Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383330303a3a2f34302d3430203d3e20323135303531.roa
File:                     326130613a363034343a383330303a3a2f34302d3430203d3e20323135303531.roa (raw, json)
Hash identifier:          kcprANSJUmfpVXI4pwczklZzPG+8ZBZv/3pqDDGWkqA=
Subject key identifier:   2B:0F:BA:81:AF:4B:2E:3F:18:5F:1B:1F:25:5A:68:58:98:F6:21:26
Certificate issuer:       /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial:       58E1D0CF251A8D1B934F4885848332CE1FF57EBB
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383330303a3a2f34302d3430203d3e20323135303531.roa
Signing time:             Sun 28 Apr 2024 17:41:48 +0000
ROA not before:           Sun 28 Apr 2024 17:36:48 +0000
ROA not after:            Sun 27 Apr 2025 17:41:48 +0000
asID:                     215051
IP address blocks:        2a0a:6044:8300::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 10:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e1:d0:cf:25:1a:8d:1b:93:4f:48:85:84:83:32:ce:1f:f5:7e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
        Validity
            Not Before: Apr 28 17:36:48 2024 GMT
            Not After : Apr 27 17:41:48 2025 GMT
        Subject: CN=2B0FBA81AF4B2E3F185F1B1F255A685898F62126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:9d:15:d8:42:be:57:cb:06:1a:3e:a8:14:
                    9b:bb:d6:40:c3:02:9c:6e:c8:0e:54:0f:67:e0:3b:
                    4f:f8:cb:c9:ea:d8:ac:b9:11:ce:84:3c:09:5b:61:
                    eb:b6:d2:35:3c:52:06:e9:ae:e8:43:3b:92:a0:38:
                    44:13:25:1d:11:e0:29:a1:39:7f:7c:02:2a:0d:e8:
                    e5:57:13:95:9f:13:72:da:cd:ee:d2:f1:4b:47:ec:
                    5e:97:00:1f:11:ed:55:a0:e6:3a:02:df:33:02:8a:
                    28:38:5c:d4:a5:ee:0a:f4:6b:56:82:67:45:f8:3b:
                    46:8b:c0:70:57:20:10:33:42:6e:89:54:93:a0:84:
                    2c:c9:9e:0d:47:07:9d:d4:19:0f:43:96:24:cd:82:
                    fe:b8:4c:1a:d4:4a:56:b7:a8:6f:b5:1a:d8:3b:30:
                    0a:8e:25:5a:0c:df:ba:ca:c9:b5:39:f2:a2:cf:18:
                    cb:85:74:33:2d:a8:e5:f7:a8:47:d5:bc:6b:77:b3:
                    97:f3:18:fd:23:4f:c4:41:bb:e4:91:26:06:1a:e1:
                    8d:56:96:9b:8d:a8:a6:d0:3c:7e:10:c1:3f:9d:73:
                    c5:69:0a:8e:c8:db:68:25:dc:35:4f:85:bf:6b:98:
                    14:b4:2d:71:f6:4f:2a:70:4c:ca:8e:46:33:85:37:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0F:BA:81:AF:4B:2E:3F:18:5F:1B:1F:25:5A:68:58:98:F6:21:26
            X509v3 Authority Key Identifier:
                keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383330303a3a2f34302d3430203d3e20323135303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:f1:fa:47:d0:c8:fb:ed:8f:df:db:16:6e:d0:f0:3f:aa:9b:
         61:ab:2d:ce:73:79:b4:d8:ba:92:a0:51:2c:71:d9:b4:e4:86:
         c9:84:0f:01:41:6c:48:14:e6:28:82:e7:08:0e:90:dc:ad:bb:
         73:fe:5f:d9:71:85:69:34:64:9d:fe:95:01:6b:d7:f3:51:b1:
         7d:72:37:94:b0:fc:8c:09:f5:ab:f5:bf:54:6d:e6:00:a5:b7:
         d3:1c:55:f0:30:74:b0:7b:d4:e3:23:7b:d2:e3:f5:c5:a8:42:
         f7:e3:00:22:2b:a7:bb:49:e6:e8:29:91:8d:43:a7:51:56:26:
         c4:5e:94:20:78:d7:08:3d:c8:c6:72:9a:e4:2a:36:c6:25:e4:
         ae:28:ae:20:4a:06:8e:11:19:79:cd:dc:3b:4f:0b:e8:0f:dc:
         fe:09:87:71:91:b6:89:0b:a9:13:f3:1d:e9:10:7d:e9:d5:dc:
         24:e9:5e:41:fb:0a:3a:45:41:87:c2:25:8f:b9:09:2a:34:21:
         a3:f8:25:4a:29:9d:28:10:0c:36:05:41:5d:00:f3:8a:0f:d9:
         b4:8a:2a:80:5d:ee:48:aa:9c:79:84:40:43:d0:3a:02:51:c2:
         0d:80:d2:fa:a4:ce:f8:5b:a6:e6:23:12:80:dd:62:30:a0:19:
         29:3f:e1:13
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUWOHQzyUajRuTT0iFhIMyzh/1frswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIy
RkM5MEQwOTAeFw0yNDA0MjgxNzM2NDhaFw0yNTA0MjcxNzQxNDhaMDMxMTAvBgNV
BAMTKDJCMEZCQTgxQUY0QjJFM0YxODVGMUIxRjI1NUE2ODU4OThGNjIxMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtE50V2EK+V8sGGj6oFJu71kDD
ApxuyA5UD2fgO0/4y8nq2Ky5Ec6EPAlbYeu20jU8UgbpruhDO5KgOEQTJR0R4Cmh
OX98AioN6OVXE5WfE3Laze7S8UtH7F6XAB8R7VWg5joC3zMCiig4XNSl7gr0a1aC
Z0X4O0aLwHBXIBAzQm6JVJOghCzJng1HB53UGQ9DliTNgv64TBrUSla3qG+1Gtg7
MAqOJVoM37rKybU58qLPGMuFdDMtqOX3qEfVvGt3s5fzGP0jT8RBu+SRJgYa4Y1W
lpuNqKbQPH4QwT+dc8VpCo7I22gl3DVPhb9rmBS0LXH2TypwTMqORjOFN4EXAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUKw+6ga9LLj8YXxsfJVpoWJj2ISYwHwYDVR0j
BBgwFoAUuJv6hNxa/gUHaggAuWD+oi/JDQkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2
MmNiLzEvQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIyRkM5MEQwOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CODlCRkE4NERDNUFGRTA1MDc2QTA4MDBC
OTYwRkVBMjJGQzkwRDA5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM4MzMzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz
MTM1MzAzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRIMwDQYJKoZIhvcNAQELBQADggEBADHx
+kfQyPvtj9/bFm7Q8D+qm2GrLc5zebTYupKgUSxx2bTkhsmEDwFBbEgU5iiC5wgO
kNytu3P+X9lxhWk0ZJ3+lQFr1/NRsX1yN5Sw/IwJ9av1v1Rt5gClt9McVfAwdLB7
1OMje9Lj9cWoQvfjACIrp7tJ5ugpkY1Dp1FWJsRelCB41wg9yMZymuQqNsYl5K4o
riBKBo4RGXnN3DtPC+gP3P4Jh3GRtokLqRPzHekQfenV3CTpXkH7CjpFQYfCJY+5
CSo0IaP4JUopnSgQDDYFQV0A84oP2bSKKoBd7kiqnHmEQEPQOgJRwg2A0vqkzvhb
puYjEoDdYjCgGSk/4RM=
-----END CERTIFICATE-----