Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/326130613a363034343a623030303a3a2f34382d3438203d3e20323135323136.roa
File:                     326130613a363034343a623030303a3a2f34382d3438203d3e20323135323136.roa (raw, json)
Hash identifier:          PGXSoBHsY/xDIA2VzzQkozgEmwIHr7sq68smeTSi1aw=
Subject key identifier:   63:2C:54:E5:57:18:3D:0B:E0:8B:7B:37:AB:7F:D0:FE:B0:67:70:A8
Certificate issuer:       /CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB
Certificate serial:       5384588C9B4205BC3C7C9BBD4EFB8084C80EC605
Authority key identifier: BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/326130613a363034343a623030303a3a2f34382d3438203d3e20323135323136.roa
Signing time:             Tue 21 May 2024 15:03:17 +0000
ROA not before:           Tue 21 May 2024 14:58:17 +0000
ROA not after:            Tue 20 May 2025 15:03:17 +0000
asID:                     215216
IP address blocks:        2a0a:6044:b000::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 28 May 2024 14:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:84:58:8c:9b:42:05:bc:3c:7c:9b:bd:4e:fb:80:84:c8:0e:c6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB
        Validity
            Not Before: May 21 14:58:17 2024 GMT
            Not After : May 20 15:03:17 2025 GMT
        Subject: CN=632C54E557183D0BE08B7B37AB7FD0FEB06770A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:0c:83:b9:5b:9c:60:32:6d:03:ef:80:db:
                    f4:7c:03:78:0a:bb:c6:37:e2:3a:87:f4:b2:a5:ea:
                    44:7e:0f:ae:0f:eb:53:8f:d3:42:da:ae:1c:18:16:
                    e5:78:91:37:80:c0:3a:7c:8a:de:a6:01:f5:ae:25:
                    70:1b:1e:d8:78:0f:fd:23:0f:d8:a6:33:01:93:28:
                    e1:d0:57:7d:8f:98:ff:6e:6f:86:0c:70:e4:72:33:
                    ea:70:c7:d8:b3:13:7f:85:f2:51:f0:db:d9:67:32:
                    6a:f7:b7:c5:0e:fe:50:71:8e:37:ba:df:f3:39:b9:
                    92:de:36:24:c9:69:c7:f7:4a:6d:93:4a:69:29:43:
                    96:6c:20:c4:ff:f0:59:a1:48:50:50:26:dd:6e:2a:
                    e1:db:fd:82:f4:ea:58:dd:75:ac:82:9b:cf:38:2b:
                    bd:3e:13:6c:eb:64:9f:c8:1d:da:93:ae:31:90:57:
                    23:a8:e9:1e:43:23:98:9d:d7:74:ff:27:32:b5:10:
                    c7:e3:a1:d6:d9:61:eb:e9:65:bb:41:a1:12:78:8f:
                    34:47:ce:ab:b0:10:70:2b:b8:cf:04:42:bc:ee:a3:
                    ad:94:f6:bc:5c:d5:01:44:98:71:c2:c2:78:0d:39:
                    ae:6c:f2:d1:88:52:98:66:6b:39:40:97:2a:98:97:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2C:54:E5:57:18:3D:0B:E0:8B:7B:37:AB:7F:D0:FE:B0:67:70:A8
            X509v3 Authority Key Identifier:
                keyid:BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/326130613a363034343a623030303a3a2f34382d3438203d3e20323135323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:90:79:0a:be:c1:4f:0f:5b:42:1b:cf:02:c2:61:5d:e8:58:
         f4:13:0d:8d:b8:06:07:b3:61:ca:d4:30:ed:46:c4:eb:9f:d3:
         33:43:61:0b:1f:86:5f:00:03:8a:43:60:ae:a6:97:80:a9:c6:
         8f:78:58:dd:d4:40:84:b2:50:e5:5f:de:b1:a4:b6:e4:64:2e:
         d8:02:f6:8b:bb:a0:f7:39:4d:94:90:05:61:66:dd:25:72:e2:
         94:e6:52:5a:a3:94:e7:04:4c:a3:7a:2f:26:f0:ab:39:88:9e:
         7d:08:69:e4:3d:dd:ef:63:cf:47:f8:6b:33:0a:10:f1:dd:c3:
         99:f0:fe:8a:d7:c5:91:c0:1d:14:57:b4:08:80:3b:61:ca:a9:
         f8:98:2b:76:e7:c5:32:c3:d6:51:03:d7:bd:6e:41:59:89:c1:
         a9:8b:97:ee:21:6e:ce:4f:32:3a:bc:86:44:a0:3c:11:18:ad:
         48:bb:76:f4:a3:2e:c0:8f:86:77:ae:74:e7:5d:7a:1b:ff:e9:
         94:9a:43:5d:6e:a3:8e:5c:1b:cf:a5:1f:4a:43:cd:74:c7:e2:
         3a:1e:ba:fc:1f:6c:23:4f:d5:3c:e5:c3:ab:86:ce:3d:4c:5d:
         92:4b:89:22:c2:66:ce:e7:a2:e5:5f:08:f5:43:78:83:5f:21:
         68:95:11:02
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUU4RYjJtCBbw8fJu9TvuAhMgOxgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQxQzE5Q0VFQjBDM0Y2Rjg0NzQwNDhBRURDOENEMDJD
NTZGQzZBQjAeFw0yNDA1MjExNDU4MTdaFw0yNTA1MjAxNTAzMTdaMDMxMTAvBgNV
BAMTKDYzMkM1NEU1NTcxODNEMEJFMDhCN0IzN0FCN0ZEMEZFQjA2NzcwQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnAyDuVucYDJtA++A2/R8A3gK
u8Y34jqH9LKl6kR+D64P61OP00LarhwYFuV4kTeAwDp8it6mAfWuJXAbHth4D/0j
D9imMwGTKOHQV32PmP9ub4YMcORyM+pwx9izE3+F8lHw29lnMmr3t8UO/lBxjje6
3/M5uZLeNiTJacf3Sm2TSmkpQ5ZsIMT/8FmhSFBQJt1uKuHb/YL06ljddayCm884
K70+E2zrZJ/IHdqTrjGQVyOo6R5DI5id13T/JzK1EMfjodbZYevpZbtBoRJ4jzRH
zquwEHAruM8EQrzuo62U9rxc1QFEmHHCwngNOa5s8tGIUphmazlAlyqYl189AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUYyxU5VcYPQvgi3s3q3/Q/rBncKgwHwYDVR0j
BBgwFoAUvRwZzusMP2+EdASK7cjNAsVvxqswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjRkYjZlMGUtNjk2Yy00Zjg5LThkNDgtMjc0NTU5NzAw
YWY1LzAvQkQxQzE5Q0VFQjBDM0Y2Rjg0NzQwNDhBRURDOENEMDJDNTZGQzZBQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CRDFDMTlDRUVCMEMzRjZGODQ3NDA0OEFF
REM4Q0QwMkM1NkZDNkFCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yNGRiNmUwZS02OTZjLTRmODktOGQ0OC0yNzQ1NTk3MDBhZjUvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyMzAzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLAAMA0GCSqGSIb3DQEBCwUAA4IBAQBT
kHkKvsFPD1tCG88CwmFd6Fj0Ew2NuAYHs2HK1DDtRsTrn9MzQ2ELH4ZfAAOKQ2Cu
ppeAqcaPeFjd1ECEslDlX96xpLbkZC7YAvaLu6D3OU2UkAVhZt0lcuKU5lJao5Tn
BEyjei8m8Ks5iJ59CGnkPd3vY89H+GszChDx3cOZ8P6K18WRwB0UV7QIgDthyqn4
mCt258Uyw9ZRA9e9bkFZicGpi5fuIW7OTzI6vIZEoDwRGK1Iu3b0oy7Aj4Z3rnTn
XXob/+mUmkNdbqOOXBvPpR9KQ810x+I6Hrr8H2wjT9U85cOrhs49TF2SS4kiwmbO
56LlXwj1Q3iDXyFolREC
-----END CERTIFICATE-----