Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3631353a3a2f34382d3438203d3e20323136333234.roa
File:                     326130663a383563313a3631353a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          2l5UT1qXYIPvnvZWS3LCl9cfYFI2lvEs3ym6nwtu6zM=
Subject key identifier:   E4:70:E8:21:C9:DD:92:ED:ED:BA:64:88:DF:A1:A4:21:F1:27:6B:1C
Certificate issuer:       /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Certificate serial:       3DE0C97EA3AD0F90EB106A01DCE05B36347708E4
Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3631353a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Tue 30 Apr 2024 07:05:42 +0000
ROA not before:           Tue 30 Apr 2024 07:00:42 +0000
ROA not after:            Tue 29 Apr 2025 07:05:42 +0000
asID:                     216324
IP address blocks:        2a0f:85c1:615::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 14 May 2024 05:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e0:c9:7e:a3:ad:0f:90:eb:10:6a:01:dc:e0:5b:36:34:77:08:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
        Validity
            Not Before: Apr 30 07:00:42 2024 GMT
            Not After : Apr 29 07:05:42 2025 GMT
        Subject: CN=E470E821C9DD92EDEDBA6488DFA1A421F1276B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:2b:df:5b:38:dc:a6:4a:b7:de:7e:bc:82:
                    68:84:ad:bc:b1:a2:8a:c3:02:e3:7c:07:e8:cb:c4:
                    37:d0:7c:ad:81:42:e4:85:35:e9:8d:be:2e:97:c5:
                    db:80:fe:3f:c4:4a:d7:80:61:b3:1d:23:28:c1:d4:
                    f7:e4:8a:74:97:d1:2c:e8:65:fb:b6:3b:1d:82:61:
                    d0:a0:45:37:2d:ba:a5:7f:c5:ec:a6:76:cf:cd:dd:
                    6a:f3:24:18:c6:59:bb:49:ad:2e:91:42:0f:0d:46:
                    0d:c0:19:93:1c:a4:eb:30:69:44:8d:ed:8a:cf:dd:
                    8e:a8:aa:ed:b2:72:33:30:51:aa:e2:80:90:00:cc:
                    73:fa:58:77:20:2a:60:1b:3c:89:b8:b3:71:b0:32:
                    a5:b5:ba:95:bb:7f:31:b0:d7:f8:64:27:3f:96:2e:
                    a9:e5:1d:d2:91:ea:77:51:61:af:d8:d8:2d:b8:a8:
                    c8:39:80:c3:9d:ec:01:b1:61:51:1f:93:3c:e4:0d:
                    78:92:9f:b8:aa:d2:e5:90:be:fe:c3:f0:20:83:a6:
                    13:e3:af:5a:e7:e8:d7:54:14:f4:5a:5c:01:1d:87:
                    8b:1b:e5:9c:4b:29:03:d5:9a:3a:7e:bd:3a:62:d2:
                    c6:4d:32:5e:60:6a:63:99:45:85:4b:e5:ee:83:1b:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:70:E8:21:C9:DD:92:ED:ED:BA:64:88:DF:A1:A4:21:F1:27:6B:1C
            X509v3 Authority Key Identifier:
                keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3631353a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:615::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:53:16:4c:f2:f5:a4:29:11:b4:96:bc:b6:e3:21:5a:c7:46:
         e7:dc:7c:bd:bc:d2:fa:fd:15:34:9c:85:b8:a9:fc:19:f9:55:
         22:e5:72:c3:82:2b:63:ff:d4:8c:55:52:07:f3:5b:b7:e5:e6:
         50:dc:62:05:c6:58:cd:6b:33:a7:d0:bc:ae:c3:43:7a:ca:f0:
         70:24:3b:86:ef:d1:2c:6d:e4:e8:40:81:7f:78:9d:be:5b:8f:
         61:c3:66:68:b1:aa:f3:7c:a2:99:1f:38:8b:00:63:08:88:90:
         94:2e:e4:e7:e2:b1:bb:d8:4c:f3:3d:d0:39:9d:ac:be:65:da:
         13:16:a0:6e:d7:06:d4:b0:e2:5d:52:13:fd:15:f7:8d:9f:7e:
         ba:69:a5:09:d7:a4:fe:cb:be:e8:49:c1:80:25:aa:bc:70:79:
         70:a6:e6:ac:5a:08:c9:cc:57:f2:40:ac:ba:b1:fb:da:e7:05:
         f1:01:53:9c:d3:de:ad:64:65:2b:23:ea:82:c4:44:57:13:f5:
         0f:99:0f:3a:e8:91:ab:d0:a6:c9:e3:d5:42:9b:51:d3:53:c3:
         82:ef:5c:f8:7b:ea:76:37:c4:a9:fa:e1:82:7f:e1:68:52:64:
         9e:7c:1c:ff:a2:bb:b8:b7:07:b4:0d:8f:98:f3:85:a4:94:41:
         81:1d:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----