Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383130303a3a2f34302d3430203d3e20323135363035.roa
File:                     326130613a363034343a383130303a3a2f34302d3430203d3e20323135363035.roa (raw, json)
Hash identifier:          QBiiOyh9nFEPyeyBt941wrd8n1fMgtl18sid0y7/Fnk=
Subject key identifier:   DA:F9:DE:33:B3:5C:5A:DE:AD:5B:B4:C8:C8:1B:0E:64:04:BB:76:AB
Certificate issuer:       /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial:       75E643A188EBF8647BBBC3B784862E6BA8880E90
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383130303a3a2f34302d3430203d3e20323135363035.roa
Signing time:             Mon 15 Jul 2024 07:06:55 +0000
ROA not before:           Mon 15 Jul 2024 07:01:55 +0000
ROA not after:            Mon 14 Jul 2025 07:06:55 +0000
asID:                     215605
IP address blocks:        2a0a:6044:8100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 10:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e6:43:a1:88:eb:f8:64:7b:bb:c3:b7:84:86:2e:6b:a8:88:0e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
        Validity
            Not Before: Jul 15 07:01:55 2024 GMT
            Not After : Jul 14 07:06:55 2025 GMT
        Subject: CN=DAF9DE33B35C5ADEAD5BB4C8C81B0E6404BB76AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:4d:b5:03:fc:df:a1:67:9a:94:49:87:eb:
                    05:5c:43:bd:d8:85:a1:e8:9c:dc:5a:a1:70:44:c9:
                    b1:7b:fd:4f:8a:2b:20:9e:e0:92:e6:63:96:fc:14:
                    7e:19:38:a8:46:15:85:78:69:82:b3:4d:a4:4c:15:
                    18:9a:3c:f2:a5:54:7c:81:0a:ea:a3:1e:50:36:62:
                    4e:f5:1a:b7:5d:44:83:aa:1e:56:77:46:bb:25:a7:
                    74:11:04:39:b4:9d:ad:58:a0:9a:68:85:a6:e6:04:
                    c4:27:55:10:2c:01:a5:c6:86:7b:bb:e8:f8:19:a6:
                    9f:d4:20:8e:58:f0:30:c0:73:ad:6d:de:f5:b5:d0:
                    ec:fa:17:d2:f4:32:2b:ce:90:04:e0:f6:a3:49:10:
                    4e:11:51:2d:b1:e3:0a:ec:89:82:e7:36:74:30:e1:
                    67:70:96:07:76:90:de:1f:a0:4e:37:1a:44:e2:f1:
                    cf:3c:7b:ac:ba:bd:85:75:69:2e:17:a8:b9:bb:9c:
                    0e:b5:8d:07:29:fc:df:55:a1:24:71:b5:e9:9b:de:
                    2e:cf:1d:af:29:3d:53:3f:8c:cd:96:61:61:b8:e2:
                    18:6f:4f:b7:cb:52:45:88:ee:b0:83:d2:12:fb:6c:
                    3d:89:fc:83:f1:90:92:4d:17:8f:37:fe:37:d2:07:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F9:DE:33:B3:5C:5A:DE:AD:5B:B4:C8:C8:1B:0E:64:04:BB:76:AB
            X509v3 Authority Key Identifier:
                keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383130303a3a2f34302d3430203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:c4:37:a9:9b:35:c5:00:56:a4:ba:c2:9b:7e:65:e6:f0:
         4e:5f:28:6b:2e:fe:0f:0c:d4:38:14:96:73:98:34:a0:32:9f:
         4b:37:76:00:bb:2b:c2:57:a2:6b:d2:bc:38:be:1f:00:6c:fc:
         76:1a:36:60:5a:ad:6d:3c:d9:4b:ce:33:1c:d5:61:0a:dc:c0:
         16:c0:fc:ce:51:97:e2:44:24:c2:a3:68:f5:cd:90:89:cb:1e:
         70:e8:93:01:dc:a2:2e:12:d6:5a:9a:f3:9e:5a:b6:05:92:b7:
         50:28:82:6e:77:2b:9a:24:2a:31:b8:44:0f:b6:44:ec:9c:5c:
         ab:0d:09:87:6e:11:aa:6f:0f:d7:be:6c:fc:16:61:30:a3:e7:
         91:fe:66:44:e5:49:b3:d5:aa:2d:63:d8:3d:1d:df:e0:7f:96:
         78:14:8f:1b:88:34:a6:9a:ed:2c:6b:ad:b3:c1:aa:01:82:08:
         38:c7:d8:09:fd:db:33:da:9b:65:80:8c:fd:c2:be:10:31:32:
         a8:2a:c5:b2:2f:01:89:2c:7a:61:59:e9:c6:82:19:1b:70:37:
         09:e6:57:cf:15:d8:4b:46:51:53:24:c5:5a:12:5b:85:79:d2:
         60:bc:3c:b2:14:58:7b:ce:b5:89:93:33:de:6f:03:16:1c:59:
         bf:16:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----