Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/326130613a363034343a623030303a3a2f34302d3430203d3e20323135323136.roa
File:                     326130613a363034343a623030303a3a2f34302d3430203d3e20323135323136.roa (raw, json)
Hash identifier:          8Q2rhuW7DPFR9Wff0N6elDyWEzGR4fV2OPAFIBrd7sk=
Subject key identifier:   AE:CB:A0:BF:64:A6:FC:53:C5:34:E1:32:13:E5:34:F1:E9:88:F7:A8
Certificate issuer:       /CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB
Certificate serial:       387196DC622A7945EC653812DF3DCC19E39F106F
Authority key identifier: BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/326130613a363034343a623030303a3a2f34302d3430203d3e20323135323136.roa
Signing time:             Tue 28 May 2024 10:39:10 +0000
ROA not before:           Tue 28 May 2024 10:34:10 +0000
ROA not after:            Tue 27 May 2025 10:39:10 +0000
asID:                     215216
IP address blocks:        2a0a:6044:b000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 09:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:71:96:dc:62:2a:79:45:ec:65:38:12:df:3d:cc:19:e3:9f:10:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB
        Validity
            Not Before: May 28 10:34:10 2024 GMT
            Not After : May 27 10:39:10 2025 GMT
        Subject: CN=AECBA0BF64A6FC53C534E13213E534F1E988F7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5e:52:30:cd:8b:43:9c:8b:57:80:7c:3c:13:
                    69:78:cf:f3:30:23:94:ea:35:f9:80:ae:18:42:32:
                    ae:c0:84:27:05:3a:2a:9a:b5:52:d5:5a:ff:1d:46:
                    fa:db:bc:17:07:92:f1:98:58:b6:ac:c1:89:e7:31:
                    5e:2c:f9:b9:f0:fe:c8:dc:4e:af:2c:93:7d:40:59:
                    47:6c:bf:f0:19:a6:d4:c5:d2:59:78:f9:68:a9:9a:
                    44:72:50:9e:e7:79:d2:9d:a7:ea:fa:d0:73:c2:48:
                    ff:1e:40:e0:5d:14:f5:0f:22:91:fe:5b:e3:27:d9:
                    d3:8e:8b:28:27:99:ce:ea:64:3f:a2:6d:c4:3d:c2:
                    df:6b:ee:70:7e:28:bb:d3:49:52:51:69:26:d9:e8:
                    49:8b:cd:b0:f2:d8:14:f9:7e:20:a1:1b:81:35:e8:
                    41:fe:37:43:0d:51:73:5d:70:2d:a6:4e:48:85:25:
                    ce:67:e3:d7:d4:d3:08:e3:43:d9:01:62:62:38:a8:
                    82:48:4d:45:70:49:58:f4:38:58:7e:f4:44:e4:a2:
                    a2:fb:b3:cc:e5:9b:10:6e:bb:eb:4b:c8:b3:33:9e:
                    20:04:cd:48:9f:3b:73:b3:03:7b:50:7d:bd:9a:2b:
                    9a:54:77:6e:bc:e4:f7:cc:37:85:a6:af:0b:e4:ad:
                    bf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CB:A0:BF:64:A6:FC:53:C5:34:E1:32:13:E5:34:F1:E9:88:F7:A8
            X509v3 Authority Key Identifier:
                keyid:BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/326130613a363034343a623030303a3a2f34302d3430203d3e20323135323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:38:32:5d:d3:e8:fa:dd:7f:c9:1e:f1:c9:bc:c4:f1:34:
         71:9f:14:f4:37:ab:0e:ba:b7:d0:f9:05:f4:ef:75:c5:41:2c:
         b2:a9:0a:68:7c:f6:2b:df:b2:d4:c9:cd:89:29:27:0f:4b:b7:
         00:56:c7:28:5e:62:bc:24:a0:f5:f6:49:c8:e8:81:e8:1e:c0:
         4d:fa:33:8f:0e:33:06:3e:85:2f:4b:86:35:a0:8d:0a:6c:3e:
         0d:17:16:60:0a:9b:db:59:d7:0b:fc:02:52:56:cf:2a:d1:2c:
         3d:ef:80:57:81:c2:50:23:bb:8d:ba:b5:52:d2:92:8a:8a:9d:
         df:aa:30:d7:7c:56:6e:be:69:33:65:6b:03:9a:36:5c:48:40:
         b4:f8:71:cf:1a:55:c5:4f:dd:e6:24:b8:78:d8:ae:bb:f6:88:
         67:80:25:df:57:97:ec:f7:e8:37:36:d6:cc:2c:c3:80:79:d0:
         3d:c9:4f:84:00:c2:e5:54:05:02:47:0a:99:62:44:9a:98:a6:
         09:8a:b4:ee:f0:11:2c:39:30:e0:2b:c9:25:9f:b9:54:c6:3b:
         39:c8:0a:17:f1:b7:63:aa:4b:6f:48:e8:4d:5d:ef:d0:d1:8c:
         05:30:a1:98:cf:79:ad:9e:39:b1:84:14:41:fc:19:2c:b4:f7:
         88:5d:15:be
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUOHGW3GIqeUXsZTgS3z3MGeOfEG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQxQzE5Q0VFQjBDM0Y2Rjg0NzQwNDhBRURDOENEMDJD
NTZGQzZBQjAeFw0yNDA1MjgxMDM0MTBaFw0yNTA1MjcxMDM5MTBaMDMxMTAvBgNV
BAMTKEFFQ0JBMEJGNjRBNkZDNTNDNTM0RTEzMjEzRTUzNEYxRTk4OEY3QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZXlIwzYtDnItXgHw8E2l4z/Mw
I5TqNfmArhhCMq7AhCcFOiqatVLVWv8dRvrbvBcHkvGYWLaswYnnMV4s+bnw/sjc
Tq8sk31AWUdsv/AZptTF0ll4+WipmkRyUJ7nedKdp+r60HPCSP8eQOBdFPUPIpH+
W+Mn2dOOiygnmc7qZD+ibcQ9wt9r7nB+KLvTSVJRaSbZ6EmLzbDy2BT5fiChG4E1
6EH+N0MNUXNdcC2mTkiFJc5n49fU0wjjQ9kBYmI4qIJITUVwSVj0OFh+9ETkoqL7
s8zlmxBuu+tLyLMzniAEzUifO3OzA3tQfb2aK5pUd2685PfMN4Wmrwvkrb8xAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUrsugv2Sm/FPFNOEyE+U08emI96gwHwYDVR0j
BBgwFoAUvRwZzusMP2+EdASK7cjNAsVvxqswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjRkYjZlMGUtNjk2Yy00Zjg5LThkNDgtMjc0NTU5NzAw
YWY1LzAvQkQxQzE5Q0VFQjBDM0Y2Rjg0NzQwNDhBRURDOENEMDJDNTZGQzZBQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CRDFDMTlDRUVCMEMzRjZGODQ3NDA0OEFF
REM4Q0QwMkM1NkZDNkFCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yNGRiNmUwZS02OTZjLTRmODktOGQ0OC0yNzQ1NTk3MDBhZjUvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyMzAzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz
MTM1MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRLAwDQYJKoZIhvcNAQELBQADggEBAE8U
ODJd0+j63X/JHvHJvMTxNHGfFPQ3qw66t9D5BfTvdcVBLLKpCmh89ivfstTJzYkp
Jw9LtwBWxyheYrwkoPX2ScjogegewE36M48OMwY+hS9LhjWgjQpsPg0XFmAKm9tZ
1wv8AlJWzyrRLD3vgFeBwlAju426tVLSkoqKnd+qMNd8Vm6+aTNlawOaNlxIQLT4
cc8aVcVP3eYkuHjYrrv2iGeAJd9Xl+z36Dc21swsw4B50D3JT4QAwuVUBQJHCpli
RJqYpgmKtO7wESw5MOArySWfuVTGOznIChfxt2OqS29I6E1d79DRjAUwoZjPea2e
ObGEFEH8GSy094hdFb4=
-----END CERTIFICATE-----