Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3630343a3a2f34382d3438203d3e20323136333234.roa
File:                     326130663a383563313a3630343a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          dRhoJCL4EGV0mfdD/zZXq7Q3DtZzNCLI8P2o2vwXG8w=
Subject key identifier:   BC:2F:42:0B:D6:AC:4D:2D:CF:0A:44:79:F4:FE:47:A8:EE:02:56:C0
Certificate issuer:       /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Certificate serial:       6956E492050D42E6CA810BFA3CBD3D5032040B17
Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3630343a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Tue 30 Apr 2024 07:06:17 +0000
ROA not before:           Tue 30 Apr 2024 07:01:17 +0000
ROA not after:            Tue 29 Apr 2025 07:06:17 +0000
asID:                     216324
IP address blocks:        2a0f:85c1:604::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 14 May 2024 05:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:56:e4:92:05:0d:42:e6:ca:81:0b:fa:3c:bd:3d:50:32:04:0b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
        Validity
            Not Before: Apr 30 07:01:17 2024 GMT
            Not After : Apr 29 07:06:17 2025 GMT
        Subject: CN=BC2F420BD6AC4D2DCF0A4479F4FE47A8EE0256C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:6f:e6:b2:83:bd:06:0f:78:82:fd:6b:5e:
                    8e:ee:a5:dc:de:c1:0c:11:d3:30:8d:a7:23:f8:83:
                    83:bb:a4:dd:f7:df:0a:ce:ac:b8:30:c7:51:cf:7c:
                    96:58:ff:61:6c:bc:eb:e3:e6:83:cb:5e:fb:cb:9b:
                    ae:53:c0:b3:4a:57:5f:af:b2:e0:42:2d:7f:94:de:
                    20:45:ab:5c:5e:eb:3e:61:fc:ae:c2:82:0d:7f:5f:
                    43:55:d5:38:7a:df:f7:a7:08:1e:ef:5d:9e:21:43:
                    c7:90:30:ee:3a:bc:86:6a:3b:95:08:63:6a:42:31:
                    7a:ad:6b:0d:94:fe:c3:e4:f8:c6:00:c8:82:29:f0:
                    20:80:eb:2f:4e:bd:54:96:33:28:1f:92:04:ce:79:
                    ec:7f:2e:8b:30:6b:3f:e1:15:28:22:d4:d0:34:46:
                    91:cc:1f:cd:4e:91:a7:e6:13:e7:12:2a:38:59:64:
                    23:77:9b:d3:4f:a5:40:b3:8c:1c:ae:ab:77:78:54:
                    d7:b3:0f:9e:72:b6:a0:65:28:61:98:87:a8:48:1a:
                    da:25:e5:04:1f:1f:74:73:c7:44:19:df:0d:1e:ce:
                    37:e9:1f:7f:74:d9:8f:6d:89:a4:a3:6e:3a:fe:0c:
                    a5:a1:7d:d8:fb:8d:12:60:cb:4b:1e:37:4d:e2:db:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2F:42:0B:D6:AC:4D:2D:CF:0A:44:79:F4:FE:47:A8:EE:02:56:C0
            X509v3 Authority Key Identifier:
                keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3630343a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:604::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:34:aa:af:a6:6a:48:30:30:f1:a5:4a:3e:4a:0d:83:0e:
         5d:29:21:25:35:b1:a6:39:e2:66:8b:31:54:58:7e:6a:b8:9e:
         ee:5c:be:8f:f3:ef:86:65:57:62:00:92:41:a3:a8:e5:0d:8a:
         3b:98:91:09:12:30:a7:35:e8:22:a0:07:88:5f:39:c7:cd:f0:
         fd:99:8a:25:b9:83:5f:e1:65:68:93:f6:83:1f:b0:eb:50:ba:
         ff:a3:6b:56:61:bf:16:d4:d9:bf:0e:9a:fa:7e:2c:22:77:8c:
         16:20:20:af:ec:53:fe:3e:89:33:36:7f:15:3f:16:b6:ee:54:
         d8:fa:1c:1b:68:2e:59:6e:7f:16:27:34:5b:d3:8e:c9:0d:55:
         34:a5:55:8a:b5:86:e3:f8:02:30:6e:c5:da:f6:3c:8e:fa:e5:
         5c:80:a6:08:1d:ef:a0:bf:7d:80:fa:01:e2:7c:80:1c:bf:a4:
         b5:4c:1e:52:c5:28:65:f7:7b:0e:ac:6c:ec:6c:2d:53:6d:53:
         ec:1b:36:da:d3:c8:ed:8d:28:91:26:6a:dc:eb:2e:de:ed:20:
         1f:7e:11:5d:ba:57:33:58:26:3a:47:cf:56:11:cb:ba:bb:59:
         c4:88:72:bf:df:97:8a:9a:fc:dc:e5:cb:bd:c4:04:c4:29:92:
         1d:35:7d:8d
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUaVbkkgUNQubKgQv6PL09UDIECxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0
QzExMUFCOTAeFw0yNDA0MzAwNzAxMTdaFw0yNTA0MjkwNzA2MTdaMDMxMTAvBgNV
BAMTKEJDMkY0MjBCRDZBQzREMkRDRjBBNDQ3OUY0RkU0N0E4RUUwMjU2QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hW/msoO9Bg94gv1rXo7updze
wQwR0zCNpyP4g4O7pN333wrOrLgwx1HPfJZY/2FsvOvj5oPLXvvLm65TwLNKV1+v
suBCLX+U3iBFq1xe6z5h/K7Cgg1/X0NV1Th63/enCB7vXZ4hQ8eQMO46vIZqO5UI
Y2pCMXqtaw2U/sPk+MYAyIIp8CCA6y9OvVSWMygfkgTOeex/Loswaz/hFSgi1NA0
RpHMH81OkafmE+cSKjhZZCN3m9NPpUCzjByuq3d4VNezD55ytqBlKGGYh6hIGtol
5QQfH3Rzx0QZ3w0ezjfpH3902Y9tiaSjbjr+DKWhfdj7jRJgy0seN03i28I9AgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUvC9CC9asTS3PCkR59P5HqO4CVsAwHwYDVR0j
BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz
NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi
YjItYTg0ZC01NWRhMjEyOGYxOTYvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw
NzQ1MzBBNzRDMTExQUI5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMi8zMjYxMzA2
NjNhMzgzNTYzMzEzYTM2MzAzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz
NjMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEGBDANBgkqhkiG9w0BAQsFAAOCAQEAZ840
qq+makgwMPGlSj5KDYMOXSkhJTWxpjniZosxVFh+arie7ly+j/PvhmVXYgCSQaOo
5Q2KO5iRCRIwpzXoIqAHiF85x83w/ZmKJbmDX+FlaJP2gx+w61C6/6NrVmG/FtTZ
vw6a+n4sIneMFiAgr+xT/j6JMzZ/FT8Wtu5U2PocG2guWW5/Fic0W9OOyQ1VNKVV
irWG4/gCMG7F2vY8jvrlXICmCB3voL99gPoB4nyAHL+ktUweUsUoZfd7Dqxs7Gwt
U21T7Bs22tPI7Y0okSZq3Osu3u0gH34RXbpXM1gmOkfPVhHLurtZxIhyv9+Xipr8
3OXLvcQExCmSHTV9jQ==
-----END CERTIFICATE-----