Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383630303a3a2f34302d3430203d3e20323135363035.roa
File:                     326130613a363034343a383630303a3a2f34302d3430203d3e20323135363035.roa (raw, json)
Hash identifier:          eVXKrdS8tOs07/TU4ZTPE08ZXD+Bwp5SWrhz825pcik=
Subject key identifier:   29:D0:0C:CC:10:BB:5C:59:CA:89:F7:28:C7:DB:2A:15:1D:93:95:8E
Certificate issuer:       /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial:       1D7C7012FA667D00F60A1630693D770754BBA4FE
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383630303a3a2f34302d3430203d3e20323135363035.roa
Signing time:             Tue 28 May 2024 18:56:27 +0000
ROA not before:           Tue 28 May 2024 18:51:27 +0000
ROA not after:            Tue 27 May 2025 18:56:27 +0000
asID:                     215605
IP address blocks:        2a0a:6044:8600::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 10:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7c:70:12:fa:66:7d:00:f6:0a:16:30:69:3d:77:07:54:bb:a4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
        Validity
            Not Before: May 28 18:51:27 2024 GMT
            Not After : May 27 18:56:27 2025 GMT
        Subject: CN=29D00CCC10BB5C59CA89F728C7DB2A151D93958E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:4e:fd:43:f8:1c:ee:ed:a8:ea:eb:45:0c:
                    1a:6f:82:ed:cd:90:fc:06:08:3c:00:25:8e:31:38:
                    f5:f5:5c:7b:49:6e:df:9c:14:0d:f1:4a:e5:eb:2b:
                    0a:a2:2c:cd:38:a1:21:06:13:6d:ee:50:97:78:db:
                    8a:76:83:31:17:4e:89:96:a1:d5:1a:27:1e:83:ea:
                    83:2f:2e:ea:69:11:70:2e:81:68:70:7f:fa:ff:55:
                    9d:7a:ef:54:8f:c1:22:4b:26:e5:65:11:ac:b8:35:
                    0c:33:dc:de:cc:6b:70:dd:0b:d5:e1:67:e4:5e:d4:
                    13:72:89:8d:b0:cb:5b:33:e8:0a:7f:a1:77:d5:4a:
                    5f:7c:94:4b:da:c4:2b:be:96:d9:22:03:3a:2d:85:
                    aa:16:b6:57:e5:03:95:6d:88:3d:38:a8:bf:b5:ac:
                    6d:78:7c:67:42:c1:64:25:ca:bc:63:f2:19:cf:06:
                    a6:bf:e2:2b:54:3f:77:e3:d0:2c:bf:01:c2:4c:42:
                    b2:28:c1:3c:90:81:58:41:0b:6e:68:4b:0b:08:c2:
                    56:c0:c5:7a:da:9b:3b:c0:80:ab:7d:67:73:4d:b0:
                    32:06:84:23:e8:e9:f9:46:9b:23:c4:0d:05:49:fb:
                    99:bf:59:a9:61:bc:3d:d3:49:eb:39:c4:47:73:00:
                    59:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D0:0C:CC:10:BB:5C:59:CA:89:F7:28:C7:DB:2A:15:1D:93:95:8E
            X509v3 Authority Key Identifier:
                keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a383630303a3a2f34302d3430203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:bf:d4:87:17:81:a9:3f:a3:fa:e7:57:14:85:0a:b6:08:72:
         77:89:c0:fb:b4:16:b8:d7:fa:7c:a2:85:db:4f:8d:f9:46:48:
         0d:37:83:05:7e:0d:37:2a:4a:e9:2d:6d:e6:ca:e3:ee:d2:f3:
         60:30:ae:38:79:55:47:14:d7:85:d4:da:0d:8a:07:4f:5a:06:
         38:7a:34:c9:64:b4:73:c5:13:71:97:ff:f0:1e:99:31:f8:02:
         39:43:1d:a0:cb:d7:cd:25:b2:46:70:e6:ea:7b:ed:ea:f5:42:
         04:77:fd:61:ee:1b:a3:3b:fd:3f:4a:5e:82:dc:c8:fd:d7:2c:
         5d:0a:6d:d3:0c:aa:6d:e4:1e:a3:cd:bb:a4:4e:7e:a8:a8:c4:
         ab:c1:0e:bf:e0:59:d4:fe:51:b6:9e:c2:b6:aa:6b:8d:48:7e:
         fd:59:43:2f:1c:6c:b1:7a:b9:c0:10:a4:6d:2e:91:d6:44:96:
         c9:99:8a:1b:49:d1:0a:cf:a9:a4:8f:34:1b:4e:bf:e0:b0:2c:
         9a:60:25:cd:5b:d7:bc:2c:e3:c1:90:2b:b8:13:b7:a3:4a:d1:
         cc:11:2f:41:24:ac:95:d5:6d:a8:26:bd:e1:5c:1a:4b:2a:99:
         46:27:74:16:3e:02:bb:c3:80:30:4c:49:7e:67:2a:24:f0:52:
         45:51:4c:b4
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUHXxwEvpmfQD2ChYwaT13B1S7pP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIy
RkM5MEQwOTAeFw0yNDA1MjgxODUxMjdaFw0yNTA1MjcxODU2MjdaMDMxMTAvBgNV
BAMTKDI5RDAwQ0NDMTBCQjVDNTlDQTg5RjcyOEM3REIyQTE1MUQ5Mzk1OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcDk79Q/gc7u2o6utFDBpvgu3N
kPwGCDwAJY4xOPX1XHtJbt+cFA3xSuXrKwqiLM04oSEGE23uUJd424p2gzEXTomW
odUaJx6D6oMvLuppEXAugWhwf/r/VZ1671SPwSJLJuVlEay4NQwz3N7Ma3DdC9Xh
Z+Re1BNyiY2wy1sz6Ap/oXfVSl98lEvaxCu+ltkiAzothaoWtlflA5VtiD04qL+1
rG14fGdCwWQlyrxj8hnPBqa/4itUP3fj0Cy/AcJMQrIowTyQgVhBC25oSwsIwlbA
xXramzvAgKt9Z3NNsDIGhCPo6flGmyPEDQVJ+5m/WalhvD3TSes5xEdzAFkVAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUKdAMzBC7XFnKifcox9sqFR2TlY4wHwYDVR0j
BBgwFoAUuJv6hNxa/gUHaggAuWD+oi/JDQkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2
MmNiLzEvQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIyRkM5MEQwOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CODlCRkE4NERDNUFGRTA1MDc2QTA4MDBC
OTYwRkVBMjJGQzkwRDA5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM4MzYzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz
MTM1MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRIYwDQYJKoZIhvcNAQELBQADggEBAC2/
1IcXgak/o/rnVxSFCrYIcneJwPu0FrjX+nyihdtPjflGSA03gwV+DTcqSuktbebK
4+7S82Awrjh5VUcU14XU2g2KB09aBjh6NMlktHPFE3GX//AemTH4AjlDHaDL180l
skZw5up77er1QgR3/WHuG6M7/T9KXoLcyP3XLF0KbdMMqm3kHqPNu6ROfqioxKvB
Dr/gWdT+Ubaewraqa41Ifv1ZQy8cbLF6ucAQpG0ukdZElsmZihtJ0QrPqaSPNBtO
v+CwLJpgJc1b17ws48GQK7gTt6NK0cwRL0EkrJXVbagmveFcGksqmUYndBY+ArvD
gDBMSX5nKiTwUkVRTLQ=
-----END CERTIFICATE-----