Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383230303a3a2f34302d3438203d3e20323031373633.roa
File:                     326130613a363034343a383230303a3a2f34302d3438203d3e20323031373633.roa (raw, json)
Hash identifier:          ENb42JsqWeo1Bc9b1c4IDML2D6oYgB4c1UUFEoN33Zo=
Subject key identifier:   6D:62:11:C1:9B:1F:7B:D5:AD:C1:75:72:BB:C5:08:9F:13:7D:CC:37
Certificate issuer:       /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial:       94895658603A757359BDE686CB0F7A120ED0EB
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383230303a3a2f34302d3438203d3e20323031373633.roa
Signing time:             Tue 16 Apr 2024 00:05:14 +0000
ROA not before:           Tue 16 Apr 2024 00:00:14 +0000
ROA not after:            Tue 15 Apr 2025 00:05:14 +0000
asID:                     201763
IP address blocks:        2a0a:6044:8200::/40 maxlen: 48

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 10:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            94:89:56:58:60:3a:75:73:59:bd:e6:86:cb:0f:7a:12:0e:d0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
        Validity
            Not Before: Apr 16 00:00:14 2024 GMT
            Not After : Apr 15 00:05:14 2025 GMT
        Subject: CN=6D6211C19B1F7BD5ADC17572BBC5089F137DCC37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:3b:f8:14:9f:47:36:bd:90:84:bc:2c:e3:
                    a6:89:9f:d7:bc:48:b7:01:ab:d1:9c:99:da:70:a2:
                    a6:42:5b:09:3d:1d:69:76:d3:fc:11:6c:07:dd:fe:
                    b4:58:83:dc:74:f1:c1:18:b8:97:38:c7:40:54:c3:
                    05:e2:73:7f:c8:92:8a:b0:1b:70:b1:c9:6c:ac:5d:
                    ca:dd:a2:87:26:10:45:bb:2b:c2:3b:e1:ed:ff:11:
                    6c:ee:fd:4c:a3:33:51:44:75:c6:a4:34:81:5a:70:
                    dc:83:2b:e9:c5:95:38:88:c2:21:30:bc:96:1b:7c:
                    a8:df:d4:94:d0:e7:c0:88:54:d3:6a:98:fe:96:91:
                    c5:20:da:a1:9a:b5:9e:a4:24:03:10:da:ba:57:78:
                    f4:44:65:ef:f3:51:c4:1a:ca:d1:bb:ec:4f:77:ce:
                    ea:80:97:9c:2a:ec:a6:dd:3e:fb:b2:20:e6:35:f8:
                    0d:69:fd:3e:cc:31:97:21:8a:22:32:e2:9f:a3:9c:
                    61:56:e1:5a:ab:38:05:22:8c:f4:a0:d7:c2:cd:7a:
                    7f:e0:35:fa:19:d8:fe:12:ea:b1:58:ff:16:aa:30:
                    74:5a:90:4d:64:bf:24:7f:c7:b9:61:1c:0a:22:15:
                    35:e2:5c:fb:53:f3:d5:d5:d6:25:12:b3:cb:a9:bd:
                    d5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:62:11:C1:9B:1F:7B:D5:AD:C1:75:72:BB:C5:08:9F:13:7D:CC:37
            X509v3 Authority Key Identifier:
                keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383230303a3a2f34302d3438203d3e20323031373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:74:2a:97:2a:52:77:73:b1:c5:d3:29:42:ca:4b:8d:35:7b:
         83:76:96:93:35:f8:39:e1:44:d7:57:ad:64:8b:9e:c4:fb:1f:
         db:5e:49:ea:27:eb:2d:66:25:d8:bc:d7:58:b7:b2:a2:9e:76:
         50:d5:34:c2:b1:ae:d0:e8:ad:35:b1:1d:db:3e:2e:71:40:ff:
         19:5e:82:4c:e4:98:f3:68:c3:43:12:7c:e8:fa:9d:1c:0f:72:
         e5:5f:76:0b:7c:f4:9a:d4:91:77:08:ba:81:79:66:4c:c7:35:
         e5:a2:f3:9b:26:d0:97:bc:cc:ac:50:db:cb:07:e8:40:f0:db:
         c7:f7:a8:34:3a:92:47:80:10:5f:1d:65:95:b4:2b:f8:df:7d:
         6b:6a:7a:58:08:88:b2:e6:cb:ba:7c:9b:1a:d4:e0:74:a2:75:
         bf:7b:56:57:74:64:3a:64:d6:b7:5d:86:6b:c1:74:97:bf:07:
         5f:fd:5d:53:09:50:94:b5:63:0b:05:a2:60:35:48:6d:3a:67:
         db:42:7f:4a:42:13:13:31:7d:29:ab:81:2d:0c:9e:ca:22:06:
         73:4f:f6:d3:6d:f4:e2:86:76:df:43:f4:27:92:e5:9e:c4:7e:
         86:74:dd:f7:0e:62:7b:a6:22:8c:a7:1d:3b:47:cc:7e:bf:f0:
         a6:11:24:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----