Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353930313a3a2f34382d3438203d3e20323136343535.roa
File:                     326130373a353463373a353930313a3a2f34382d3438203d3e20323136343535.roa (raw, json)
Hash identifier:          KB9mhr2DZdm89luMaaPYVxlNAmlh40L9BUZkmzGlw3Y=
Subject key identifier:   F8:C9:10:1D:8B:5F:FD:88:43:CF:DF:F4:C9:94:42:91:83:E0:8D:97
Certificate issuer:       /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
Certificate serial:       2D1F924DA7B5C0EF3F9FCFC1905B9925A20A08A3
Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353930313a3a2f34382d3438203d3e20323136343535.roa
Signing time:             Tue 26 Dec 2023 02:08:57 +0000
ROA not before:           Tue 26 Dec 2023 02:03:57 +0000
ROA not after:            Tue 24 Dec 2024 02:08:57 +0000
asID:                     216455
IP address blocks:        2a07:54c7:5901::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 12:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1f:92:4d:a7:b5:c0:ef:3f:9f:cf:c1:90:5b:99:25:a2:0a:08:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5
        Validity
            Not Before: Dec 26 02:03:57 2023 GMT
            Not After : Dec 24 02:08:57 2024 GMT
        Subject: CN=F8C9101D8B5FFD8843CFDFF4C994429183E08D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:b8:f8:e5:c3:c6:ac:42:fa:33:22:c4:d5:
                    cb:25:76:25:c1:75:58:fb:6f:4f:71:0b:4a:22:44:
                    a3:b5:57:5e:f6:26:eb:c6:2c:0f:9f:f0:2c:5e:18:
                    55:5c:ec:39:70:0f:46:d7:46:f0:4b:0f:bc:ba:f6:
                    c5:5c:b8:3c:ca:8a:5c:2b:37:fd:3e:df:55:af:5c:
                    79:4c:af:c0:59:77:21:f9:90:21:26:f0:05:eb:a3:
                    a8:e1:9e:77:35:08:ba:5f:fa:c7:bc:cf:18:f4:08:
                    c1:b3:41:f1:b5:c1:c6:fb:87:d4:53:df:8d:a2:c9:
                    bc:ae:04:b7:5c:bd:b7:44:b4:36:78:20:6a:2d:07:
                    45:93:c6:09:c4:64:9a:88:37:26:8e:06:1a:ad:fd:
                    3a:62:81:1c:7f:cf:fc:5e:58:bf:42:86:07:07:10:
                    62:e4:82:f4:84:2b:60:74:ed:05:bf:cb:82:82:68:
                    da:a8:ad:8a:aa:03:1d:5f:9c:e5:e6:24:06:f7:f1:
                    50:ae:d4:bb:a7:b8:bf:20:d6:b1:87:30:12:34:c5:
                    54:3a:e2:64:e8:75:66:ba:03:da:5f:3f:f7:58:01:
                    3b:a6:24:90:f2:ee:c5:a4:a4:e1:d7:9c:34:b4:eb:
                    a4:f0:37:72:a2:20:cd:7f:8f:69:5d:49:00:38:c1:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C9:10:1D:8B:5F:FD:88:43:CF:DF:F4:C9:94:42:91:83:E0:8D:97
            X509v3 Authority Key Identifier:
                keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/326130373a353463373a353930313a3a2f34382d3438203d3e20323136343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:5901::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:40:45:07:47:e3:52:a7:c9:ec:09:de:1f:53:4e:fc:01:f9:
         2e:df:27:c9:22:ba:71:81:44:6f:fe:b4:f9:5e:43:68:86:89:
         00:b2:8b:0c:c2:46:f0:3b:f8:0e:e0:d7:e8:6f:a0:d6:61:ee:
         09:99:c4:3f:a8:8d:ab:08:7f:49:2e:20:d3:1a:35:cb:69:c9:
         62:7e:01:92:e4:a2:53:f9:87:34:60:69:c8:b2:a8:dd:5f:cc:
         83:ed:a1:b2:35:42:16:26:ee:db:95:2d:55:9f:5e:1d:b7:f8:
         33:4c:0f:f3:06:93:e7:46:fa:3f:d8:75:c6:51:f1:f6:a0:11:
         99:62:56:38:ea:9e:d1:75:90:25:7d:62:2c:bd:7e:1a:01:14:
         05:57:d7:32:ed:42:ca:6f:f2:4e:4a:f6:78:05:4a:5d:98:eb:
         bb:d6:36:67:d1:86:1c:43:c4:7f:48:64:37:64:ac:46:91:00:
         8b:e6:15:2b:8d:15:c6:42:eb:75:e7:29:dd:25:62:08:ba:e3:
         98:0a:e0:bd:b1:2e:3f:a9:30:e0:74:a9:22:91:22:57:fa:ca:
         ce:ca:4f:18:94:43:a7:f0:98:f2:f7:8c:0b:db:66:56:ff:b3:
         6e:a0:ae:57:4b:42:5a:a9:da:08:72:de:d7:c4:2b:5e:e6:da:
         bf:d3:b3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----