Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383130303a3a2f34302d3430203d3e203530333835.roa
File:                     326131343a373538313a383130303a3a2f34302d3430203d3e203530333835.roa (raw, json)
Hash identifier:          ug47uw5c0HFzAwllx5BxylBvN2L21eooN1i4DrUvrCc=
Subject key identifier:   A5:95:D5:6E:63:21:9E:E0:B7:87:BE:A1:4F:CF:70:57:80:70:B1:26
Certificate issuer:       /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial:       0F588AB63FD6D46ECEB56FC67749865E84F4911A
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383130303a3a2f34302d3430203d3e203530333835.roa
Signing time:             Fri 17 May 2024 16:07:23 +0000
ROA not before:           Fri 17 May 2024 16:02:23 +0000
ROA not after:            Fri 16 May 2025 16:07:23 +0000
asID:                     50385
IP address blocks:        2a14:7581:8100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 18 May 2024 12:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:58:8a:b6:3f:d6:d4:6e:ce:b5:6f:c6:77:49:86:5e:84:f4:91:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
        Validity
            Not Before: May 17 16:02:23 2024 GMT
            Not After : May 16 16:07:23 2025 GMT
        Subject: CN=A595D56E63219EE0B787BEA14FCF70578070B126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:fc:c9:83:f9:d8:85:50:cd:a1:bb:c5:ed:
                    2d:92:37:42:be:0c:71:5f:77:fc:0d:dc:5b:26:a3:
                    e9:aa:eb:8c:88:2e:ab:0d:d6:f9:7f:af:0d:15:0f:
                    3e:d9:ad:91:fa:22:a9:6c:03:ef:a4:8d:55:49:90:
                    c4:c2:be:d9:2c:aa:05:5b:e8:ff:95:80:29:b4:f8:
                    f0:9a:8f:d4:ae:5b:b3:2e:30:b7:c5:21:75:54:0d:
                    cc:f7:f2:d8:30:41:67:b0:00:c9:43:7a:1e:b0:aa:
                    8e:3e:44:8c:83:48:bb:91:0f:26:5e:07:a8:1c:a5:
                    27:76:d0:68:7d:5c:ec:0e:ff:54:01:c1:6f:37:fb:
                    02:05:88:39:2c:ef:68:c3:ae:a8:4d:3d:70:a2:99:
                    25:0a:b8:80:8f:ef:f6:b0:42:90:5c:76:ea:b4:c1:
                    01:66:42:59:a8:40:6b:e7:6f:6e:a3:3b:b2:b4:b3:
                    b3:f0:0d:61:4b:e5:9d:56:fe:24:c9:62:fd:c2:bd:
                    2e:59:83:b5:d9:a3:c9:28:50:10:d0:f8:34:6b:1c:
                    59:88:4a:fd:0b:fb:1f:38:fa:d6:ba:4d:23:a2:04:
                    cf:48:6a:a5:0d:e6:db:c9:f3:4b:8f:b5:3f:28:11:
                    6b:9f:3e:6e:f1:3a:e9:6c:3a:e2:5b:cf:10:62:e8:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:95:D5:6E:63:21:9E:E0:B7:87:BE:A1:4F:CF:70:57:80:70:B1:26
            X509v3 Authority Key Identifier:
                keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383130303a3a2f34302d3430203d3e203530333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         ec:a6:88:98:fa:c7:c7:10:a2:9e:2e:e2:5e:5f:c5:0c:97:dd:
         7d:63:d8:42:e6:8b:11:44:cd:47:48:9a:e6:bb:63:c0:98:a3:
         30:fc:56:f2:85:0f:2a:84:2a:ab:db:97:45:66:3b:e4:23:fd:
         9d:fe:c2:b9:36:2f:36:ae:87:ce:e7:02:39:69:ce:34:97:66:
         9c:e4:6f:25:78:a7:1e:01:65:5f:ca:63:e6:37:3d:6a:88:7f:
         b2:6c:c8:18:94:5f:72:1c:27:f7:ab:64:e0:a3:ad:04:28:ac:
         13:8f:66:61:62:8b:06:41:c8:78:f6:cd:96:2a:15:5a:01:1f:
         dd:c7:87:59:b7:8b:8b:be:5d:e7:5e:76:e1:e7:46:1f:66:82:
         54:0f:ed:03:0f:6e:4c:ab:11:d8:15:4a:ed:66:f4:d1:4b:bd:
         6f:d3:eb:a0:a8:d1:5f:c0:0d:29:34:08:5e:59:a6:fe:58:c2:
         12:c8:21:00:77:40:87:58:ac:c4:d4:81:04:94:52:a5:ce:32:
         9d:86:f3:c8:c2:14:b7:e7:80:eb:35:c6:86:96:26:c0:0b:8f:
         8f:3a:5f:42:48:1c:43:47:f7:3a:5b:a8:7c:08:8b:9c:5f:8b:
         fc:54:85:fe:25:8d:77:61:76:5e:73:23:fd:83:f4:f1:08:39:
         f4:d1:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----