Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383730303a3a2f34302d3430203d3e203530333835.roa
File:                     326131343a373538313a383730303a3a2f34302d3430203d3e203530333835.roa (raw, json)
Hash identifier:          iGo1M6A4ek6pBqvf6/KQ+KZurFFD2oRpd5c12zq1dy4=
Subject key identifier:   BB:3C:52:50:13:ED:09:0E:50:C2:4A:7A:69:E6:6D:C0:5B:D0:90:34
Certificate issuer:       /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial:       473179DFF84B7F76217CCF4E3F1456208FC29748
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383730303a3a2f34302d3430203d3e203530333835.roa
Signing time:             Fri 17 May 2024 16:14:24 +0000
ROA not before:           Fri 17 May 2024 16:09:24 +0000
ROA not after:            Fri 16 May 2025 16:14:24 +0000
asID:                     50385
IP address blocks:        2a14:7581:8700::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 18 May 2024 12:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:31:79:df:f8:4b:7f:76:21:7c:cf:4e:3f:14:56:20:8f:c2:97:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
        Validity
            Not Before: May 17 16:09:24 2024 GMT
            Not After : May 16 16:14:24 2025 GMT
        Subject: CN=BB3C525013ED090E50C24A7A69E66DC05BD09034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:79:65:4d:39:c0:58:37:c3:49:66:91:b4:
                    e2:37:60:a7:db:72:45:cd:fd:c2:1f:1c:2b:33:92:
                    42:45:a8:b0:90:40:39:21:ab:79:aa:d9:9f:ec:71:
                    91:2c:07:c3:86:98:f3:6b:07:54:70:ce:53:d7:9c:
                    11:f0:70:25:6d:02:6e:8c:0d:3a:18:4a:27:10:9e:
                    fb:c0:aa:6e:b5:ae:a2:5f:03:dc:8e:97:ad:e8:46:
                    1c:15:fd:48:f6:dd:b2:ca:f1:5c:12:a0:8d:07:4d:
                    c6:ba:d9:93:b5:cd:68:1c:fc:29:da:f5:16:4d:5e:
                    d6:64:6b:a9:33:4a:9c:69:a3:22:63:84:81:54:3c:
                    6a:89:e4:88:96:15:dc:74:72:72:36:43:59:5d:dc:
                    b5:88:27:bc:c2:5b:d9:32:45:0a:00:82:e3:2d:2f:
                    5f:8e:07:1e:4f:49:56:4e:76:eb:c8:94:a8:73:14:
                    e7:a6:44:77:46:11:56:e6:16:91:e8:91:fa:9f:1f:
                    b2:4e:8a:9c:08:05:a2:86:1c:47:c3:08:35:1c:e4:
                    0e:a6:19:ea:7c:cd:6c:4e:cb:2e:53:b3:e9:d3:d0:
                    06:a6:91:5c:50:99:d5:5a:e8:ab:10:9f:8e:95:9a:
                    10:51:cd:23:e5:ce:d4:9e:64:5a:aa:d2:65:50:42:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3C:52:50:13:ED:09:0E:50:C2:4A:7A:69:E6:6D:C0:5B:D0:90:34
            X509v3 Authority Key Identifier:
                keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383730303a3a2f34302d3430203d3e203530333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:b8:b7:4b:cf:5f:2d:28:af:6a:c6:ea:d5:5c:ec:20:db:ea:
         1b:c0:de:e3:e7:8f:8c:d9:77:b8:d6:2b:10:51:bb:39:11:c8:
         1d:3a:dd:a3:1f:02:2d:29:6b:38:62:b8:5f:36:37:b1:e1:0c:
         9b:5c:90:00:f6:fd:89:be:b8:98:0c:12:7a:70:05:67:18:cf:
         e3:44:93:36:89:ef:45:da:fa:60:f5:83:d7:ff:a9:5b:0e:04:
         a8:81:2d:75:f3:35:a5:62:79:f2:77:6d:74:1b:b6:2b:c8:72:
         a1:66:35:f1:f4:a6:26:5b:b6:73:7f:0d:11:81:4d:af:c9:87:
         27:2c:5b:ac:86:22:18:40:41:1c:15:71:f3:4e:4e:d7:7f:f1:
         67:a0:5a:0d:a1:4b:f4:d0:cd:bb:48:d4:46:26:e7:dd:55:d9:
         6e:91:bd:33:6e:b3:b0:ce:ca:55:33:54:82:81:a4:f0:ae:08:
         b1:7c:f8:8e:e0:d6:83:3f:b3:f3:88:ad:00:92:52:3a:10:b3:
         0a:ca:9c:48:99:2f:d0:6e:e4:00:35:ea:2a:9b:43:fc:b3:ca:
         e6:34:99:ab:de:69:b2:1c:c2:38:80:ef:58:fd:45:57:45:54:
         53:0c:de:b4:51:3a:bd:05:a4:b4:55:2b:e6:12:2b:aa:7e:6c:
         d9:b3:be:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----