Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a3a2f33322d3438203d3e203136353039.roa
File:                     326131343a316563313a3a2f33322d3438203d3e203136353039.roa (raw, json)
Hash identifier:          aO7gcTKnYDNPeY/4ZwuH36y61pTb5i3wWWzupRAt/0k=
Subject key identifier:   4C:88:E9:DC:03:E2:64:43:BA:66:8F:27:A3:70:8A:0A:DE:D3:7B:38
Certificate issuer:       /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial:       30E3B6BDF1F540657383933FC308382E1F8A1B2E
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a3a2f33322d3438203d3e203136353039.roa
Signing time:             Sat 19 Oct 2024 08:12:42 +0000
ROA not before:           Sat 19 Oct 2024 08:07:42 +0000
ROA not after:            Sat 18 Oct 2025 08:12:42 +0000
asID:                     16509
IP address blocks:        2a14:1ec1::/32 maxlen: 48

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 18:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e3:b6:bd:f1:f5:40:65:73:83:93:3f:c3:08:38:2e:1f:8a:1b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
        Validity
            Not Before: Oct 19 08:07:42 2024 GMT
            Not After : Oct 18 08:12:42 2025 GMT
        Subject: CN=4C88E9DC03E26443BA668F27A3708A0ADED37B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1e:e7:5d:4e:20:30:88:a9:b2:4a:6a:40:bb:
                    b1:e5:cf:aa:28:ed:bd:38:f2:45:a1:6a:cf:40:56:
                    e5:4c:f7:25:09:e5:5b:b2:bf:50:b0:e7:56:12:84:
                    eb:b2:eb:32:7f:67:2f:db:d6:9c:a2:dc:6d:d8:b2:
                    1d:3b:b1:76:55:f6:26:97:ce:14:33:85:ed:d8:b4:
                    66:28:1d:de:25:59:f9:14:59:c4:40:68:54:f4:73:
                    0c:ee:3b:54:33:45:e7:d9:bf:c2:0b:2a:f4:aa:22:
                    de:9f:b5:64:12:cc:b0:32:47:d5:0f:e2:bf:ea:67:
                    d4:28:21:2f:a1:e0:0d:96:95:39:5f:ae:8c:dd:bc:
                    50:a3:3f:88:6d:9d:19:cd:b4:50:87:fc:d0:61:dc:
                    aa:7b:87:0c:af:bb:46:51:16:72:53:93:03:8f:20:
                    9e:d4:3d:14:87:57:1f:c1:b0:23:d5:e0:5a:e5:53:
                    92:b8:60:1f:56:4a:96:71:e6:3d:9a:e6:05:4c:27:
                    95:59:bd:3c:97:0e:d8:85:ad:1b:51:21:0e:7d:ed:
                    75:7e:08:9f:ec:55:74:aa:f5:90:22:4b:ec:42:39:
                    76:cb:16:9d:0b:d0:0a:2e:29:9f:c3:b8:9c:43:b0:
                    fe:10:22:5c:43:9f:96:40:d5:89:e2:27:d7:cb:9b:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:88:E9:DC:03:E2:64:43:BA:66:8F:27:A3:70:8A:0A:DE:D3:7B:38
            X509v3 Authority Key Identifier:
                keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a3a2f33322d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:1ec1::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:50:95:ea:35:dc:b0:30:35:8c:83:1b:aa:e0:9e:42:48:9f:
         56:ee:64:71:74:c9:d7:e0:59:87:77:5a:55:0b:24:37:53:d9:
         cf:24:ec:1e:86:7b:f1:db:81:f2:31:ba:d2:8b:61:50:5f:e4:
         58:15:01:21:4f:ff:3d:01:08:94:8e:32:ca:84:ca:85:29:da:
         1a:da:72:f8:5f:e7:10:18:8b:f1:27:40:ea:da:a2:fa:6f:c2:
         10:c3:7b:6d:6d:f0:a0:e8:46:eb:79:3e:4a:d3:a7:e3:d8:05:
         27:c5:41:c1:d1:4b:ed:a6:72:59:e1:83:63:2d:84:9b:34:93:
         27:f7:5d:9e:90:a8:8c:f0:4b:f4:80:31:78:9a:f5:d8:1a:d7:
         a0:67:7e:ce:c1:65:a8:89:0f:56:53:83:f9:71:e9:d8:22:b7:
         85:bb:4b:35:90:87:0d:a0:0c:5f:b9:19:22:25:87:c6:32:ea:
         e5:25:14:19:77:cf:f9:1f:88:87:48:6d:c0:5a:26:f2:ce:56:
         d5:54:94:59:48:71:a6:88:7b:c7:43:9e:8d:ee:2c:6c:d9:23:
         76:05:19:cf:a1:72:63:cf:93:89:9d:a4:e9:ec:59:3c:d5:a9:
         04:85:5a:f2:36:46:cb:1a:ce:a1:3f:88:03:ac:16:4f:ff:32:
         e6:ba:6b:b3
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUMOO2vfH1QGVzg5M/wwg4Lh+KGy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG
NEFCREVDNjAeFw0yNDEwMTkwODA3NDJaFw0yNTEwMTgwODEyNDJaMDMxMTAvBgNV
BAMTKDRDODhFOURDMDNFMjY0NDNCQTY2OEYyN0EzNzA4QTBBREVEMzdCMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHHuddTiAwiKmySmpAu7Hlz6oo
7b048kWhas9AVuVM9yUJ5Vuyv1Cw51YShOuy6zJ/Zy/b1pyi3G3Ysh07sXZV9iaX
zhQzhe3YtGYoHd4lWfkUWcRAaFT0cwzuO1QzRefZv8ILKvSqIt6ftWQSzLAyR9UP
4r/qZ9QoIS+h4A2WlTlfrozdvFCjP4htnRnNtFCH/NBh3Kp7hwyvu0ZRFnJTkwOP
IJ7UPRSHVx/BsCPV4FrlU5K4YB9WSpZx5j2a5gVMJ5VZvTyXDtiFrRtRIQ597XV+
CJ/sVXSq9ZAiS+xCOXbLFp0L0AouKZ/DuJxDsP4QIlxDn5ZA1YniJ9fLmyOpAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUTIjp3APiZEO6Zo8no3CKCt7TezgwHwYDVR0j
BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm
NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj
N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD
QkIzOTg3NkY0QUJERUM2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUF
BzALhoGLcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8yYWY3M2E5Yy0yMDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMC8zMjYxMzEz
NDNhMzE2NTYzMzEzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMTM2MzUzMDM5LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAKhQewTANBgkqhkiG9w0BAQsFAAOCAQEAflCV6jXcsDA1jIMbquCe
QkifVu5kcXTJ1+BZh3daVQskN1PZzyTsHoZ78duB8jG60othUF/kWBUBIU//PQEI
lI4yyoTKhSnaGtpy+F/nEBiL8SdA6tqi+m/CEMN7bW3woOhG63k+StOn49gFJ8VB
wdFL7aZyWeGDYy2EmzSTJ/ddnpCojPBL9IAxeJr12BrXoGd+zsFlqIkPVlOD+XHp
2CK3hbtLNZCHDaAMX7kZIiWHxjLq5SUUGXfP+R+Ih0htwFom8s5W1VSUWUhxpoh7
x0Oeje4sbNkjdgUZz6FyY8+TiZ2k6exZPNWpBIVa8jZGyxrOoT+IA6wWT/8y5rpr
sw==
-----END CERTIFICATE-----