Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/326130613a363034343a623066663a3a2f34382d3438203d3e20323135323136.roa
File:                     326130613a363034343a623066663a3a2f34382d3438203d3e20323135323136.roa (raw, json)
Hash identifier:          MFxG0ed2fZKxmXO+gzfhtnnZQZnMUwq9iiJ00oPRXgo=
Subject key identifier:   2A:47:26:6E:F2:C8:6C:8E:38:4D:DA:A8:48:9D:35:6E:5C:0D:2E:D9
Certificate issuer:       /CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB
Certificate serial:       686892440D38445DB984190D3DAC894F1215D75F
Authority key identifier: BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/326130613a363034343a623066663a3a2f34382d3438203d3e20323135323136.roa
Signing time:             Mon 20 May 2024 08:58:27 +0000
ROA not before:           Mon 20 May 2024 08:53:27 +0000
ROA not after:            Mon 19 May 2025 08:58:27 +0000
asID:                     215216
IP address blocks:        2a0a:6044:b0ff::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 28 May 2024 23:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:68:92:44:0d:38:44:5d:b9:84:19:0d:3d:ac:89:4f:12:15:d7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB
        Validity
            Not Before: May 20 08:53:27 2024 GMT
            Not After : May 19 08:58:27 2025 GMT
        Subject: CN=2A47266EF2C86C8E384DDAA8489D356E5C0D2ED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:4f:52:6e:c4:1a:c1:60:1c:22:92:d0:d8:
                    c2:31:fb:37:c8:a4:d2:bd:07:f9:82:fb:5a:75:c9:
                    ec:bb:e7:e5:f3:9b:e9:20:3e:14:b8:4b:40:7f:7c:
                    39:4e:5f:e7:ae:58:7a:4a:48:46:ce:c7:95:62:57:
                    b5:06:96:a1:ad:ed:e1:5a:42:f8:0f:e7:a8:63:27:
                    9a:f4:7c:fe:de:bc:aa:c1:00:10:5c:27:28:d7:78:
                    43:7d:41:b2:3a:bd:d8:98:b0:82:37:1f:ab:da:3d:
                    92:54:e1:3b:d2:92:e9:72:f1:82:61:26:25:e8:e6:
                    1b:6d:89:04:7c:33:fa:4d:cb:1c:20:06:f2:72:ff:
                    62:6b:06:29:ca:e4:44:b8:14:04:89:0f:8a:9a:fb:
                    d7:05:c4:77:08:28:c4:6f:39:c2:3c:e4:6e:f7:c8:
                    6f:a3:77:e5:6a:50:a7:f8:e8:14:0e:b7:eb:c2:20:
                    9a:55:78:95:94:6b:e8:b4:7b:e5:1b:0a:c3:a6:08:
                    63:1e:24:4f:35:ee:1a:b4:63:48:6c:68:77:4c:72:
                    cf:aa:c0:9c:e6:e6:10:5e:d5:28:9c:fd:6f:58:ce:
                    70:60:c8:d7:37:89:05:e3:27:c6:a3:f6:5d:48:b2:
                    d7:d8:72:7b:a6:c0:ab:0e:3d:94:26:91:44:8b:3e:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:47:26:6E:F2:C8:6C:8E:38:4D:DA:A8:48:9D:35:6E:5C:0D:2E:D9
            X509v3 Authority Key Identifier:
                keyid:BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/326130613a363034343a623066663a3a2f34382d3438203d3e20323135323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b0ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:d8:28:50:75:e0:85:30:e5:31:7d:be:ae:67:71:08:47:0d:
         91:72:94:48:d5:9f:f9:1b:69:20:01:3d:89:d2:cc:a6:88:1c:
         5d:0e:ad:c0:1b:ce:7c:07:a8:56:2f:93:d9:45:60:7c:10:67:
         6b:c5:55:68:bf:92:60:57:df:9e:c6:71:f4:c3:0d:34:74:1f:
         e1:27:17:99:9d:ea:2e:36:a0:cc:37:fd:82:d2:2d:74:53:d8:
         28:d2:c0:5d:25:a5:54:da:8f:3c:72:d5:c1:b8:5c:4e:d5:34:
         91:12:8e:ac:95:5f:92:73:81:5c:dc:65:68:5e:84:12:9c:1c:
         f2:f3:69:e0:d8:57:78:24:ff:9d:7c:0e:81:84:4e:a2:2e:95:
         cd:b0:e5:ac:b6:4a:85:fd:91:66:21:b9:05:dd:f5:06:41:2d:
         62:90:04:2b:35:86:6b:75:1e:b3:0f:bb:94:2a:99:08:37:b1:
         10:39:ae:36:94:ba:66:a0:e2:7d:bc:07:4d:c1:9f:73:76:3e:
         aa:06:71:db:f6:b1:a8:f1:b2:a8:1b:c3:3f:ee:23:f2:a5:f0:
         c1:ab:6a:5a:0e:27:5d:a2:d0:bc:54:02:32:f9:61:29:d2:bd:
         22:84:7c:c4:a3:a0:5a:4c:8f:d1:bc:6c:71:fc:c8:c6:a7:c1:
         13:58:07:28
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUaGiSRA04RF25hBkNPayJTxIV118wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQxQzE5Q0VFQjBDM0Y2Rjg0NzQwNDhBRURDOENEMDJD
NTZGQzZBQjAeFw0yNDA1MjAwODUzMjdaFw0yNTA1MTkwODU4MjdaMDMxMTAvBgNV
BAMTKDJBNDcyNjZFRjJDODZDOEUzODREREFBODQ4OUQzNTZFNUMwRDJFRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZ09SbsQawWAcIpLQ2MIx+zfI
pNK9B/mC+1p1yey75+Xzm+kgPhS4S0B/fDlOX+euWHpKSEbOx5ViV7UGlqGt7eFa
QvgP56hjJ5r0fP7evKrBABBcJyjXeEN9QbI6vdiYsII3H6vaPZJU4TvSkuly8YJh
JiXo5httiQR8M/pNyxwgBvJy/2JrBinK5ES4FASJD4qa+9cFxHcIKMRvOcI85G73
yG+jd+VqUKf46BQOt+vCIJpVeJWUa+i0e+UbCsOmCGMeJE817hq0Y0hsaHdMcs+q
wJzm5hBe1Sic/W9YznBgyNc3iQXjJ8aj9l1IstfYcnumwKsOPZQmkUSLPrcnAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUKkcmbvLIbI44TdqoSJ01blwNLtkwHwYDVR0j
BBgwFoAUvRwZzusMP2+EdASK7cjNAsVvxqswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjRkYjZlMGUtNjk2Yy00Zjg5LThkNDgtMjc0NTU5NzAw
YWY1LzAvQkQxQzE5Q0VFQjBDM0Y2Rjg0NzQwNDhBRURDOENEMDJDNTZGQzZBQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CRDFDMTlDRUVCMEMzRjZGODQ3NDA0OEFF
REM4Q0QwMkM1NkZDNkFCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yNGRiNmUwZS02OTZjLTRmODktOGQ0OC0yNzQ1NTk3MDBhZjUvMC8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYyMzA2NjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLD/MA0GCSqGSIb3DQEBCwUAA4IBAQA2
2ChQdeCFMOUxfb6uZ3EIRw2RcpRI1Z/5G2kgAT2J0symiBxdDq3AG858B6hWL5PZ
RWB8EGdrxVVov5JgV9+exnH0ww00dB/hJxeZneouNqDMN/2C0i10U9go0sBdJaVU
2o88ctXBuFxO1TSREo6slV+Sc4Fc3GVoXoQSnBzy82ng2Fd4JP+dfA6BhE6iLpXN
sOWstkqF/ZFmIbkF3fUGQS1ikAQrNYZrdR6zD7uUKpkIN7EQOa42lLpmoOJ9vAdN
wZ9zdj6qBnHb9rGo8bKoG8M/7iPypfDBq2paDiddotC8VAIy+WEp0r0ihHzEo6Ba
TI/RvGxx/MjGp8ETWAco
-----END CERTIFICATE-----