Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131303a3a2f34342d3434203d3e20323135313437.roa
File:                     326130363a313238333a633131303a3a2f34342d3434203d3e20323135313437.roa (raw, json)
Hash identifier:          Inap52a8v+7lZSU2U9FJt7+07oCq4V2h+j6RGecoYbQ=
Subject key identifier:   19:29:E6:D6:81:98:00:A8:97:98:59:FC:8E:B9:B1:61:36:6A:3C:13
Certificate issuer:       /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial:       5FC85A838317E1073CCA6FEB1A3A3549343A61C3
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131303a3a2f34342d3434203d3e20323135313437.roa
Signing time:             Fri 20 Sep 2024 16:26:25 +0000
ROA not before:           Fri 20 Sep 2024 16:21:25 +0000
ROA not after:            Fri 19 Sep 2025 16:26:25 +0000
asID:                     215147
IP address blocks:        2a06:1283:c110::/44 maxlen: 44

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 08:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c8:5a:83:83:17:e1:07:3c:ca:6f:eb:1a:3a:35:49:34:3a:61:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
        Validity
            Not Before: Sep 20 16:21:25 2024 GMT
            Not After : Sep 19 16:26:25 2025 GMT
        Subject: CN=1929E6D6819800A8979859FC8EB9B161366A3C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:f9:68:8c:c8:7e:43:d0:71:dc:2a:53:b3:
                    97:30:9d:09:68:fd:01:f2:c6:ad:b4:32:a4:c4:06:
                    6b:67:4f:9f:5c:54:3b:85:ae:2a:c4:4e:8f:f8:bb:
                    7d:30:10:bf:2a:71:15:1c:0a:5b:e7:f6:88:66:b2:
                    3f:3b:59:b0:42:9f:f5:50:9d:4b:b8:81:c9:e4:e8:
                    af:fc:f0:3b:21:47:88:20:55:c2:8f:bf:6b:47:7b:
                    7b:51:65:5f:a3:ac:2c:99:f3:c4:2e:3e:c0:72:1d:
                    64:1a:98:1e:9f:04:08:c2:2a:cc:af:ab:06:43:d7:
                    65:41:06:8c:2c:49:f2:d4:de:56:c0:e2:68:32:2a:
                    61:1f:04:96:a7:20:02:8d:9f:d9:3e:6c:21:bb:53:
                    9e:71:f1:b7:78:08:4f:e2:15:61:27:70:84:ff:f6:
                    cd:3f:0b:a9:8c:fe:23:a5:25:eb:4f:13:9f:4c:61:
                    62:57:32:98:a7:15:a1:d8:83:a9:aa:ba:d2:4b:71:
                    c9:09:c3:04:bd:14:ff:25:b8:01:7d:de:90:d3:54:
                    4f:58:cc:52:61:fd:53:98:f0:39:44:4c:38:e9:e8:
                    aa:9f:fa:9e:b4:7b:2d:56:1b:2c:27:45:f5:21:1a:
                    21:10:05:62:3a:f2:b3:c2:f0:4e:b1:ab:5f:f4:28:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:29:E6:D6:81:98:00:A8:97:98:59:FC:8E:B9:B1:61:36:6A:3C:13
            X509v3 Authority Key Identifier:
                keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131303a3a2f34342d3434203d3e20323135313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c110::/44

    Signature Algorithm: sha256WithRSAEncryption
         6e:d7:93:6e:36:75:13:5b:fb:f5:a6:79:ef:f1:a7:e9:af:d8:
         0c:63:03:0a:34:43:de:a3:a5:f6:de:4c:4e:8f:a2:68:bc:a1:
         d3:16:ab:f5:1a:a2:e0:d3:5c:5b:05:09:a0:77:3e:2a:1e:15:
         bd:06:2d:54:6e:39:c2:44:48:93:ad:ec:9a:62:55:2d:07:a3:
         bb:66:da:94:dc:1a:b2:c9:1f:85:61:d7:d3:ce:95:c1:fd:b9:
         a3:9a:20:7c:19:46:a2:3e:bc:a9:d3:d0:de:86:4b:d1:e7:38:
         2c:f6:31:4e:68:42:84:82:89:12:0d:bb:d1:d0:fb:7a:0d:e3:
         ac:62:45:b9:eb:7c:8b:c0:83:63:ee:60:d2:04:52:5f:55:45:
         d1:e4:9e:24:9e:b8:cb:d6:69:79:37:74:a7:e0:bb:96:d2:d0:
         0a:81:54:8b:69:6a:cd:8c:56:b0:75:0a:13:b9:e0:f2:2c:e9:
         3f:c2:f3:42:1c:46:a8:e3:84:a3:38:f8:15:1b:9e:62:88:ef:
         3b:3e:49:b6:48:42:4c:5c:3a:bc:f6:ce:b4:43:49:04:80:35:
         ff:6a:df:1f:ca:49:14:e4:46:2d:07:b9:13:0b:92:e6:56:5a:
         e9:30:b5:a4:cc:ca:79:31:22:58:95:f0:96:f0:a6:b4:2c:f5:
         73:a1:40:5b
-----BEGIN CERTIFICATE-----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