Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6439303a3a2f34382d3438203d3e203437323732.roa
File:                     323030313a3637633a6439303a3a2f34382d3438203d3e203437323732.roa (raw, json)
Hash identifier:          Z99Bvpm2q8Ed6kEZl0LXgC8ZCLgzUS6u0qZcSvEQLSU=
Subject key identifier:   B8:FB:24:5B:1E:46:B6:07:5A:74:37:EF:B0:C2:56:C6:8A:BF:BF:07
Certificate issuer:       /CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Certificate serial:       33F17366E84A5891EEF857B9BEEF72DA1B23A20E
Authority key identifier: 1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6439303a3a2f34382d3438203d3e203437323732.roa
Signing time:             Wed 10 Jan 2024 12:25:22 +0000
ROA not before:           Wed 10 Jan 2024 12:20:22 +0000
ROA not after:            Wed 08 Jan 2025 12:25:22 +0000
asID:                     47272
IP address blocks:        2001:67c:d90::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 20:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f1:73:66:e8:4a:58:91:ee:f8:57:b9:be:ef:72:da:1b:23:a2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec805e37c5b53351c6a182763530a50d9308c7e
        Validity
            Not Before: Jan 10 12:20:22 2024 GMT
            Not After : Jan  8 12:25:22 2025 GMT
        Subject: CN=B8FB245B1E46B6075A7437EFB0C256C68ABFBF07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:33:e6:c3:3b:3e:ba:c2:f6:62:f4:0b:c6:
                    ac:41:a9:e4:cb:88:d7:fa:30:4a:2c:cc:54:bf:b8:
                    ee:ac:84:90:19:37:da:7c:77:a1:bb:fa:e6:9b:e7:
                    34:80:52:fd:54:d5:c8:c2:37:e5:c5:3c:12:23:b7:
                    ee:75:d0:e0:88:63:b2:8a:80:f1:03:20:6b:74:ab:
                    f1:a8:b3:07:52:98:9b:a0:a6:0a:9a:92:f5:70:37:
                    30:aa:f4:74:5c:d0:77:d2:1b:b7:c7:f1:2d:ef:6b:
                    26:0c:6e:b7:98:46:52:e7:3a:44:69:b5:e0:92:63:
                    97:e9:1a:69:e7:82:19:54:ce:f2:55:69:d2:55:75:
                    23:eb:01:44:f2:41:55:25:b1:23:31:27:c3:c0:88:
                    3f:4e:d0:0e:1e:77:e6:d9:2e:6e:8e:4d:43:12:e8:
                    3b:8f:32:2c:ba:95:20:86:30:2e:88:61:d8:98:cb:
                    3d:7c:f4:b8:a0:5a:87:aa:6e:ad:42:a9:d9:10:08:
                    bc:b7:08:12:c7:56:da:20:0f:a1:03:00:f6:5c:69:
                    e0:4a:e0:a9:cc:68:b2:ae:37:f0:64:a0:78:dd:52:
                    fe:d5:65:d3:9e:87:b2:b6:93:24:88:71:73:a7:b5:
                    cd:c9:7b:ab:2f:97:08:91:ff:c8:8a:a7:5a:dc:8a:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FB:24:5B:1E:46:B6:07:5A:74:37:EF:B0:C2:56:C6:8A:BF:BF:07
            X509v3 Authority Key Identifier:
                keyid:1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6439303a3a2f34382d3438203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:d90::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:80:b6:9d:76:8b:9b:fe:0a:8e:3f:ac:12:94:02:43:3a:2e:
         75:66:29:69:74:96:4e:20:c2:3d:9d:01:d0:c0:e9:17:0f:4c:
         75:a5:49:9b:03:4e:bc:2c:66:50:b7:18:55:f2:65:4b:c8:de:
         93:d6:12:9f:ed:96:01:05:a1:f5:17:5b:bd:74:e2:fc:b2:a7:
         24:3b:d0:7c:ab:af:96:26:f0:4e:e0:a3:90:50:2d:9f:09:0a:
         67:69:3b:46:db:1f:33:e0:70:a4:53:84:40:9a:46:89:26:34:
         b2:93:62:92:7e:17:15:ed:d6:1e:03:b2:5a:f3:41:db:64:f2:
         40:8d:13:60:06:73:85:5a:43:5b:61:7f:6b:d9:29:a6:62:e3:
         3d:85:62:73:1a:ed:07:69:11:ca:12:ac:19:e5:f5:c1:4b:5e:
         60:9a:64:46:40:e0:fd:cf:60:31:71:b4:96:ec:19:09:1b:6e:
         75:ef:f6:51:2a:14:00:3e:30:a6:c5:de:2e:eb:b2:35:db:f8:
         93:2a:94:e2:f2:07:84:67:93:21:f3:81:d2:71:1d:a0:40:93:
         91:55:58:b8:5b:e6:92:42:97:01:a5:31:95:4e:d2:9f:c0:4e:
         8d:f0:b5:92:bb:89:ac:5f:d9:b9:eb:eb:48:fd:d2:f9:4c:f5:
         86:e9:12:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----