Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a376330313a3a2f34382d3438203d3e20323135363035.roa
File:                     326130613a363034343a376330313a3a2f34382d3438203d3e20323135363035.roa (raw, json)
Hash identifier:          /k14oK+o1RlWH8nSnBpcAbmuHiK9k68FrHwF7EmdeTs=
Subject key identifier:   CD:54:06:E6:6B:72:8E:C1:19:C8:6A:8E:0A:D4:4D:91:56:51:13:20
Certificate issuer:       /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial:       31C7D36BF19FCC0CB38580A3077A2126CF6EF13A
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a376330313a3a2f34382d3438203d3e20323135363035.roa
Signing time:             Fri 22 Mar 2024 20:19:59 +0000
ROA not before:           Fri 22 Mar 2024 20:14:59 +0000
ROA not after:            Fri 21 Mar 2025 20:19:59 +0000
asID:                     215605
IP address blocks:        2a0a:6044:7c01::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 09:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c7:d3:6b:f1:9f:cc:0c:b3:85:80:a3:07:7a:21:26:cf:6e:f1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
        Validity
            Not Before: Mar 22 20:14:59 2024 GMT
            Not After : Mar 21 20:19:59 2025 GMT
        Subject: CN=CD5406E66B728EC119C86A8E0AD44D9156511320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:7f:bb:e0:b0:e8:04:b5:11:6c:62:09:30:
                    aa:03:42:ce:a4:fd:68:da:7c:89:8d:2f:8b:9e:60:
                    43:9a:32:32:cf:16:26:6b:39:d8:03:eb:b7:9e:1a:
                    0c:18:7f:fc:d0:6e:ee:50:0c:26:e6:83:d6:6c:67:
                    d6:0e:eb:83:c2:8d:dd:4d:96:1c:96:1c:53:78:b3:
                    68:54:25:e4:3e:44:2e:ec:4e:92:59:c6:6f:3d:0b:
                    72:d9:f5:a9:f1:a1:16:02:9a:f3:a7:ae:24:42:17:
                    c4:e7:79:ce:0f:97:81:ff:b5:12:2f:75:a5:02:60:
                    50:90:f6:1e:22:cc:5b:44:ba:54:c4:b5:61:af:ee:
                    5e:df:a5:11:22:9d:92:a7:ee:95:b8:4c:77:5f:f4:
                    91:e3:77:03:24:f4:90:2a:3e:2d:fd:39:de:14:f6:
                    2f:b4:4a:32:7d:2d:47:58:e0:24:31:81:87:e9:54:
                    2c:b0:95:b4:21:c2:84:a3:9b:32:e5:2a:cb:7a:c3:
                    3d:a0:c2:7c:e3:1e:a7:db:6f:82:97:1e:c8:98:27:
                    e8:be:01:6b:91:b0:a0:b5:b7:de:5f:14:8d:1b:a0:
                    c0:7e:63:6d:3e:da:84:b1:eb:62:d4:7e:f5:57:5e:
                    c6:f8:a9:b3:a6:0f:74:6f:00:f8:db:c4:a7:fc:0b:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:54:06:E6:6B:72:8E:C1:19:C8:6A:8E:0A:D4:4D:91:56:51:13:20
            X509v3 Authority Key Identifier:
                keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a376330313a3a2f34382d3438203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7c01::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:64:ac:1a:e5:d8:e5:95:f9:84:f1:98:c7:9a:9c:5c:11:e2:
         38:92:0a:23:43:aa:bb:9a:d5:bd:51:7d:c3:b0:1e:33:80:e6:
         6e:41:1e:33:01:91:6d:e1:b6:37:fa:e1:9c:1b:8e:5c:6e:50:
         8a:1f:c5:f6:bb:04:86:ea:61:39:70:ac:e4:18:9f:60:31:38:
         b1:3d:2e:bb:dd:18:7f:f6:08:6c:b9:d2:7e:30:fe:ce:12:91:
         15:f6:9b:43:d9:1f:87:d2:23:6d:68:42:0a:ab:9d:49:8d:76:
         7e:46:e5:b0:40:7c:35:85:e7:bd:47:ee:d9:cb:97:dc:ba:1e:
         a8:d7:2b:f5:79:27:12:8a:b2:1a:14:8d:86:bc:e0:01:a4:79:
         00:34:f9:70:c6:9c:66:6c:1c:10:f4:94:85:ad:8d:f9:8f:f7:
         68:33:b3:5a:03:3d:64:6c:b6:89:48:ca:45:a8:db:8c:69:57:
         80:dd:7b:2e:6d:3e:0d:8c:b8:6b:d0:3e:b7:a9:c1:16:5e:d4:
         eb:11:7e:f1:0a:2a:46:6f:24:c6:7e:a8:b4:21:1c:b1:47:ad:
         1e:f4:cf:c6:c8:36:3a:10:c1:44:88:51:40:18:5b:6d:1e:f5:
         de:9f:d6:4d:fa:90:24:30:b3:92:41:e6:dc:9f:ff:53:ac:15:
         e0:1d:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----