Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383530303a3a2f34302d3430203d3e203530333835.roa
File:                     326131343a373538313a383530303a3a2f34302d3430203d3e203530333835.roa (raw, json)
Hash identifier:          H6M4kYco8d9TDxGrdjUxFpv0mQ89hWKIIm+DppVT2jA=
Subject key identifier:   AB:CE:4A:5A:EE:45:F7:DE:6E:DD:7D:DD:5B:F8:31:3C:44:94:D4:93
Certificate issuer:       /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial:       037B2875005D3568122B1AA9C8F9006EC898BEC9
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383530303a3a2f34302d3430203d3e203530333835.roa
Signing time:             Fri 17 May 2024 16:14:08 +0000
ROA not before:           Fri 17 May 2024 16:09:08 +0000
ROA not after:            Fri 16 May 2025 16:14:08 +0000
asID:                     50385
IP address blocks:        2a14:7581:8500::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 18 May 2024 12:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7b:28:75:00:5d:35:68:12:2b:1a:a9:c8:f9:00:6e:c8:98:be:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
        Validity
            Not Before: May 17 16:09:08 2024 GMT
            Not After : May 16 16:14:08 2025 GMT
        Subject: CN=ABCE4A5AEE45F7DE6EDD7DDD5BF8313C4494D493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:af:e3:a0:8f:d5:1e:28:ad:16:7f:2d:51:
                    52:6c:bc:82:14:19:55:17:31:ea:f2:0c:e5:c8:33:
                    00:84:9d:f3:89:2f:ed:2f:5a:64:0c:d5:f0:3f:b6:
                    d4:3c:78:16:82:23:7c:99:0e:c4:42:a1:77:21:98:
                    bf:dd:45:af:37:9d:87:33:46:89:d1:8a:6f:f7:80:
                    fc:3e:6c:c9:cb:49:bc:2a:56:3f:14:2a:e7:c8:78:
                    08:6f:53:42:54:cf:19:c5:7f:2e:9f:ef:c9:73:90:
                    41:d6:4b:10:9b:f6:3d:aa:c5:54:a2:39:ba:ef:6d:
                    e4:b2:8c:77:fb:43:bb:5f:6d:4a:b8:29:f2:e0:12:
                    d6:19:71:76:f3:16:50:90:f6:4a:b1:bf:80:22:66:
                    d1:82:f9:60:be:f2:48:f5:d0:c2:30:36:4c:d9:00:
                    56:11:17:bc:b4:c1:60:d6:69:1e:cb:34:a2:26:d3:
                    b9:bd:3c:4f:b0:2b:41:43:27:83:47:c8:eb:70:a6:
                    1e:1c:9f:2a:44:cc:f9:e0:55:a7:84:18:61:93:55:
                    ee:be:5c:f8:5a:1e:a9:74:09:a6:30:13:c1:2c:cd:
                    1b:7d:00:18:de:b1:61:23:dc:6f:2b:75:9e:f5:6b:
                    7a:44:44:0e:60:8e:ac:41:bb:67:57:12:4b:84:c7:
                    23:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CE:4A:5A:EE:45:F7:DE:6E:DD:7D:DD:5B:F8:31:3C:44:94:D4:93
            X509v3 Authority Key Identifier:
                keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383530303a3a2f34302d3430203d3e203530333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:99:26:76:9c:89:87:67:6c:7b:44:32:3a:e2:22:2c:e6:94:
         81:43:fa:4e:44:5a:fd:a7:48:60:9d:19:2b:e1:ca:aa:36:ed:
         4a:60:4a:96:94:5e:39:8e:e3:2d:79:74:1b:a5:17:05:ab:75:
         3e:30:b3:d6:1f:9c:ee:4e:61:05:02:9f:4f:26:24:67:64:dd:
         ad:90:e5:8a:9f:8e:08:f5:cb:f0:46:82:72:16:2b:c1:42:e9:
         fb:6c:b8:80:13:ce:fe:16:79:b5:a4:e9:06:cd:47:3d:7d:cd:
         6b:61:59:e4:46:ce:90:c9:1a:f8:7b:22:0a:e6:cc:e2:30:47:
         b5:dc:74:4f:15:4f:c8:5f:8d:87:49:9e:c5:19:b8:a7:95:af:
         a1:92:78:c5:76:97:f3:6b:85:ee:02:63:4f:32:07:57:3f:f8:
         82:27:05:37:67:93:a3:c1:1d:e3:58:b4:8d:36:8f:5f:4b:61:
         e4:7d:f2:74:e8:01:29:60:2d:55:7f:5f:5e:56:62:7d:9d:40:
         2c:81:9a:dc:f8:3d:ed:7c:4e:4e:7b:0c:db:18:41:6c:61:4c:
         d6:39:5a:8d:28:9d:fd:0b:9e:c6:da:58:8f:e2:2c:26:a4:d4:
         ec:5a:1c:6c:72:5f:5f:a2:0f:5a:94:cc:01:fc:2e:6c:96:4b:
         f6:a4:da:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----