Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343836303a3a2f34342d3438203d3e20313530323439.roa
File:                     326131343a373538313a343836303a3a2f34342d3438203d3e20313530323439.roa (raw, json)
Hash identifier:          ushC9TyJ1beG2fd4QLDRC0MbPYQE3/4dvZeKK9nO/Uw=
Subject key identifier:   A4:80:17:33:87:6B:24:B4:7A:4F:C7:B6:5B:94:23:B7:40:6D:7D:70
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       413E32D7B6157199A6AEE9BE3B8309727659F9F4
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343836303a3a2f34342d3438203d3e20313530323439.roa
Signing time:             Mon 15 Apr 2024 09:22:15 +0000
ROA not before:           Mon 15 Apr 2024 09:17:15 +0000
ROA not after:            Mon 14 Apr 2025 09:22:15 +0000
asID:                     150249
IP address blocks:        2a14:7581:4860::/44 maxlen: 48

Validation:               Failed, certificate revoked on Tue 28 May 2024 11:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3e:32:d7:b6:15:71:99:a6:ae:e9:be:3b:83:09:72:76:59:f9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Apr 15 09:17:15 2024 GMT
            Not After : Apr 14 09:22:15 2025 GMT
        Subject: CN=A4801733876B24B47A4FC7B65B9423B7406D7D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:67:85:53:f3:a8:1c:1e:28:66:c6:33:3f:
                    5d:cb:da:20:b3:71:36:1e:2c:8c:12:4d:69:73:c9:
                    b3:1e:4c:1e:84:34:ba:50:cb:01:14:1b:1a:07:74:
                    bf:f2:67:d4:61:1b:9c:71:21:00:ef:90:89:86:b7:
                    7b:98:51:8b:22:6b:3e:00:1a:ab:67:95:4a:00:0e:
                    45:ae:4b:3e:27:a6:e9:c5:bb:1b:6c:4a:a7:f4:2f:
                    bc:cb:09:34:9c:75:7c:0e:3d:e8:2c:b7:43:8b:1f:
                    f6:7f:6e:be:24:f0:6e:d2:68:1e:d4:a0:02:97:64:
                    cd:79:23:3c:b1:7a:15:fc:fb:d4:41:8f:a9:23:79:
                    69:47:88:97:ef:25:fe:ac:50:5e:54:54:47:d2:52:
                    f3:bb:cd:21:1b:ef:9f:1b:8d:e6:86:ab:59:e6:ef:
                    d0:70:4b:1e:a2:59:67:5a:23:73:e4:c1:b6:7b:1e:
                    45:30:57:ea:48:2b:14:4c:07:dd:98:98:f7:ef:47:
                    c5:3a:7a:f0:c7:ac:30:ea:26:3d:66:9f:ca:3d:e5:
                    99:27:1f:66:8d:91:05:70:17:0f:b1:45:ab:1a:3e:
                    c9:1b:32:5a:86:fc:3f:43:5d:de:b2:53:c8:39:73:
                    28:f8:94:2a:74:73:61:cd:9b:f3:c7:cf:c5:22:6b:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:80:17:33:87:6B:24:B4:7A:4F:C7:B6:5B:94:23:B7:40:6D:7D:70
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343836303a3a2f34342d3438203d3e20313530323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:4860::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:31:56:9b:cb:79:fb:8b:d2:37:90:6d:0e:61:7d:33:ae:19:
         76:4e:c0:a4:ba:2b:ef:e7:a9:16:c0:78:a2:01:18:8d:45:f0:
         9f:76:be:db:65:ff:66:49:0a:32:08:f4:e3:1c:cc:12:75:8e:
         74:a3:d7:65:98:60:03:a5:34:e2:ee:20:43:11:8e:c5:a8:9b:
         3f:30:5a:00:52:64:14:3c:84:d5:79:41:39:4f:04:78:fc:2f:
         cb:af:3b:5e:67:c2:27:5d:63:94:cd:1c:cf:e4:f4:7e:83:8b:
         ed:58:a2:17:12:3d:50:f9:52:9a:21:7c:c6:89:c1:8d:5c:0d:
         98:61:83:5c:95:45:44:2a:f5:17:1f:60:9c:7a:20:f6:ff:c1:
         ed:ca:88:8a:c3:40:41:3a:bb:a3:a2:aa:7e:19:17:b0:06:c2:
         77:07:b7:19:9f:d0:59:be:d7:c7:74:63:24:78:16:58:a9:4f:
         fc:19:0e:9a:d8:4f:95:77:f5:9d:b2:05:d4:34:8f:aa:a1:bd:
         88:99:76:3c:b5:19:c5:bc:9b:4a:b3:90:74:52:ea:c3:64:e7:
         11:39:a1:95:82:92:62:bf:44:a5:0a:e9:7f:88:e2:13:63:ae:
         cf:29:9d:d2:8d:ce:e7:02:51:ff:a8:7e:c7:50:27:ab:75:a6:
         97:eb:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----