Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a386130303a3a2f34302d3430203d3e203530333835.roa
File:                     326131343a373538313a386130303a3a2f34302d3430203d3e203530333835.roa (raw, json)
Hash identifier:          5MZH8zo3QORwA680Bo7si6kbZIL+89Fr4DPqAFcJYIk=
Subject key identifier:   50:5A:92:08:C2:C3:22:1D:34:6E:E5:F0:DF:84:C3:34:77:7A:50:17
Certificate issuer:       /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial:       6AC3B9A004B19DA2F126D1739D327DA201836DD7
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a386130303a3a2f34302d3430203d3e203530333835.roa
Signing time:             Fri 17 May 2024 16:14:53 +0000
ROA not before:           Fri 17 May 2024 16:09:53 +0000
ROA not after:            Fri 16 May 2025 16:14:53 +0000
asID:                     50385
IP address blocks:        2a14:7581:8a00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 18 May 2024 12:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c3:b9:a0:04:b1:9d:a2:f1:26:d1:73:9d:32:7d:a2:01:83:6d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
        Validity
            Not Before: May 17 16:09:53 2024 GMT
            Not After : May 16 16:14:53 2025 GMT
        Subject: CN=505A9208C2C3221D346EE5F0DF84C334777A5017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:4c:ee:55:2d:b1:c9:23:32:35:1f:98:d3:
                    1f:0d:2a:7f:d4:92:16:27:61:b9:e4:10:bd:94:18:
                    3f:ec:7a:36:49:3a:a0:df:ad:f8:04:16:55:53:d9:
                    40:d3:57:94:4a:3a:49:f7:c8:bf:39:72:21:c6:3a:
                    d9:e8:fa:cc:fd:9d:19:b4:93:e6:25:d7:2f:e8:40:
                    ad:bb:7e:0e:50:eb:21:a3:a6:62:83:af:81:ee:94:
                    9a:ba:e7:7b:46:a1:2f:34:11:03:4c:63:0e:4a:23:
                    ac:4b:6e:c2:cd:54:a3:47:05:4b:42:dc:b1:d3:1a:
                    96:ad:c9:e1:80:d4:eb:26:47:78:ce:29:cc:b1:57:
                    e7:eb:78:55:c0:a1:5a:61:af:e2:e7:71:13:a4:58:
                    d5:bb:d1:e2:f8:c6:73:bd:82:83:36:a5:70:fc:24:
                    b4:c2:4f:9f:e3:f8:72:76:5a:99:32:12:83:16:be:
                    aa:f4:5f:37:b0:d6:b2:30:22:27:1e:2a:d2:7f:39:
                    f6:da:9f:df:f2:49:16:50:07:ea:10:50:ee:72:ac:
                    68:fe:99:b8:f2:75:b9:2f:a5:1b:a0:e1:fa:c7:c1:
                    03:e4:19:8a:c8:16:30:7e:3c:7f:b6:c2:f2:a9:be:
                    5d:a8:08:6a:c9:fd:9d:12:f1:ea:10:8d:84:11:d1:
                    4a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5A:92:08:C2:C3:22:1D:34:6E:E5:F0:DF:84:C3:34:77:7A:50:17
            X509v3 Authority Key Identifier:
                keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a386130303a3a2f34302d3430203d3e203530333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:8a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:84:37:23:42:4d:8e:4a:9b:54:bc:28:2e:e6:ae:34:f4:d1:
         ec:6e:1f:dc:dd:b9:bc:97:f5:01:14:b6:5e:24:fb:69:68:46:
         f8:d8:1e:69:e8:8d:c7:8c:dd:29:b4:f4:1f:57:b5:f5:48:14:
         79:74:be:87:d7:01:cb:ae:93:23:5a:a5:df:5f:c8:22:4f:46:
         90:a9:3d:05:6a:2d:a1:f9:6e:0c:2f:bc:01:81:1b:89:26:c3:
         ae:97:d5:25:f6:d6:42:d6:c2:fe:b3:90:e3:62:6e:70:80:72:
         16:4e:e9:c4:a5:bd:c6:14:3e:c9:cb:0b:c7:85:7c:34:72:8e:
         9f:16:4f:cc:8c:1e:83:b4:56:ad:67:a2:b0:d0:38:d2:4e:b7:
         93:09:51:8b:7d:a9:1e:cd:5e:7a:65:51:26:ab:d7:1e:27:bd:
         03:65:4e:13:3e:75:ed:93:a4:86:c9:80:bc:bc:5a:96:9b:7d:
         1a:f6:71:b6:f5:16:55:12:81:4d:82:47:8a:07:24:2e:7c:80:
         72:d2:6f:6c:5a:b7:ab:d2:fb:7f:38:f9:de:1c:a7:8a:fa:70:
         99:81:05:04:5b:f4:19:ff:52:c7:ee:9c:d3:7b:7a:9b:90:e5:
         22:51:66:5d:22:af:22:00:ec:57:e5:ca:a6:d6:33:fe:c9:ef:
         4d:8b:ad:92
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUasO5oASxnaLxJtFznTJ9ogGDbdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3
OEU5RjM5QjAeFw0yNDA1MTcxNjA5NTNaFw0yNTA1MTYxNjE0NTNaMDMxMTAvBgNV
BAMTKDUwNUE5MjA4QzJDMzIyMUQzNDZFRTVGMERGODRDMzM0Nzc3QTUwMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzoEzuVS2xySMyNR+Y0x8NKn/U
khYnYbnkEL2UGD/sejZJOqDfrfgEFlVT2UDTV5RKOkn3yL85ciHGOtno+sz9nRm0
k+Yl1y/oQK27fg5Q6yGjpmKDr4HulJq653tGoS80EQNMYw5KI6xLbsLNVKNHBUtC
3LHTGpatyeGA1OsmR3jOKcyxV+freFXAoVphr+LncROkWNW70eL4xnO9goM2pXD8
JLTCT5/j+HJ2WpkyEoMWvqr0Xzew1rIwIiceKtJ/Ofban9/ySRZQB+oQUO5yrGj+
mbjydbkvpRug4frHwQPkGYrIFjB+PH+2wvKpvl2oCGrJ/Z0S8eoQjYQR0UoPAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUUFqSCMLDIh00buXw34TDNHd6UBcwHwYDVR0j
BBgwFoAUCHSAEWTclfCrnM1L0wSj73jp85swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2M4ZTRlMTEtM2FjYS00MzA1LWFjZDQtZjA1ZTZjOTA5
MTE1LzEvMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3OEU5RjM5Qi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wODc0ODAxMTY0REM5NUYwQUI5Q0NENEJE
MzA0QTNFRjc4RTlGMzlCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8zYzhlNGUxMS0zYWNhLTQzMDUtYWNkNC1mMDVlNmM5MDkxMTUvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTM4NjEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzUz
MDMzMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB
BwEB/wQSMBAwDgQCAAIwCAMGACoUdYGKMA0GCSqGSIb3DQEBCwUAA4IBAQAKhDcj
Qk2OSptUvCgu5q409NHsbh/c3bm8l/UBFLZeJPtpaEb42B5p6I3HjN0ptPQfV7X1
SBR5dL6H1wHLrpMjWqXfX8giT0aQqT0Fai2h+W4ML7wBgRuJJsOul9Ul9tZC1sL+
s5DjYm5wgHIWTunEpb3GFD7JywvHhXw0co6fFk/MjB6DtFatZ6Kw0DjSTreTCVGL
fakezV56ZVEmq9ceJ70DZU4TPnXtk6SGyYC8vFqWm30a9nG29RZVEoFNgkeKByQu
fIBy0m9sWrer0vt/OPneHKeK+nCZgQUEW/QZ/1LH7pzTe3qbkOUiUWZdIq8iAOxX
5cqm1jP+ye9Ni62S
-----END CERTIFICATE-----