Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a386630303a3a2f34302d3430203d3e203530333835.roa
File:                     326131343a373538313a386630303a3a2f34302d3430203d3e203530333835.roa (raw, json)
Hash identifier:          5kLUDid8hy9jb9qfbuqO/VAd1Rr/gTca7FS/pPWzT4Y=
Subject key identifier:   DD:1A:6E:1A:3C:24:90:C1:10:AC:C3:26:F8:D5:74:DA:C7:15:81:1A
Certificate issuer:       /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial:       30A4DA31EF5A33BC68415219FAF0B72B3AE0D6A8
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a386630303a3a2f34302d3430203d3e203530333835.roa
Signing time:             Fri 17 May 2024 16:15:44 +0000
ROA not before:           Fri 17 May 2024 16:10:44 +0000
ROA not after:            Fri 16 May 2025 16:15:44 +0000
asID:                     50385
IP address blocks:        2a14:7581:8f00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 18 May 2024 12:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a4:da:31:ef:5a:33:bc:68:41:52:19:fa:f0:b7:2b:3a:e0:d6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
        Validity
            Not Before: May 17 16:10:44 2024 GMT
            Not After : May 16 16:15:44 2025 GMT
        Subject: CN=DD1A6E1A3C2490C110ACC326F8D574DAC715811A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ec:37:a7:c5:f4:9d:27:eb:5b:02:10:ca:8a:
                    cc:1a:b3:39:92:54:41:7e:7f:db:38:45:dc:d6:57:
                    08:43:4a:35:7f:16:ae:0f:57:12:40:cd:33:e5:ac:
                    e7:1d:c5:cd:00:ad:01:ba:72:1c:fd:8f:94:6b:e0:
                    2d:21:39:06:bd:b7:ff:0e:6f:64:42:26:a8:3f:b7:
                    1a:15:a0:a3:71:fc:9e:b4:01:f8:86:51:e4:15:9a:
                    d5:92:70:64:82:57:db:6f:e2:eb:a1:85:a9:de:39:
                    4b:28:76:cc:3a:1c:39:a3:76:34:10:55:f6:08:41:
                    7d:0f:47:0e:6a:5d:e5:88:5b:36:52:38:49:1b:7b:
                    95:06:e4:46:d9:5d:3d:37:45:9e:b9:98:6d:4e:4e:
                    0c:58:03:9e:00:e8:13:3d:28:1f:3e:12:a8:36:bb:
                    3d:c4:a7:7f:4b:2a:80:5b:d3:d0:ce:17:63:6b:31:
                    93:b7:a2:cd:08:b4:32:ee:7c:ed:e5:18:1e:32:1e:
                    c5:88:4e:92:ef:b9:a0:3e:02:25:cc:4e:a8:8c:f7:
                    a1:dc:c2:70:bf:c2:21:a9:fc:d5:37:02:fb:ef:3c:
                    c4:16:e2:b6:a5:90:c1:60:d6:47:84:14:41:90:30:
                    a9:6c:e9:25:62:b2:59:b6:e8:67:43:b3:3d:cc:66:
                    bf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1A:6E:1A:3C:24:90:C1:10:AC:C3:26:F8:D5:74:DA:C7:15:81:1A
            X509v3 Authority Key Identifier:
                keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/326131343a373538313a386630303a3a2f34302d3430203d3e203530333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:cf:ce:a7:8e:c5:1e:15:42:80:79:ae:37:0b:92:18:7a:f7:
         87:b1:0b:41:ea:a6:3a:57:f2:5a:c8:28:ca:64:1f:ac:5c:43:
         8b:da:57:b1:e5:c0:9f:4d:f7:93:71:39:e5:8e:2e:7c:a8:45:
         2b:52:bc:80:85:7c:16:3c:c8:0f:2d:84:d6:b7:01:7b:4e:18:
         d3:67:6b:d2:f6:3f:90:36:12:9c:69:0e:c4:c9:bd:9f:18:0f:
         56:be:d7:bf:d2:53:ff:1b:e2:82:d9:cf:29:c1:2c:8a:ce:06:
         f9:0d:95:f5:93:19:de:a3:c9:9f:07:22:16:01:61:53:0c:d1:
         64:95:b3:37:a1:4f:44:74:b5:77:95:ed:ad:a3:a1:d1:e1:68:
         ca:a8:a8:99:b7:5b:31:46:57:d0:30:fd:00:f9:46:1e:95:8b:
         e1:9a:da:4c:35:9c:55:dd:fc:b0:5d:b4:93:76:1d:82:97:8a:
         84:67:3a:74:09:a2:bf:c4:43:f0:31:43:82:db:9a:4e:44:2c:
         87:08:62:a6:7d:ff:10:ee:c6:4a:e6:6c:77:46:d1:93:57:24:
         88:05:0f:13:72:11:c6:59:5d:76:a2:a8:1c:ec:f1:85:8d:a0:
         7f:d1:d9:7c:65:99:13:bc:a1:6b:67:73:0c:78:69:51:fd:d9:
         57:06:4c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----