Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a393630303a3a2f34302d3438203d3e20323136343535.roa
File:                     326130353a646663313a393630303a3a2f34302d3438203d3e20323136343535.roa (raw, json)
Hash identifier:          kVtqh+jP/cHqp8oFxYF6rgtM8QvydKAK5Bnzvh9o+6I=
Subject key identifier:   6E:31:6A:E4:67:1C:6D:81:E6:A5:A6:2E:9E:E7:0B:11:FF:B4:B3:3D
Certificate issuer:       /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Certificate serial:       425AF523AF2443541361260715217DADE89AB02F
Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a393630303a3a2f34302d3438203d3e20323136343535.roa
Signing time:             Mon 13 Nov 2023 00:06:29 +0000
ROA not before:           Mon 13 Nov 2023 00:01:29 +0000
ROA not after:            Mon 11 Nov 2024 00:06:29 +0000
asID:                     216455
IP address blocks:        2a05:dfc1:9600::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 20:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5a:f5:23:af:24:43:54:13:61:26:07:15:21:7d:ad:e8:9a:b0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
        Validity
            Not Before: Nov 13 00:01:29 2023 GMT
            Not After : Nov 11 00:06:29 2024 GMT
        Subject: CN=6E316AE4671C6D81E6A5A62E9EE70B11FFB4B33D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:50:9f:b1:19:4a:3e:f0:c8:90:67:91:5b:
                    86:de:14:63:c3:02:fa:90:e9:91:35:d6:a3:97:8c:
                    cc:f3:2f:34:0c:35:6d:ce:09:23:a6:9c:ec:b2:09:
                    f6:60:a5:3c:de:8a:c9:66:c9:29:36:5f:54:fd:64:
                    42:33:f4:78:81:a6:17:72:6c:c1:16:15:98:5a:4f:
                    69:ef:ac:56:10:6c:e2:18:8c:d4:15:91:ce:b3:96:
                    c3:31:cd:9c:01:8e:9c:da:bc:4e:72:11:85:9c:33:
                    19:38:dd:d6:3b:7b:a2:fb:da:57:48:d0:83:88:15:
                    5f:30:29:e9:ec:53:90:3e:29:b1:6a:8a:46:c3:b2:
                    d1:2a:b5:c4:9c:84:f7:6b:31:3b:6f:10:f6:71:4c:
                    7a:ad:87:06:77:2b:1b:c4:98:30:cc:c3:54:60:a6:
                    fd:fe:4e:4f:6c:4e:71:5a:d0:80:ba:2b:65:c4:ac:
                    fb:98:7c:37:0e:68:49:8e:d7:4c:2c:53:5a:77:45:
                    58:35:69:b5:02:c4:70:6f:13:d1:d4:84:01:00:95:
                    92:1d:11:20:5a:2e:6b:c5:a8:c5:ff:60:0b:38:c0:
                    fa:2d:75:da:18:cb:68:b9:f7:5b:8b:bc:a0:80:5c:
                    84:ee:cd:3f:c5:1b:3e:77:d3:f5:a5:b6:6f:70:39:
                    93:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:31:6A:E4:67:1C:6D:81:E6:A5:A6:2E:9E:E7:0B:11:FF:B4:B3:3D
            X509v3 Authority Key Identifier:
                keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a393630303a3a2f34302d3438203d3e20323136343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:9600::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:a1:8d:6e:ce:45:0f:6b:74:86:7c:dc:c0:8d:4e:f3:98:81:
         82:e8:6d:61:56:32:fc:20:a0:73:a2:1f:33:05:2b:32:29:53:
         0a:af:77:5d:f4:e0:52:77:6c:ef:fe:72:01:8c:a4:9d:f8:3b:
         ee:57:7c:ad:65:88:57:af:df:f7:72:1d:d2:02:0f:87:8a:2e:
         1c:3a:c9:4f:fd:8c:dd:72:bd:71:77:a1:42:88:3b:21:d2:f0:
         77:e1:fc:d2:da:3d:92:18:d7:19:5e:b9:aa:d4:c7:5a:98:16:
         c3:3e:5b:8a:ff:59:0a:66:72:c1:8f:4c:ad:85:65:a0:ea:27:
         89:41:28:bb:50:b9:fe:05:aa:e5:00:4b:50:9b:f3:f5:75:86:
         f1:ad:87:64:05:14:74:f6:57:b0:cb:3f:01:76:83:92:69:16:
         c5:6f:0e:d6:86:68:b7:82:04:57:c4:60:57:ca:67:85:73:4a:
         3b:5e:ef:d6:cc:a0:53:06:da:3f:7d:f6:b4:19:72:c5:4b:d2:
         d8:7e:e1:80:20:21:82:40:2f:81:fe:f8:b8:13:8c:0d:06:db:
         37:66:09:72:79:a7:2c:6c:06:ea:bf:ff:13:ce:df:6a:5d:05:
         f1:e5:fa:24:0e:37:19:05:cc:40:3f:5e:88:da:42:49:dc:0a:
         86:31:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----