Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383530303a3a2f34302d3438203d3e20323134383039.roa
File:                     326130613a363034343a383530303a3a2f34302d3438203d3e20323134383039.roa (raw, json)
Hash identifier:          Eb6of9KqpyESXXv0o6J21ICUwMUMnID6l85+p/+WrXM=
Subject key identifier:   A7:76:34:6D:6C:5D:18:17:FD:49:12:3B:BA:E4:59:58:CE:C5:D1:50
Certificate issuer:       /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial:       7D8A0DC36A09807590B2C04E30183F9EAD6A5F49
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383530303a3a2f34302d3438203d3e20323134383039.roa
Signing time:             Wed 29 May 2024 10:54:06 +0000
ROA not before:           Wed 29 May 2024 10:49:06 +0000
ROA not after:            Wed 28 May 2025 10:54:06 +0000
asID:                     214809
IP address blocks:        2a0a:6044:8500::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 09:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8a:0d:c3:6a:09:80:75:90:b2:c0:4e:30:18:3f:9e:ad:6a:5f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
        Validity
            Not Before: May 29 10:49:06 2024 GMT
            Not After : May 28 10:54:06 2025 GMT
        Subject: CN=A776346D6C5D1817FD49123BBAE45958CEC5D150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:cf:34:cb:82:91:f1:2a:3e:7d:e6:39:21:
                    f5:53:41:41:68:c6:d3:3b:32:b7:12:06:29:97:06:
                    ad:9d:cc:10:f6:0d:78:ac:a5:4f:f2:b9:a9:7b:d2:
                    d2:21:eb:dc:6f:a4:05:de:64:d8:6f:a6:7a:8f:80:
                    ed:ed:f1:d9:72:3c:e9:74:b7:21:e0:e5:f2:71:b7:
                    20:01:5b:c2:b1:98:4c:8e:1d:72:d2:ac:83:e7:c3:
                    96:69:d0:d9:13:c9:7a:22:36:c2:17:95:49:aa:32:
                    93:4a:96:b4:f0:69:f5:d5:47:47:ff:ad:4a:4e:17:
                    20:21:2a:fd:0f:56:00:25:c2:83:be:52:49:35:32:
                    83:0d:80:1e:25:ed:e1:7a:ae:70:61:71:c6:25:ca:
                    d1:73:1f:0d:16:0e:e5:4a:70:ca:a3:a6:df:ad:a8:
                    a5:01:d6:36:54:e9:60:0c:c1:2a:f1:fd:b7:c6:64:
                    e1:b0:06:2c:d3:16:1d:35:94:17:27:d3:0b:6f:ba:
                    d8:3e:77:76:c8:04:be:11:c2:88:31:1e:5d:49:11:
                    0c:e5:0a:09:ce:c4:e8:5b:8d:2f:6c:1e:5a:9f:cc:
                    cd:89:87:a7:03:a3:04:8c:f1:d5:ae:81:fc:86:61:
                    91:a5:2d:63:98:aa:a6:67:f8:42:7d:45:ca:31:04:
                    02:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:76:34:6D:6C:5D:18:17:FD:49:12:3B:BA:E4:59:58:CE:C5:D1:50
            X509v3 Authority Key Identifier:
                keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383530303a3a2f34302d3438203d3e20323134383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:71:60:20:ec:39:bd:12:93:6c:55:35:3d:08:ac:27:00:8e:
         42:1a:b2:40:a5:06:21:dd:25:e6:a6:b3:2a:ed:5b:07:20:df:
         f3:ee:07:4a:52:c2:8e:e8:57:31:d2:98:ba:b0:bb:fd:a1:6b:
         a6:17:86:63:74:14:31:c7:16:7d:99:c0:73:60:95:9c:e0:3e:
         41:85:54:76:3e:4a:59:ac:08:3c:95:4b:07:26:49:9a:e6:c3:
         34:8d:fa:a0:5b:4d:37:31:b4:68:9e:da:25:15:54:08:c6:67:
         9a:a1:ca:2e:fe:86:2b:f2:85:8b:58:56:26:5e:e7:b5:ef:a5:
         d3:d4:64:bb:02:46:4f:04:6b:74:53:86:be:01:b9:34:71:76:
         67:33:f8:8c:27:d1:8f:c7:6e:48:da:c7:0d:fe:cd:5d:98:aa:
         ba:5a:f2:1a:67:e2:07:a1:b1:1b:8b:16:10:50:20:43:81:e1:
         a5:8e:a6:a4:2a:91:da:41:d5:73:67:82:22:3a:fc:37:aa:c4:
         b8:fa:01:96:61:81:f7:cb:f8:aa:46:d5:b6:74:c5:e9:13:40:
         b3:cc:93:b1:62:2a:09:83:7d:7b:47:c0:63:d7:2c:12:48:32:
         a7:96:df:f5:9a:0a:36:5a:14:0a:e2:ad:76:1b:74:49:c9:e6:
         ce:1e:6d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----