Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386630303a3a2f34302d3430203d3e20323135363035.roa
File:                     326130613a363034343a386630303a3a2f34302d3430203d3e20323135363035.roa (raw, json)
Hash identifier:          oqevQnGY+7C8OVLnwfpAagRpoLNtiE11IVUe+y2p0c8=
Subject key identifier:   07:37:B6:D1:BB:E4:7C:52:B8:62:D3:CC:56:2D:49:FE:57:22:95:A5
Certificate issuer:       /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
Certificate serial:       28DD53A1A256BDF44D6011AA7848C1854A59ED9E
Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386630303a3a2f34302d3430203d3e20323135363035.roa
Signing time:             Fri 22 Mar 2024 20:20:00 +0000
ROA not before:           Fri 22 Mar 2024 20:15:00 +0000
ROA not after:            Fri 21 Mar 2025 20:20:00 +0000
asID:                     215605
IP address blocks:        2a0a:6044:8f00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 10:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:dd:53:a1:a2:56:bd:f4:4d:60:11:aa:78:48:c1:85:4a:59:ed:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09
        Validity
            Not Before: Mar 22 20:15:00 2024 GMT
            Not After : Mar 21 20:20:00 2025 GMT
        Subject: CN=0737B6D1BBE47C52B862D3CC562D49FE572295A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:87:44:69:4d:46:aa:63:5f:65:a1:54:f0:
                    26:7b:87:5e:42:e0:cd:92:53:c4:4e:29:99:8e:38:
                    5c:68:8c:1d:4a:ce:cd:c7:6a:e7:99:78:82:d1:16:
                    a8:8d:a4:7f:4a:68:47:16:1a:a4:6e:16:4b:42:6d:
                    42:05:d8:9f:7a:16:80:20:d7:b3:af:5c:b7:b3:ee:
                    4a:70:33:86:0c:31:83:42:57:2a:d3:01:e4:b2:84:
                    25:40:d7:06:19:1a:56:4f:54:ec:ab:ab:8c:40:69:
                    4c:0a:4c:15:5a:cb:0a:cb:90:88:23:9b:db:fc:2f:
                    56:39:20:74:85:93:1b:76:44:db:15:0e:68:cc:31:
                    6d:d9:25:5a:eb:d8:96:de:dd:03:af:bb:1f:61:3f:
                    35:38:33:06:10:b3:a3:53:0c:ac:a9:41:2d:38:78:
                    06:50:f4:c7:e6:ab:c8:a8:28:4d:6b:38:0b:0c:99:
                    ef:63:c0:8b:ce:47:04:c4:b2:26:66:19:f8:c6:4e:
                    8b:e2:83:92:4b:e7:ff:2b:0c:9c:6d:ae:5f:bb:d5:
                    11:b6:66:6d:19:fa:fb:03:95:12:75:88:09:31:35:
                    1a:56:78:1d:d0:8b:78:04:a5:38:f6:72:25:5e:b5:
                    d6:fa:1f:3b:3b:73:ea:0f:73:0e:cd:e4:e7:31:6e:
                    37:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:37:B6:D1:BB:E4:7C:52:B8:62:D3:CC:56:2D:49:FE:57:22:95:A5
            X509v3 Authority Key Identifier:
                keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386630303a3a2f34302d3430203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:8f:fe:4d:d4:5d:96:b6:16:a7:0d:62:f0:e6:b3:67:6c:17:
         3e:b5:6c:06:10:40:93:73:3a:08:29:cc:4f:a6:4e:64:7e:55:
         27:49:37:0d:58:37:b8:9e:18:ce:6e:76:0e:49:be:55:d6:e9:
         7f:21:be:7b:00:c0:5e:4f:05:56:10:36:fd:93:29:5e:c0:f0:
         25:69:3d:19:53:4f:8f:7e:e5:04:49:bd:ea:b8:b1:b5:6f:a0:
         aa:63:9b:f2:cc:16:e2:b6:39:e5:58:81:86:7b:bb:7c:53:b5:
         da:1d:3c:3f:9b:75:77:85:e9:e2:23:7e:d1:5f:4c:57:e6:33:
         d7:c3:cc:59:1b:cc:c2:e7:81:c4:87:9d:bc:21:91:ac:73:87:
         91:a1:0b:6e:e9:88:15:89:60:53:25:93:2b:e3:ce:2b:6c:ea:
         fb:2c:de:21:ce:89:1c:4b:66:00:5a:bc:17:0f:d7:17:8d:14:
         ee:54:6a:f2:45:ce:d9:a4:d6:fc:0f:05:54:8f:da:a7:56:cd:
         dd:ba:47:e1:06:bf:12:36:04:44:bf:82:b8:01:33:5a:8d:33:
         94:85:93:83:96:4b:04:01:d3:d5:13:55:a0:26:a0:1d:6f:a6:
         9e:37:10:e3:a0:0a:ec:04:97:13:ff:8e:2f:54:6c:db:a3:cf:
         2d:99:f3:fa
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUKN1ToaJWvfRNYBGqeEjBhUpZ7Z4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIy
RkM5MEQwOTAeFw0yNDAzMjIyMDE1MDBaFw0yNTAzMjEyMDIwMDBaMDMxMTAvBgNV
BAMTKDA3MzdCNkQxQkJFNDdDNTJCODYyRDNDQzU2MkQ0OUZFNTcyMjk1QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6YdEaU1GqmNfZaFU8CZ7h15C
4M2SU8ROKZmOOFxojB1Kzs3HaueZeILRFqiNpH9KaEcWGqRuFktCbUIF2J96FoAg
17OvXLez7kpwM4YMMYNCVyrTAeSyhCVA1wYZGlZPVOyrq4xAaUwKTBVaywrLkIgj
m9v8L1Y5IHSFkxt2RNsVDmjMMW3ZJVrr2Jbe3QOvux9hPzU4MwYQs6NTDKypQS04
eAZQ9Mfmq8ioKE1rOAsMme9jwIvORwTEsiZmGfjGTovig5JL5/8rDJxtrl+71RG2
Zm0Z+vsDlRJ1iAkxNRpWeB3Qi3gEpTj2ciVetdb6Hzs7c+oPcw7N5OcxbjfNAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUBze20bvkfFK4YtPMVi1J/lcilaUwHwYDVR0j
BBgwFoAUuJv6hNxa/gUHaggAuWD+oi/JDQkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2
MmNiLzEvQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIyRkM5MEQwOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CODlCRkE4NERDNUFGRTA1MDc2QTA4MDBC
OTYwRkVBMjJGQzkwRDA5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM4NjYzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz
MTM1MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRI8wDQYJKoZIhvcNAQELBQADggEBAHyP
/k3UXZa2FqcNYvDms2dsFz61bAYQQJNzOggpzE+mTmR+VSdJNw1YN7ieGM5udg5J
vlXW6X8hvnsAwF5PBVYQNv2TKV7A8CVpPRlTT49+5QRJveq4sbVvoKpjm/LMFuK2
OeVYgYZ7u3xTtdodPD+bdXeF6eIjftFfTFfmM9fDzFkbzMLngcSHnbwhkaxzh5Gh
C27piBWJYFMlkyvjzits6vss3iHOiRxLZgBavBcP1xeNFO5UavJFztmk1vwPBVSP
2qdWzd26R+EGvxI2BES/grgBM1qNM5SFk4OWSwQB09UTVaAmoB1vpp43EOOgCuwE
lxP/ji9UbNujzy2Z8/o=
-----END CERTIFICATE-----