Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383930303a3a2f34302d3430203d3e203530333835.roa
File:                     326131343a373538313a383930303a3a2f34302d3430203d3e203530333835.roa (raw, json)
Hash identifier:          a0n4g5ZcZu1qMJGWTKi77YhXpt1pik5n3xhrsT+ensQ=
Subject key identifier:   85:E4:78:14:F0:D9:F3:D9:CE:62:23:8E:15:59:72:58:5F:C0:14:B8
Certificate issuer:       /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial:       4A868F266322F535DF0EB862A951E6F8BDB7076F
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383930303a3a2f34302d3430203d3e203530333835.roa
Signing time:             Fri 17 May 2024 16:14:43 +0000
ROA not before:           Fri 17 May 2024 16:09:43 +0000
ROA not after:            Fri 16 May 2025 16:14:43 +0000
asID:                     50385
IP address blocks:        2a14:7581:8900::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 18 May 2024 12:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:86:8f:26:63:22:f5:35:df:0e:b8:62:a9:51:e6:f8:bd:b7:07:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
        Validity
            Not Before: May 17 16:09:43 2024 GMT
            Not After : May 16 16:14:43 2025 GMT
        Subject: CN=85E47814F0D9F3D9CE62238E155972585FC014B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ee:6b:28:94:07:1c:0f:21:70:7c:59:33:7e:
                    45:c5:6c:24:09:72:c9:74:29:d4:0e:c4:12:2b:e3:
                    e6:f3:58:8e:c2:ef:12:23:d6:0e:0f:04:f7:48:79:
                    09:e8:8d:99:a6:1e:5f:b1:ea:2a:da:aa:b0:89:48:
                    d6:67:b4:eb:27:cb:8a:01:db:47:0c:bb:60:af:72:
                    4c:ca:d6:df:d9:9b:b4:3f:c9:92:d0:dc:e8:03:62:
                    f3:a5:eb:e5:2b:76:fc:c5:d1:66:07:ed:87:6e:ac:
                    40:54:ed:4d:9f:48:80:27:8f:d7:88:72:4f:95:9c:
                    b8:58:19:08:fb:31:17:5e:9f:2e:8b:68:da:c3:d5:
                    43:3c:a4:3a:a8:6a:19:e4:a0:57:ca:a9:77:fb:94:
                    97:f4:ce:5b:f9:de:fe:8d:42:97:e4:07:c5:33:2a:
                    79:fb:47:c0:52:7d:8a:5f:24:c0:a9:fd:91:ff:f6:
                    33:14:78:ee:f2:2f:cd:97:cd:1e:92:42:45:74:d2:
                    6a:ec:60:cc:39:e5:78:62:00:37:9c:82:d6:37:0c:
                    37:f8:f2:08:94:bd:f4:81:f5:54:fd:c9:6c:ea:c6:
                    4f:63:14:37:4b:98:88:a3:90:a8:95:c1:e8:69:da:
                    72:02:81:cf:81:b0:36:51:81:e0:38:df:d1:67:a6:
                    2f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E4:78:14:F0:D9:F3:D9:CE:62:23:8E:15:59:72:58:5F:C0:14:B8
            X509v3 Authority Key Identifier:
                keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a383930303a3a2f34302d3430203d3e203530333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:07:bb:f1:f4:2b:f3:7d:84:f1:a7:13:12:23:ee:8d:cf:
         a8:79:c8:31:f5:c4:90:2d:87:a2:c9:a6:4f:36:58:c6:11:2e:
         93:af:40:c3:e7:b0:93:eb:d1:fb:79:b1:a5:3f:dd:e4:20:4c:
         84:b9:25:86:c7:b6:ad:e0:42:18:87:00:6b:63:17:c7:e8:51:
         c2:7a:e2:f8:6f:d3:1b:96:f3:ee:29:0a:78:92:08:59:e0:03:
         6a:9f:b4:9b:a8:38:7e:8d:f6:d9:fe:c2:3f:14:f9:bd:17:28:
         da:9c:6b:6d:83:82:91:b3:bc:56:45:4d:90:08:65:9f:09:59:
         a0:c4:d2:f2:ff:a4:72:f4:29:7e:09:89:f5:d8:cd:ce:de:ba:
         11:82:2d:4c:bf:5d:cd:df:83:92:1d:44:e8:61:a2:85:33:1d:
         f0:08:88:5a:e5:2f:48:60:6a:09:e2:06:1c:31:52:e3:42:38:
         7c:b2:0f:3b:af:d4:e1:88:db:ca:1f:70:a4:65:59:3d:36:99:
         25:0d:06:04:d0:d3:60:72:4f:35:38:99:20:34:dd:e4:d7:0e:
         0d:37:69:44:c0:68:91:c2:c4:6d:b8:c2:1a:6e:15:d9:d2:f2:
         c7:0f:ba:dc:53:57:2a:63:7e:bf:32:b9:d8:db:8e:5c:66:7d:
         f4:4e:f8:17
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUSoaPJmMi9TXfDrhiqVHm+L23B28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3
OEU5RjM5QjAeFw0yNDA1MTcxNjA5NDNaFw0yNTA1MTYxNjE0NDNaMDMxMTAvBgNV
BAMTKDg1RTQ3ODE0RjBEOUYzRDlDRTYyMjM4RTE1NTk3MjU4NUZDMDE0QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7msolAccDyFwfFkzfkXFbCQJ
csl0KdQOxBIr4+bzWI7C7xIj1g4PBPdIeQnojZmmHl+x6iraqrCJSNZntOsny4oB
20cMu2CvckzK1t/Zm7Q/yZLQ3OgDYvOl6+UrdvzF0WYH7YdurEBU7U2fSIAnj9eI
ck+VnLhYGQj7MRdeny6LaNrD1UM8pDqoahnkoFfKqXf7lJf0zlv53v6NQpfkB8Uz
Knn7R8BSfYpfJMCp/ZH/9jMUeO7yL82XzR6SQkV00mrsYMw55XhiADecgtY3DDf4
8giUvfSB9VT9yWzqxk9jFDdLmIijkKiVwehp2nICgc+BsDZRgeA439Fnpi9xAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUheR4FPDZ89nOYiOOFVlyWF/AFLgwHwYDVR0j
BBgwFoAUCHSAEWTclfCrnM1L0wSj73jp85swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2M4ZTRlMTEtM2FjYS00MzA1LWFjZDQtZjA1ZTZjOTA5
MTE1LzEvMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3OEU5RjM5Qi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wODc0ODAxMTY0REM5NUYwQUI5Q0NENEJE
MzA0QTNFRjc4RTlGMzlCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zYzhlNGUxMS0zYWNhLTQzMDUtYWNkNC1mMDVlNmM5MDkxMTUvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTM4MzkzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzUz
MDMzMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB
BwEB/wQSMBAwDgQCAAIwCAMGACoUdYGJMA0GCSqGSIb3DQEBCwUAA4IBAQBKwAe7
8fQr832E8acTEiPujc+oecgx9cSQLYeiyaZPNljGES6Tr0DD57CT69H7ebGlP93k
IEyEuSWGx7at4EIYhwBrYxfH6FHCeuL4b9MblvPuKQp4kghZ4ANqn7SbqDh+jfbZ
/sI/FPm9FyjanGttg4KRs7xWRU2QCGWfCVmgxNLy/6Ry9Cl+CYn12M3O3roRgi1M
v13N34OSHUToYaKFMx3wCIha5S9IYGoJ4gYcMVLjQjh8sg87r9ThiNvKH3CkZVk9
NpklDQYE0NNgck81OJkgNN3k1w4NN2lEwGiRwsRtuMIabhXZ0vLHD7rcU1cqY36/
MrnY245cZn30TvgX
-----END CERTIFICATE-----