Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383630303a3a2f34302d3430203d3e203530333835.roa
File:                     326131343a373538313a383630303a3a2f34302d3430203d3e203530333835.roa (raw, json)
Hash identifier:          gr9hRXVqgN2XWAgT5XVozEOGm10Egtz4UeMixpcaQv0=
Subject key identifier:   8E:02:F9:C1:26:6F:D8:6C:1A:57:65:2C:98:FE:17:C5:45:83:47:E6
Certificate issuer:       /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial:       3E7ACAE5B1B07BC63BA0B153BA721D42D88CB483
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383630303a3a2f34302d3430203d3e203530333835.roa
Signing time:             Fri 17 May 2024 16:14:15 +0000
ROA not before:           Fri 17 May 2024 16:09:15 +0000
ROA not after:            Fri 16 May 2025 16:14:15 +0000
asID:                     50385
IP address blocks:        2a14:7581:8600::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 18 May 2024 12:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7a:ca:e5:b1:b0:7b:c6:3b:a0:b1:53:ba:72:1d:42:d8:8c:b4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
        Validity
            Not Before: May 17 16:09:15 2024 GMT
            Not After : May 16 16:14:15 2025 GMT
        Subject: CN=8E02F9C1266FD86C1A57652C98FE17C5458347E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:dd:ac:42:81:59:4d:17:e5:67:fa:72:bb:
                    17:68:5f:e1:b8:92:3c:d4:ff:3b:2f:d5:df:d0:c0:
                    d0:ec:c2:53:c7:52:76:02:38:ed:e1:94:c9:5f:57:
                    f5:20:e7:83:89:31:21:1a:10:62:1f:48:d9:1c:ae:
                    c3:60:98:69:fd:e4:20:00:55:3a:43:db:18:03:ef:
                    42:1c:a4:44:e6:5f:20:af:50:5e:1f:7b:cb:2d:78:
                    f4:d7:36:45:df:84:91:00:8e:ef:1f:73:8c:28:d5:
                    df:ca:34:9c:e1:48:9b:bb:1e:5c:5e:c4:23:1b:04:
                    6a:0a:bc:5f:59:d7:91:59:d6:06:6b:db:b7:2f:ca:
                    40:4b:d5:bc:18:d9:4d:8f:11:72:8c:32:ab:12:7d:
                    f3:f1:91:22:91:99:a6:72:35:15:78:fe:f4:66:69:
                    a4:9b:d8:36:59:7d:75:2b:40:ae:e3:c2:42:e6:7d:
                    85:38:8a:74:a8:4e:69:02:15:5d:30:8b:06:48:98:
                    ee:84:ae:bb:4a:97:54:e6:c4:b4:03:f3:99:e2:f7:
                    ca:63:2e:a8:02:ec:4b:db:40:d9:a7:e2:a2:1a:b7:
                    0b:dd:5c:84:38:04:b7:f4:c2:a4:54:95:3e:f9:91:
                    20:bb:e1:7b:b3:71:36:94:48:02:74:d5:53:05:82:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:02:F9:C1:26:6F:D8:6C:1A:57:65:2C:98:FE:17:C5:45:83:47:E6
            X509v3 Authority Key Identifier:
                keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383630303a3a2f34302d3430203d3e203530333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:cc:4d:5d:1d:ec:f8:b5:80:7b:ff:01:e8:6d:54:64:50:10:
         64:7f:82:a4:cc:fc:f6:9a:88:4a:5e:e2:66:63:e5:e3:7a:91:
         7c:30:c5:86:ce:57:4d:f4:4f:2a:bd:20:da:5b:1f:97:cf:20:
         72:b8:97:51:7c:71:df:8e:e0:f3:ee:c4:8b:70:5c:5e:a1:c0:
         4f:6a:b3:43:72:4c:8b:9d:1c:08:2d:09:2d:6e:11:19:36:58:
         fb:d9:2d:0f:e9:f3:3e:24:84:e8:e4:26:95:f9:3b:9b:62:b4:
         89:38:5f:f6:02:3e:13:91:88:20:dc:ce:03:cb:f5:ac:98:21:
         7a:2a:73:dc:62:25:b8:14:d6:65:81:c8:ec:6c:8e:7f:20:4d:
         57:fe:59:bd:55:44:4e:f5:52:97:d9:c1:94:27:0d:ad:09:e5:
         b8:53:e1:8a:03:d7:c9:b0:f1:bd:2e:5d:88:56:21:67:b6:8d:
         c9:be:21:ee:fc:23:65:12:eb:08:5d:72:df:78:73:36:1d:47:
         4a:fc:5a:f2:93:df:89:66:30:74:6e:48:1a:8b:63:8d:14:67:
         38:8b:e4:f8:34:f5:b5:97:21:ec:b2:5c:22:08:b3:66:fe:c8:
         48:ed:ac:c6:44:f5:bd:8d:84:c2:47:ab:8e:b8:53:dc:7c:50:
         f3:5e:f4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----