Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383230303a3a2f34302d3430203d3e203530333835.roa
File:                     326131343a373538313a383230303a3a2f34302d3430203d3e203530333835.roa (raw, json)
Hash identifier:          WE/XxotnPunyMHH/VOo5bVxSl3h1XKPYAt18Tv1jYEc=
Subject key identifier:   B9:99:6A:43:15:EC:F2:45:DE:E7:13:E7:9B:BC:68:D1:6F:FE:58:E2
Certificate issuer:       /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial:       18173C23E37680A9B33697B4B9ED22902D922455
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383230303a3a2f34302d3430203d3e203530333835.roa
Signing time:             Fri 17 May 2024 16:13:42 +0000
ROA not before:           Fri 17 May 2024 16:08:42 +0000
ROA not after:            Fri 16 May 2025 16:13:42 +0000
asID:                     50385
IP address blocks:        2a14:7581:8200::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 18 May 2024 12:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:17:3c:23:e3:76:80:a9:b3:36:97:b4:b9:ed:22:90:2d:92:24:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
        Validity
            Not Before: May 17 16:08:42 2024 GMT
            Not After : May 16 16:13:42 2025 GMT
        Subject: CN=B9996A4315ECF245DEE713E79BBC68D16FFE58E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fd:36:ef:b4:57:9a:5f:d1:88:a1:69:48:7e:
                    73:52:ac:87:c8:6a:11:5d:fa:b3:45:53:4f:da:b8:
                    08:de:68:32:95:c8:78:dd:93:b5:51:93:af:aa:68:
                    8a:bc:1e:51:14:3b:ab:91:b2:a0:7f:e6:11:a2:74:
                    9e:e8:b1:23:a3:f6:c1:9c:98:c1:27:d2:a3:01:71:
                    3e:dd:79:05:9f:e6:8b:af:a8:99:00:d3:90:89:a0:
                    04:88:39:30:0c:88:a3:4e:72:12:43:f7:e0:bb:ac:
                    ec:94:c0:4f:00:70:57:64:f8:46:b6:c0:e1:5c:74:
                    eb:51:22:42:14:9d:f9:9c:9f:5a:72:6a:65:6a:4e:
                    fe:e1:13:b7:44:83:b3:61:97:4f:f2:85:ea:cd:71:
                    49:5a:9a:85:c7:6b:f5:f6:6e:7a:08:20:d9:ef:04:
                    5b:80:22:36:c3:a7:a3:45:3f:df:a6:e6:fd:d3:34:
                    73:79:1b:e1:75:ef:55:7a:5d:b1:1d:4a:8b:67:b6:
                    e6:16:de:78:25:52:e2:a6:9b:b8:f9:8f:55:3e:52:
                    52:5a:80:6c:5e:77:78:43:06:f0:e9:4b:2c:b6:fe:
                    66:ca:55:4c:db:1c:a5:ee:5a:e9:c7:ed:27:67:e8:
                    cb:b7:f0:07:d2:4e:ad:7f:e7:9c:85:5e:b7:5c:d0:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:99:6A:43:15:EC:F2:45:DE:E7:13:E7:9B:BC:68:D1:6F:FE:58:E2
            X509v3 Authority Key Identifier:
                keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383230303a3a2f34302d3430203d3e203530333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:2d:54:29:4a:36:cf:72:d4:d3:ed:35:95:7c:04:10:68:13:
         20:44:a2:2f:16:42:39:b2:42:df:9b:27:ac:7a:9a:31:55:85:
         c4:b5:68:b4:a0:46:b1:cc:8d:66:11:e5:fd:90:dc:42:eb:f5:
         33:9b:5f:d8:be:a2:08:62:37:32:35:a4:2b:c3:ef:dc:7f:09:
         66:8b:34:60:e1:2b:f8:cf:d7:ef:da:b3:3d:84:40:69:ff:37:
         b9:92:35:4a:fd:b7:87:13:38:68:b5:f5:32:cd:bd:3a:08:8b:
         05:65:c7:47:d6:e1:b7:b2:8d:7e:c1:5f:cd:89:b8:41:0d:54:
         50:72:50:0e:2b:23:b3:6c:9c:6f:41:a6:25:d5:44:a6:dd:f2:
         e0:08:06:30:2b:64:fb:d5:cd:ec:63:ee:1f:22:17:9e:df:a4:
         03:f5:a1:35:48:86:52:4d:8f:2a:05:5a:0c:51:d1:1c:3d:50:
         be:fe:e3:4e:99:46:c5:61:5d:1c:20:7b:89:e9:d9:9e:39:de:
         1e:9d:ab:1c:15:8a:a9:88:9c:68:06:bf:67:d7:3f:ce:36:89:
         b6:c4:29:0a:60:88:4f:fa:2d:d0:1b:8c:89:6a:a7:61:fd:01:
         6e:ba:4a:d1:83:5b:b6:71:3e:ae:10:0a:23:52:b8:56:84:62:
         9d:23:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----