Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3631343a3a2f34382d3438203d3e20323136333234.roa
File:                     326130663a383563313a3631343a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          iH3Hq5RwC4goIW7TIYrcpHyHqCDUeLwsk+E/FsakRpg=
Subject key identifier:   9E:E5:7A:5E:E3:E9:E1:7E:40:07:E2:07:EE:37:73:EB:5A:AB:FC:68
Certificate issuer:       /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Certificate serial:       4349DFE2601FA129BC58DC70C63E428796B03F35
Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3631343a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Tue 30 Apr 2024 07:05:24 +0000
ROA not before:           Tue 30 Apr 2024 07:00:24 +0000
ROA not after:            Tue 29 Apr 2025 07:05:24 +0000
asID:                     216324
IP address blocks:        2a0f:85c1:614::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 14 May 2024 05:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:49:df:e2:60:1f:a1:29:bc:58:dc:70:c6:3e:42:87:96:b0:3f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
        Validity
            Not Before: Apr 30 07:00:24 2024 GMT
            Not After : Apr 29 07:05:24 2025 GMT
        Subject: CN=9EE57A5EE3E9E17E4007E207EE3773EB5AABFC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9b:b2:f9:fe:59:f5:e2:ae:88:f0:07:e1:5a:
                    ca:27:61:75:6f:9e:31:72:33:65:ff:f5:04:fc:e2:
                    86:df:2a:9d:93:70:e5:0b:da:85:d8:8e:b7:5e:55:
                    50:b9:48:da:e6:b7:e4:33:b1:1e:a2:2b:c0:46:80:
                    0e:56:52:26:d8:68:a3:ce:45:68:36:3d:af:f7:72:
                    f4:a6:93:d8:e4:d0:18:e7:7a:77:0a:37:de:6c:99:
                    13:52:7c:8b:2c:1b:e6:bc:88:0c:b5:86:b1:9a:8f:
                    31:23:5f:60:c8:96:e8:ce:55:85:46:e9:39:ee:34:
                    61:07:c6:55:22:0b:98:c0:7b:db:ea:4d:93:00:57:
                    8e:84:2d:82:cd:61:0c:d2:26:f8:fa:14:7f:7d:c9:
                    0c:83:55:b9:25:b8:26:ce:c6:f9:db:78:1d:29:67:
                    75:e9:1e:d6:0b:de:83:f2:08:d8:dc:47:a5:5a:04:
                    ec:31:4f:1b:7b:c0:de:04:eb:a3:17:98:18:55:d2:
                    d0:d0:e5:f2:be:4b:8e:ba:5f:09:cf:2e:de:b4:99:
                    8e:de:e2:4f:6b:88:f3:c3:29:91:9e:17:90:4f:2d:
                    16:78:e0:99:d8:41:f8:e2:29:40:f4:13:91:39:2f:
                    68:e4:cd:b6:b0:44:9f:99:13:83:97:1c:df:b9:d9:
                    ab:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E5:7A:5E:E3:E9:E1:7E:40:07:E2:07:EE:37:73:EB:5A:AB:FC:68
            X509v3 Authority Key Identifier:
                keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3631343a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:614::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:c2:db:41:b1:40:25:3b:46:16:63:f5:53:6c:93:95:05:ef:
         32:2a:29:ce:6e:ae:21:fe:66:c4:b2:8a:42:dd:d7:2e:87:0f:
         ed:e5:02:1e:96:0e:45:e7:d3:52:fb:5d:d5:3e:32:f0:d4:41:
         0d:b5:ec:0d:76:af:6c:f9:5c:85:37:88:bb:ed:e3:b0:4b:70:
         eb:36:75:09:66:82:e1:b2:b2:97:fc:72:7e:a3:d1:d1:60:0b:
         3b:e4:35:b0:e6:73:01:c5:3c:cc:8e:44:30:58:e3:5a:03:33:
         66:37:7d:15:a3:5f:43:14:4b:df:ee:89:77:b2:09:fd:7f:e4:
         77:d3:28:ab:74:7e:26:df:02:25:eb:26:21:87:eb:7b:53:71:
         b0:71:8b:fc:e6:3a:58:01:83:9e:76:9f:66:14:32:ab:f1:3e:
         4a:2c:f7:cd:05:4e:cf:3d:cf:52:41:49:08:0d:3c:3e:cb:7e:
         55:4d:31:77:b8:1a:cf:60:c6:5b:f5:6a:0b:d3:10:19:4d:e3:
         25:ee:ce:6d:04:73:63:38:98:a5:82:1e:eb:f9:97:ac:d9:1b:
         0c:1b:d0:db:99:e1:e9:d1:41:88:4e:15:30:0a:45:79:fc:8d:
         4f:bb:fa:21:c9:a9:27:47:1b:ef:9a:79:b5:09:10:e9:6b:22:
         69:0f:24:29
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIUQ0nf4mAfoSm8WNxwxj5Ch5awPzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0
QzExMUFCOTAeFw0yNDA0MzAwNzAwMjRaFw0yNTA0MjkwNzA1MjRaMDMxMTAvBgNV
BAMTKDlFRTU3QTVFRTNFOUUxN0U0MDA3RTIwN0VFMzc3M0VCNUFBQkZDNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3m7L5/ln14q6I8AfhWsonYXVv
njFyM2X/9QT84obfKp2TcOUL2oXYjrdeVVC5SNrmt+QzsR6iK8BGgA5WUibYaKPO
RWg2Pa/3cvSmk9jk0BjnencKN95smRNSfIssG+a8iAy1hrGajzEjX2DIlujOVYVG
6TnuNGEHxlUiC5jAe9vqTZMAV46ELYLNYQzSJvj6FH99yQyDVbkluCbOxvnbeB0p
Z3XpHtYL3oPyCNjcR6VaBOwxTxt7wN4E66MXmBhV0tDQ5fK+S466XwnPLt60mY7e
4k9riPPDKZGeF5BPLRZ44JnYQfjiKUD0E5E5L2jkzbawRJ+ZE4OXHN+52avXAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUnuV6XuPp4X5AB+IH7jdz61qr/GgwHwYDVR0j
BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz
NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi
YjItYTg0ZC01NWRhMjEyOGYxOTYvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw
NzQ1MzBBNzRDMTExQUI5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMi8zMjYxMzA2
NjNhMzgzNTYzMzEzYTM2MzEzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz
NjMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEGFDANBgkqhkiG9w0BAQsFAAOCAQEAPcLb
QbFAJTtGFmP1U2yTlQXvMiopzm6uIf5mxLKKQt3XLocP7eUCHpYORefTUvtd1T4y
8NRBDbXsDXavbPlchTeIu+3jsEtw6zZ1CWaC4bKyl/xyfqPR0WALO+Q1sOZzAcU8
zI5EMFjjWgMzZjd9FaNfQxRL3+6Jd7IJ/X/kd9Moq3R+Jt8CJesmIYfre1NxsHGL
/OY6WAGDnnafZhQyq/E+Siz3zQVOzz3PUkFJCA08Pst+VU0xd7gaz2DGW/VqC9MQ
GU3jJe7ObQRzYziYpYIe6/mXrNkbDBvQ25nh6dFBiE4VMApFefyNT7v6IcmpJ0cb
75p5tQkQ6WsiaQ8kKQ==
-----END CERTIFICATE-----