Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383530303a3a2f34302d3438203d3e20323136343535.roa
File:                     326130353a646663313a383530303a3a2f34302d3438203d3e20323136343535.roa (raw, json)
Hash identifier:          ycsytf2YacLNRy9PCbjzwzlmD1v8Qf/u/XjwiEBtaHk=
Subject key identifier:   32:61:E6:6D:4C:76:A1:29:E9:8D:35:A0:51:CB:02:1E:C7:30:A7:01
Certificate issuer:       /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Certificate serial:       15088BF6A20BA41551B7B2D4062786C63DC15DE2
Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383530303a3a2f34302d3438203d3e20323136343535.roa
Signing time:             Mon 13 Nov 2023 00:08:09 +0000
ROA not before:           Mon 13 Nov 2023 00:03:09 +0000
ROA not after:            Mon 11 Nov 2024 00:08:09 +0000
asID:                     216455
IP address blocks:        2a05:dfc1:8500::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 19:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:08:8b:f6:a2:0b:a4:15:51:b7:b2:d4:06:27:86:c6:3d:c1:5d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
        Validity
            Not Before: Nov 13 00:03:09 2023 GMT
            Not After : Nov 11 00:08:09 2024 GMT
        Subject: CN=3261E66D4C76A129E98D35A051CB021EC730A701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:38:f8:9b:71:db:72:77:58:0d:a5:aa:e5:de:
                    91:46:84:3a:12:9d:a3:6d:86:37:f1:2c:58:4d:f2:
                    72:0d:e9:88:a6:72:21:a8:8f:c6:23:a7:c2:05:3c:
                    aa:ec:e4:ae:16:4f:9b:3f:04:8c:c4:1e:84:59:b2:
                    fc:af:d4:1e:76:18:a3:ad:67:75:a8:9a:11:95:7e:
                    42:ec:09:c8:0f:03:3e:eb:82:58:e4:e3:d0:cb:58:
                    54:9d:42:d4:77:0a:01:cc:0d:d0:d9:bf:6c:68:1e:
                    74:d3:bb:a1:d3:f1:5e:d9:4e:d8:2d:16:9e:7e:75:
                    ba:31:cb:59:9b:06:fd:15:82:ad:87:dd:88:ba:9e:
                    6f:a5:38:a4:44:d0:82:dc:c8:0c:a2:08:3f:17:33:
                    07:8f:ba:13:f6:ff:6d:55:0a:fb:66:ea:f7:85:37:
                    02:c5:a5:4b:cd:0d:72:10:33:69:41:e7:63:5b:a2:
                    53:07:c3:5a:56:a2:9b:78:3b:e2:7d:cb:4b:1c:ee:
                    1e:2b:d0:cc:8c:9c:97:5c:a5:14:46:af:3e:26:bc:
                    30:09:cb:8e:15:b6:71:27:6b:4f:d0:03:1b:0b:b6:
                    c1:e6:31:eb:c1:6d:f5:21:78:42:71:18:9a:68:4f:
                    0c:c1:d7:2f:2d:d6:6f:49:ca:d3:af:c6:87:bc:4f:
                    2b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:61:E6:6D:4C:76:A1:29:E9:8D:35:A0:51:CB:02:1E:C7:30:A7:01
            X509v3 Authority Key Identifier:
                keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383530303a3a2f34302d3438203d3e20323136343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:ae:ba:57:ae:98:cb:6e:81:57:c7:fe:d0:91:67:a4:2c:39:
         7b:c7:e1:37:5f:28:87:4a:86:e1:92:10:f3:b5:ed:c6:99:04:
         7b:36:71:b8:74:d2:c1:57:3c:ea:66:88:8e:c7:bf:95:9a:8f:
         92:86:fc:f7:b5:99:06:80:ad:36:5e:a7:36:bc:c7:41:09:0a:
         36:6b:fe:ba:61:54:9d:51:f5:eb:8f:ea:af:24:f4:3e:90:c4:
         0f:df:11:7b:9e:a7:61:c9:6f:d6:65:d8:3b:44:3e:20:d9:d6:
         3f:49:92:57:02:77:ee:7e:cb:5b:f3:6e:83:41:79:c3:67:c7:
         5c:9b:f4:c3:7e:2e:71:3a:f2:f8:2c:88:2b:9e:1b:56:8c:20:
         f5:3d:9f:be:79:26:4b:ad:3f:67:e3:9e:02:4a:48:ee:37:ec:
         92:e5:31:0f:05:24:0b:eb:8d:fd:6e:2c:c3:62:83:0d:c0:3a:
         43:32:21:6b:cb:4d:d3:c5:c8:ce:67:71:73:fa:4c:77:a8:1c:
         3d:e4:29:d7:c8:ae:72:a7:7c:99:79:2a:a7:b2:2d:a8:f9:92:
         05:31:ac:87:f3:2c:d5:eb:ca:e1:0c:5f:33:b3:44:d2:2f:1e:
         d4:73:6d:3d:1d:62:78:6e:6f:8d:f1:97:a8:9c:99:d2:34:29:
         2d:d2:ef:5f
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIUFQiL9qILpBVRt7LUBieGxj3BXeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwNUE1MEZFRUMwNDJDOTE3RDhFRjJENzdEMUQyNDQ4
ODQ4QzBGOTAeFw0yMzExMTMwMDAzMDlaFw0yNDExMTEwMDA4MDlaMDMxMTAvBgNV
BAMTKDMyNjFFNjZENEM3NkExMjlFOThEMzVBMDUxQ0IwMjFFQzczMEE3MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkOPibcdtyd1gNparl3pFGhDoS
naNthjfxLFhN8nIN6YimciGoj8Yjp8IFPKrs5K4WT5s/BIzEHoRZsvyv1B52GKOt
Z3WomhGVfkLsCcgPAz7rgljk49DLWFSdQtR3CgHMDdDZv2xoHnTTu6HT8V7ZTtgt
Fp5+dboxy1mbBv0Vgq2H3Yi6nm+lOKRE0ILcyAyiCD8XMwePuhP2/21VCvtm6veF
NwLFpUvNDXIQM2lB52NbolMHw1pWopt4O+J9y0sc7h4r0MyMnJdcpRRGrz4mvDAJ
y44VtnEna0/QAxsLtsHmMevBbfUheEJxGJpoTwzB1y8t1m9JytOvxoe8TyvZAgMB
AAGjggJfMIICWzAdBgNVHQ4EFgQUMmHmbUx2oSnpjTWgUcsCHscwpwEwHwYDVR0j
BBgwFoAUEwWlD+7AQskX2O8td9HSRIhIwPkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1
NjRhLzEvMTMwNUE1MEZFRUMwNDJDOTE3RDhFRjJENzdEMUQyNDQ4ODQ4QzBGOS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzEzMDVBNTBGRUVDMDQy
QzkxN0Q4RUYyRDc3RDFEMjQ0ODg0OEMwRjkuY2VyMIG3BggrBgEFBQcBCwSBqjCB
pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0
YS8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzgzNTMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzMjMxMzYzNDM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BhTANBgkqhkiG9w0B
AQsFAAOCAQEAKK66V66Yy26BV8f+0JFnpCw5e8fhN18oh0qG4ZIQ87XtxpkEezZx
uHTSwVc86maIjse/lZqPkob897WZBoCtNl6nNrzHQQkKNmv+umFUnVH164/qryT0
PpDED98Re56nYclv1mXYO0Q+INnWP0mSVwJ37n7LW/Nug0F5w2fHXJv0w34ucTry
+CyIK54bVowg9T2fvnkmS60/Z+OeAkpI7jfskuUxDwUkC+uN/W4sw2KDDcA6QzIh
a8tN08XIzmdxc/pMd6gcPeQp18iucqd8mXkqp7ItqPmSBTGsh/Ms1evK4QxfM7NE
0i8e1HNtPR1ieG5vjfGXqJyZ0jQpLdLvXw==
-----END CERTIFICATE-----