Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353030303a3a2f33362d3438203d3e20323136343535.roa
File:                     326130373a353463373a353030303a3a2f33362d3438203d3e20323136343535.roa (raw, json)
Hash identifier:          fA9Nb40kaiLzdemJPTbjFtRNRFqzLLLrhFY0wgnybSI=
Subject key identifier:   0A:39:B5:44:CA:C5:9E:C4:0A:82:78:96:31:38:FA:8C:71:81:59:FC
Certificate issuer:       /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
Certificate serial:       299AB42827743437AEA39FA6BFFF0234C536610E
Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353030303a3a2f33362d3438203d3e20323136343535.roa
Signing time:             Thu 22 Feb 2024 01:03:31 +0000
ROA not before:           Thu 22 Feb 2024 00:58:31 +0000
ROA not after:            Thu 20 Feb 2025 01:03:31 +0000
asID:                     216455
IP address blocks:        2a07:54c7:5000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 20:58:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9a:b4:28:27:74:34:37:ae:a3:9f:a6:bf:ff:02:34:c5:36:61:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
        Validity
            Not Before: Feb 22 00:58:31 2024 GMT
            Not After : Feb 20 01:03:31 2025 GMT
        Subject: CN=0A39B544CAC59EC40A8278963138FA8C718159FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:e3:88:59:fa:1a:fa:8e:91:85:f2:a4:84:
                    1c:b2:49:02:85:43:65:20:a9:a1:79:b7:63:fd:eb:
                    61:f1:b0:e0:d4:ba:76:38:29:5f:7e:6b:c4:83:35:
                    ed:fa:3c:90:57:7f:9f:43:db:05:9e:f7:0e:5c:de:
                    b2:b3:1a:9e:c2:fe:f8:69:c8:13:8e:cf:42:d2:86:
                    ac:35:78:a9:09:03:99:a8:c7:6e:5a:cb:fd:40:7c:
                    0a:b5:b9:e8:c8:b7:cf:0d:6e:06:73:a8:fd:12:18:
                    d7:ac:a2:f9:1f:c5:b7:59:9d:08:35:20:20:38:4f:
                    34:71:ee:20:c7:40:85:a3:54:c1:ba:c3:07:72:33:
                    68:d3:4f:03:75:27:fc:25:e0:47:ba:45:2b:d2:e9:
                    b4:2f:a4:b0:7b:86:00:74:9c:f3:0f:2c:61:ca:b8:
                    1c:26:a5:fb:03:67:e0:e2:f2:15:bb:34:cb:86:ee:
                    2a:ab:a8:68:c4:4b:21:13:2f:3b:3f:fa:df:b2:d1:
                    7c:53:20:92:86:ad:93:f7:6f:54:a2:f8:8e:54:61:
                    a7:77:36:7d:82:74:a4:20:77:8b:f9:81:25:e9:ea:
                    51:5e:f9:8e:71:a3:6e:78:94:c4:cd:e3:10:1c:c4:
                    d8:89:5e:17:f9:2d:89:4c:c7:e7:b1:52:14:03:d2:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:39:B5:44:CA:C5:9E:C4:0A:82:78:96:31:38:FA:8C:71:81:59:FC
            X509v3 Authority Key Identifier:
                keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353030303a3a2f33362d3438203d3e20323136343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         86:4c:6b:e4:70:d6:83:9d:31:a2:da:6e:a0:43:98:f2:0d:62:
         56:ed:6d:14:9a:b0:c7:f4:95:5b:af:b9:77:7c:9a:db:ce:f0:
         12:99:9e:e0:ff:b3:29:1a:b1:4d:57:bb:d9:09:36:ca:22:a4:
         bc:08:fd:89:c0:d2:ca:1e:e8:16:7a:48:68:aa:df:fe:e5:6e:
         16:a4:f5:7b:1f:ab:64:6d:1f:0f:d2:71:ec:f1:1f:58:b4:2b:
         8d:7e:34:eb:4b:e0:f6:94:42:2d:ef:b3:72:a8:69:75:a7:65:
         5f:d1:0f:e3:eb:f6:08:f7:3f:75:3a:5b:db:98:8f:95:a2:83:
         f4:63:9f:83:48:98:49:5b:69:fa:bd:89:48:5b:76:80:88:44:
         8e:77:14:6a:21:9b:df:90:87:f7:a0:fa:01:16:64:7e:01:9d:
         a1:53:20:31:ab:cd:e3:7b:7d:90:36:42:b8:60:c2:4a:c0:d5:
         6f:61:0c:98:59:c3:1f:a0:cb:83:d1:55:19:e8:86:0c:11:3f:
         4a:f7:70:a8:41:b3:88:18:9e:aa:31:54:02:dc:d9:49:43:b4:
         3b:86:29:8a:41:8e:3f:1e:d6:71:89:19:5e:7c:dc:81:3e:4c:
         b6:00:d5:84:bd:8c:1d:b5:fd:cb:33:61:3b:f4:a3:d5:1d:2c:
         c7:c6:b7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----