Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/3139322e36372e33352e3132382f32352d3235203d3e20323135383230.roa
File:                     3139322e36372e33352e3132382f32352d3235203d3e20323135383230.roa (raw, json)
Hash identifier:          OfqEvNZIxIDi3RPCfbGxKrUnlY0K4cizaxZ8qpLGXHw=
Subject key identifier:   77:8E:59:B7:80:8B:7B:D7:7B:D1:14:9B:A9:A1:BF:D4:00:65:5A:A7
Certificate issuer:       /CN=A9362D4E85AC589FD5EAF1AFB38B36251868267D
Certificate serial:       586798D8309B7929C53802367E9708D3FDDD9909
Authority key identifier: A9:36:2D:4E:85:AC:58:9F:D5:EA:F1:AF:B3:8B:36:25:18:68:26:7D
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/A9362D4E85AC589FD5EAF1AFB38B36251868267D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/3139322e36372e33352e3132382f32352d3235203d3e20323135383230.roa
Signing time:             Sat 13 Jul 2024 12:37:57 +0000
ROA not before:           Sat 13 Jul 2024 12:32:57 +0000
ROA not after:            Sat 12 Jul 2025 12:37:57 +0000
asID:                     215820
IP address blocks:        192.67.35.128/25 maxlen: 25

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 19:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:67:98:d8:30:9b:79:29:c5:38:02:36:7e:97:08:d3:fd:dd:99:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9362D4E85AC589FD5EAF1AFB38B36251868267D
        Validity
            Not Before: Jul 13 12:32:57 2024 GMT
            Not After : Jul 12 12:37:57 2025 GMT
        Subject: CN=778E59B7808B7BD77BD1149BA9A1BFD400655AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:33:c0:56:b3:90:97:1f:07:78:d8:18:4f:
                    33:eb:be:18:49:4b:76:93:89:5c:ed:ba:75:9b:3b:
                    b6:82:69:b5:79:15:6b:dd:97:1f:3d:01:fd:21:1b:
                    53:77:20:a9:b6:1d:f3:67:49:ad:c7:4a:54:df:8e:
                    d9:48:5f:63:47:75:54:47:12:f9:64:8b:f4:b4:22:
                    fa:47:67:86:a2:a9:37:df:31:c6:22:a5:e4:27:d4:
                    1d:3c:63:9d:23:09:e8:05:46:0b:6b:55:0b:b0:4f:
                    74:eb:f2:e6:9b:b1:cf:be:6e:e0:bc:f1:7c:e6:8c:
                    fb:8d:f6:a1:1e:70:07:60:84:8d:6c:e0:51:5d:e0:
                    97:3e:fa:93:89:7c:b2:35:37:f2:9f:76:f8:24:e9:
                    79:af:b8:3a:dc:7d:f7:b1:35:88:2a:68:3c:db:e9:
                    63:3d:6e:4a:eb:03:84:2f:b1:14:68:6e:4f:78:70:
                    88:d0:a6:77:15:5f:f8:79:e3:e2:52:d1:7f:d6:7b:
                    38:47:f1:35:25:22:56:38:40:11:47:ed:ce:f8:28:
                    1d:f8:6d:aa:bc:ba:55:ee:6b:e4:92:70:65:1e:d7:
                    d9:c5:23:db:0e:78:f0:96:d8:98:0a:c0:c9:88:07:
                    e9:39:3e:d0:b2:0e:c8:c6:d3:62:07:d2:1c:f7:64:
                    a3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8E:59:B7:80:8B:7B:D7:7B:D1:14:9B:A9:A1:BF:D4:00:65:5A:A7
            X509v3 Authority Key Identifier:
                keyid:A9:36:2D:4E:85:AC:58:9F:D5:EA:F1:AF:B3:8B:36:25:18:68:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/A9362D4E85AC589FD5EAF1AFB38B36251868267D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/3139322e36372e33352e3132382f32352d3235203d3e20323135383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.35.128/25

    Signature Algorithm: sha256WithRSAEncryption
         55:db:b4:b5:ec:9e:d0:19:4c:15:fb:32:87:8d:7f:4d:4f:79:
         7f:a8:67:22:94:d1:a9:d8:e7:4a:92:33:57:55:ae:9c:c1:4a:
         90:09:13:1d:dd:c3:76:47:af:bd:1f:57:91:65:0e:5e:87:95:
         28:da:66:4b:74:a9:f3:b3:b2:06:9c:da:71:f7:41:4a:17:9a:
         1a:64:01:63:13:ad:09:b9:c2:91:cb:a6:b0:c8:07:5d:7c:e0:
         8f:a0:39:d6:52:3c:bf:bb:38:fa:07:b9:28:9c:7c:06:af:a1:
         05:70:b3:e6:15:01:fa:fd:73:49:f5:13:9f:97:32:86:9d:37:
         f1:a3:ca:26:1c:66:f0:72:3c:e9:4b:64:6e:38:1f:3b:26:d9:
         19:7d:92:0d:8e:01:36:cc:1e:ee:ec:78:76:1f:8f:fe:eb:59:
         07:65:45:12:24:c2:04:07:76:18:7a:11:19:10:64:21:3c:08:
         4c:62:5e:d2:3a:ae:30:aa:33:fc:0f:14:1a:cd:3e:19:99:31:
         ef:9f:ef:36:b2:e1:af:29:5a:8a:df:a1:5f:48:d3:fe:5a:61:
         da:cb:cd:9d:50:74:0e:fc:eb:27:d7:da:1e:90:a8:9e:a8:7c:
         76:ed:37:51:40:d2:71:52:d2:bc:2b:2d:a9:23:b0:57:dc:a1:
         e6:4b:f0:d2
-----BEGIN CERTIFICATE-----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