Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3631363a3a2f34382d3438203d3e20323136333234.roa
File:                     326130663a383563313a3631363a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          IfwyXjs1yTcjykvJ+XxDO5IJiTVMcXqiRxw3CDy1iH0=
Subject key identifier:   C5:DB:85:91:FB:A1:57:23:71:08:5C:06:00:02:E6:DB:92:9C:A8:38
Certificate issuer:       /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Certificate serial:       26ED5969F12C5FC373F849619C6EDFB94B3732D0
Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3631363a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Tue 30 Apr 2024 07:05:59 +0000
ROA not before:           Tue 30 Apr 2024 07:00:59 +0000
ROA not after:            Tue 29 Apr 2025 07:05:59 +0000
asID:                     216324
IP address blocks:        2a0f:85c1:616::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 14 May 2024 05:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ed:59:69:f1:2c:5f:c3:73:f8:49:61:9c:6e:df:b9:4b:37:32:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
        Validity
            Not Before: Apr 30 07:00:59 2024 GMT
            Not After : Apr 29 07:05:59 2025 GMT
        Subject: CN=C5DB8591FBA1572371085C060002E6DB929CA838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a5:5f:fd:f2:1f:87:05:c4:9d:a6:e6:5c:5e:
                    d8:69:49:74:29:f7:1f:5e:eb:b3:3b:44:e3:74:fb:
                    30:ed:a2:6e:a9:8f:5f:42:b0:2c:d5:ea:c9:c6:d4:
                    69:a5:eb:51:2b:d9:7d:57:64:eb:92:3d:77:f9:d8:
                    25:54:88:81:ce:fe:01:b0:23:c2:28:ed:8f:14:93:
                    aa:36:ed:1a:03:c1:37:4b:f1:d8:eb:10:45:6e:c9:
                    81:94:17:03:7d:3b:24:22:2a:8c:70:ac:65:75:8a:
                    3e:3c:7d:77:0b:6d:77:b7:56:34:ac:3f:f7:e4:e3:
                    1d:26:26:a6:ce:a2:94:e2:89:c2:a3:e2:79:ba:04:
                    fe:09:5f:98:c3:93:50:3a:4f:3a:93:a2:75:ad:39:
                    4b:69:a6:d4:ad:79:b4:70:a0:33:3e:de:ff:75:5c:
                    02:bb:ec:9f:9e:7e:2f:35:d0:a0:3e:29:9a:3d:19:
                    67:53:3f:41:52:27:90:af:66:93:4e:67:de:f2:0b:
                    ee:1b:0b:96:3b:53:2b:24:bd:fd:15:1d:c4:85:50:
                    79:82:4f:bb:1b:52:c2:d9:8b:2e:aa:59:aa:fb:98:
                    50:2e:ab:de:91:04:50:38:8d:4f:57:43:09:60:fc:
                    42:b4:34:43:6f:5a:4e:47:9b:cd:0b:ff:e4:15:d9:
                    5e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DB:85:91:FB:A1:57:23:71:08:5C:06:00:02:E6:DB:92:9C:A8:38
            X509v3 Authority Key Identifier:
                keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3631363a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:616::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:fd:91:b8:94:f7:00:09:f4:70:b4:79:68:3e:53:2e:35:c3:
         49:ec:67:59:af:3e:9e:17:5c:29:9b:c3:63:d7:71:69:e6:47:
         7f:30:fc:47:fd:8b:fe:8e:99:7b:c9:5b:d8:e2:86:04:d8:c7:
         04:f1:6a:88:27:81:83:ff:8e:4e:d2:33:34:c1:1f:b2:47:3c:
         d4:c3:6e:c8:c3:de:3c:2a:21:24:e9:18:e2:af:0f:e5:11:27:
         06:7f:f4:8e:7e:01:17:ad:78:f5:48:5f:39:ed:f5:f8:d0:43:
         41:de:db:36:f3:0f:27:da:ac:c5:20:05:8a:b4:f6:05:b3:58:
         bb:8b:a7:c5:db:ca:8d:2a:29:17:0d:9e:1c:14:d5:0e:9d:4f:
         d4:a3:19:f3:6a:3a:e6:7e:ce:78:a4:fe:81:33:7b:c2:14:82:
         f3:3f:34:16:7f:c2:63:45:aa:48:1e:79:70:7d:43:76:b9:c6:
         cc:9e:db:3c:be:ac:92:f8:7f:63:cc:01:c0:72:8d:74:1a:5d:
         ef:4f:71:7e:d2:d2:60:43:d4:8c:46:33:67:8b:75:95:00:8c:
         39:b3:4c:c8:4e:ff:7c:ad:2e:1a:37:0f:9e:28:5c:cf:e8:40:
         b7:a4:ef:bf:72:37:10:f7:5f:52:e8:1f:8d:e0:37:0f:80:ea:
         e9:5f:25:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----