Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643032303a3a2f34342d3434203d3e20323134373537.roa
File:                     326130393a353463363a643032303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier:          Mrrol0tCZIlHoJzaR0g//0jfFX73yPYcHSRUScLcC2s=
Subject key identifier:   92:2B:A9:94:69:4E:E6:2D:96:B2:D9:C3:8C:DB:0B:D2:A7:49:F9:01
Certificate issuer:       /CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Certificate serial:       3072D1868EBCC27EC7AD856DE31462F2EEA9C1EA
Authority key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643032303a3a2f34342d3434203d3e20323134373537.roa
Signing time:             Mon 30 Sep 2024 16:57:52 +0000
ROA not before:           Mon 30 Sep 2024 16:52:52 +0000
ROA not after:            Mon 29 Sep 2025 16:57:52 +0000
asID:                     214757
IP address blocks:        2a09:54c6:d020::/44 maxlen: 44

Validation:               Failed, certificate revoked on Sun 06 Oct 2024 11:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:d1:86:8e:bc:c2:7e:c7:ad:85:6d:e3:14:62:f2:ee:a9:c1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F163E1EE74384430F7A75E7448A376D89DBBE730
        Validity
            Not Before: Sep 30 16:52:52 2024 GMT
            Not After : Sep 29 16:57:52 2025 GMT
        Subject: CN=922BA994694EE62D96B2D9C38CDB0BD2A749F901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:76:ae:74:7c:de:d1:73:a1:1f:2c:b2:39:
                    a6:4f:d3:dc:cd:3f:1c:c8:c4:85:eb:b5:dc:c1:34:
                    f5:8b:f7:4d:d8:a3:47:4e:09:23:0b:52:8f:1f:66:
                    64:7b:7e:82:e1:52:21:f3:16:b2:c5:50:8f:cd:3a:
                    22:d3:31:64:2a:5e:e7:bc:a3:4c:ee:01:b6:69:30:
                    9a:77:7e:12:fd:ed:b9:29:30:72:34:47:f6:66:80:
                    a7:84:f1:4e:c0:e3:1f:96:93:b4:08:c7:71:83:e9:
                    89:49:0b:37:97:48:31:f3:c9:af:37:aa:ae:b8:d4:
                    c3:bd:a0:cd:04:c7:a6:6d:af:72:aa:f9:fe:00:26:
                    5e:9f:c3:ec:f0:e9:5f:4c:45:98:da:ad:bf:ef:21:
                    21:89:47:f6:a3:d6:bc:a8:b0:ef:bc:68:bd:6b:a6:
                    e5:fd:3c:ba:b2:ad:0c:de:06:2a:f7:50:06:c2:8b:
                    16:c4:6a:ed:01:a3:69:c2:52:09:6d:d3:42:07:de:
                    cf:9e:71:b1:b6:a5:05:da:91:48:d8:c8:76:62:91:
                    8d:67:e6:93:d6:f8:c9:aa:78:ba:be:41:c3:e4:d0:
                    30:31:56:43:3e:95:99:5c:5e:90:1c:68:0c:c7:54:
                    38:c8:01:bf:06:ef:fc:59:da:64:72:9d:d9:4f:c7:
                    dc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2B:A9:94:69:4E:E6:2D:96:B2:D9:C3:8C:DB:0B:D2:A7:49:F9:01
            X509v3 Authority Key Identifier:
                keyid:F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643032303a3a2f34342d3434203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:d020::/44

    Signature Algorithm: sha256WithRSAEncryption
         c6:78:51:e4:aa:dd:80:c2:1a:c7:60:8f:d6:99:e1:7c:43:34:
         50:69:66:7f:c8:22:be:64:5b:c2:6a:1e:15:71:75:16:71:52:
         ac:aa:bc:f1:51:97:79:53:f2:ae:46:52:64:f0:5a:86:1e:b8:
         d8:65:e5:6d:3e:97:e3:e6:62:24:e4:26:11:bd:54:da:ad:91:
         db:72:58:c5:d2:e1:0c:c0:04:59:37:ea:e9:66:1b:25:bf:29:
         39:91:c4:a0:51:af:a6:bf:4d:5a:6c:6e:6a:87:19:21:90:dc:
         1c:84:4f:7c:8a:85:99:34:f2:b9:ef:39:a6:6d:8c:af:d1:a7:
         5b:0d:e9:d0:fe:73:91:cf:e9:bd:91:19:1c:6a:fd:c9:7f:5e:
         11:9e:29:1d:ac:10:ed:f4:42:fb:a1:80:66:15:f7:2d:d1:e0:
         5e:62:1f:a6:cf:6a:75:5f:bd:34:59:ac:aa:9e:df:97:fa:64:
         07:8c:5d:9b:ab:02:c8:e7:9c:46:a6:80:fc:5a:56:5b:9b:61:
         e6:53:39:09:7e:c1:53:15:24:f7:cc:e7:54:ff:8e:2f:8e:7c:
         4f:9e:a2:b4:21:e2:23:03:94:4e:54:f9:5b:5f:a3:de:38:d1:
         62:35:79:ab:2d:74:8d:ac:42:52:b4:1f:7a:b6:d7:5f:c4:13:
         77:af:ec:39
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUMHLRho68wn7HrYVt4xRi8u6pweowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE2M0UxRUU3NDM4NDQzMEY3QTc1RTc0NDhBMzc2RDg5
REJCRTczMDAeFw0yNDA5MzAxNjUyNTJaFw0yNTA5MjkxNjU3NTJaMDMxMTAvBgNV
BAMTKDkyMkJBOTk0Njk0RUU2MkQ5NkIyRDlDMzhDREIwQkQyQTc0OUY5MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWnaudHze0XOhHyyyOaZP09zN
PxzIxIXrtdzBNPWL903Yo0dOCSMLUo8fZmR7foLhUiHzFrLFUI/NOiLTMWQqXue8
o0zuAbZpMJp3fhL97bkpMHI0R/ZmgKeE8U7A4x+Wk7QIx3GD6YlJCzeXSDHzya83
qq641MO9oM0Ex6Ztr3Kq+f4AJl6fw+zw6V9MRZjarb/vISGJR/aj1ryosO+8aL1r
puX9PLqyrQzeBir3UAbCixbEau0Bo2nCUglt00IH3s+ecbG2pQXakUjYyHZikY1n
5pPW+MmqeLq+QcPk0DAxVkM+lZlcXpAcaAzHVDjIAb8G7/xZ2mRyndlPx9yTAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUkiuplGlO5i2WstnDjNsL0qdJ+QEwHwYDVR0j
BBgwFoAU8WPh7nQ4RDD3p150SKN22J275zAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJlNDNkOWUtZTQ0MC00N2FlLWE3YmMtMTliNzk5M2Nj
ZjE0LzEvRjE2M0UxRUU3NDM4NDQzMEY3QTc1RTc0NDhBMzc2RDg5REJCRTczMC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9GMTYzRTFFRTc0Mzg0NDMwRjdBNzVFNzQ0
OEEzNzZEODlEQkJFNzMwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS82YmU0M2Q5ZS1lNDQwLTQ3YWUtYTdiYy0xOWI3OTkzY2NmMTQvMS8zMjYxMzAz
OTNhMzUzNDYzMzYzYTY0MzAzMjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz
MTM0MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcEKglUxtAgMA0GCSqGSIb3DQEBCwUAA4IBAQDG
eFHkqt2AwhrHYI/WmeF8QzRQaWZ/yCK+ZFvCah4VcXUWcVKsqrzxUZd5U/KuRlJk
8FqGHrjYZeVtPpfj5mIk5CYRvVTarZHbcljF0uEMwARZN+rpZhslvyk5kcSgUa+m
v01abG5qhxkhkNwchE98ioWZNPK57zmmbYyv0adbDenQ/nORz+m9kRkcav3Jf14R
nikdrBDt9EL7oYBmFfct0eBeYh+mz2p1X700Wayqnt+X+mQHjF2bqwLI55xGpoD8
WlZbm2HmUzkJfsFTFST3zOdU/44vjnxPnqK0IeIjA5ROVPlbX6PeONFiNXmrLXSN
rEJStB96ttdfxBN3r+w5
-----END CERTIFICATE-----