Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383330303a3a2f34302d3430203d3e203530333835.roa
File:                     326131343a373538313a383330303a3a2f34302d3430203d3e203530333835.roa (raw, json)
Hash identifier:          ThXm1fmWA80kxnWr4JIoYaHPTcejlBNqvFaPRnj5s4M=
Subject key identifier:   ED:F4:9A:F4:F1:F7:C5:F6:E8:1A:30:46:E4:CB:13:13:CB:99:42:F7
Certificate issuer:       /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial:       509BB36F28DA5E2671DC558D8841652B9C793DEE
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383330303a3a2f34302d3430203d3e203530333835.roa
Signing time:             Fri 17 May 2024 16:13:51 +0000
ROA not before:           Fri 17 May 2024 16:08:51 +0000
ROA not after:            Fri 16 May 2025 16:13:51 +0000
asID:                     50385
IP address blocks:        2a14:7581:8300::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 18 May 2024 12:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9b:b3:6f:28:da:5e:26:71:dc:55:8d:88:41:65:2b:9c:79:3d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
        Validity
            Not Before: May 17 16:08:51 2024 GMT
            Not After : May 16 16:13:51 2025 GMT
        Subject: CN=EDF49AF4F1F7C5F6E81A3046E4CB1313CB9942F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:a9:85:3f:54:dd:b8:12:47:bc:32:96:07:
                    17:8e:84:aa:2e:54:d0:18:33:a9:a9:32:61:3b:88:
                    a3:56:0d:64:3c:7c:d4:28:e5:d6:7b:2b:86:f3:4f:
                    51:7c:50:59:6b:bc:09:16:fb:88:15:93:d2:54:78:
                    fc:89:62:9a:bd:d6:da:e4:ed:2c:c5:5b:7f:f5:f8:
                    33:0b:91:a0:d7:a7:43:5d:cf:c2:7a:e9:2c:2b:7b:
                    a8:d9:49:b1:56:88:41:63:30:65:45:5e:84:be:bc:
                    4d:b8:62:95:8e:4e:31:97:d8:14:c1:3f:d8:81:31:
                    95:7b:65:c9:7f:11:94:af:d2:1c:0f:c2:1b:a5:14:
                    44:37:2a:ea:07:bb:b3:69:d0:ac:22:28:03:61:8b:
                    38:bb:ce:67:1d:f4:5a:6f:ab:e2:87:65:b3:ca:a7:
                    c2:43:a0:2d:2f:ef:69:22:31:ca:df:a2:20:fa:cf:
                    7f:c0:c9:9a:dc:45:78:a3:eb:95:e4:fb:c7:cc:07:
                    b6:fc:6d:06:aa:26:e2:a0:ef:c9:40:e3:72:9b:24:
                    83:33:5c:45:24:a2:ca:ed:49:fc:ed:9a:84:1c:ec:
                    a7:fc:5f:0c:0a:d5:b0:70:a6:63:0b:da:83:77:81:
                    ef:28:e8:72:a1:c0:70:ce:43:d9:36:98:6f:7f:81:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F4:9A:F4:F1:F7:C5:F6:E8:1A:30:46:E4:CB:13:13:CB:99:42:F7
            X509v3 Authority Key Identifier:
                keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383330303a3a2f34302d3430203d3e203530333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:93:4f:e8:fe:2d:22:93:7f:64:5e:96:b3:56:e2:f4:44:07:
         9e:dc:13:45:da:28:a7:20:56:e4:23:c9:3e:37:7d:99:5c:d7:
         1f:c3:af:2c:30:07:13:56:fc:41:29:dd:f2:46:8c:25:2e:29:
         bf:73:0d:06:58:b4:c1:76:07:ea:22:ce:d5:71:e4:d8:fb:7f:
         19:b8:20:7f:19:c3:c3:9e:72:33:39:f5:95:98:f5:5e:ee:bd:
         1a:eb:19:f8:19:a7:40:b0:c8:52:5c:80:75:8f:f3:8e:21:f1:
         b2:dc:e9:07:0e:af:88:1f:01:99:12:4b:00:b1:bb:b2:1c:64:
         57:b2:80:1e:2e:ab:e3:0c:b4:b8:c0:f7:40:ee:97:ff:df:11:
         dd:b7:e1:66:09:71:08:b6:45:cf:90:63:2e:6d:1d:52:01:45:
         68:35:11:5f:b7:72:a5:42:e2:1e:db:d4:36:21:9f:1b:98:47:
         d8:5f:aa:1f:08:88:f9:da:97:c2:08:19:e3:36:b4:85:43:66:
         df:33:96:cc:ef:60:fe:1b:4d:d5:22:c8:63:6f:e8:13:35:05:
         c9:2c:4a:48:04:bc:38:66:30:4d:7b:a5:f7:65:be:b1:7d:3e:
         e0:b2:9b:81:fa:f0:58:86:61:1b:79:dc:9d:f5:1d:7f:4a:f1:
         ee:65:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----