d3:22:f6:
         97:e3:ed:78:07:5d:67:66:4a:ed:cf:d9:77:fc:17:a6:6a:b5:
         62:73:de:7a:f2:fe:b4:5d:68:61:5b:d6:8f:a8:dd:cb:90:39:
         e4:f6:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----