Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643033303a3a2f34342d3434203d3e20323134373537.roa
File:                     326130393a353463363a643033303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier:          5tIN8aTMXoAP2WprJ4Wy8vb0TQ7JnykFIVPqPVfUuEM=
Subject key identifier:   72:71:5A:15:B2:13:77:71:2A:32:94:AB:6C:EE:38:A6:27:7E:95:C6
Certificate issuer:       /CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Certificate serial:       3AD3C82DCF24D6EC943E87EE1ADC7093D8220CB5
Authority key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643033303a3a2f34342d3434203d3e20323134373537.roa
Signing time:             Mon 30 Sep 2024 16:57:53 +0000
ROA not before:           Mon 30 Sep 2024 16:52:53 +0000
ROA not after:            Mon 29 Sep 2025 16:57:53 +0000
asID:                     214757
IP address blocks:        2a09:54c6:d030::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 18:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d3:c8:2d:cf:24:d6:ec:94:3e:87:ee:1a:dc:70:93:d8:22:0c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F163E1EE74384430F7A75E7448A376D89DBBE730
        Validity
            Not Before: Sep 30 16:52:53 2024 GMT
            Not After : Sep 29 16:57:53 2025 GMT
        Subject: CN=72715A15B21377712A3294AB6CEE38A6277E95C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:f4:cb:eb:24:86:9b:23:9a:8c:77:9c:b7:
                    5a:77:bc:ca:df:a4:9e:3a:69:78:77:4a:c7:d8:f0:
                    5f:94:38:d7:cd:24:a9:e6:b4:45:83:bf:8e:20:22:
                    47:14:85:b4:cd:90:cf:21:a5:b3:f2:e4:5b:f6:78:
                    f1:5a:bb:97:5f:aa:7c:ef:2f:40:8c:7d:5d:fc:b6:
                    7b:4d:fc:d0:e9:9b:37:35:07:09:09:1c:88:06:21:
                    1c:50:1c:b6:30:68:a6:7f:91:f0:77:84:e2:fc:33:
                    d1:87:96:55:b3:2c:9b:62:24:47:39:03:45:e4:a5:
                    8a:65:68:95:81:8a:e9:61:d9:13:87:e0:50:f2:9a:
                    5e:ea:16:2a:bf:41:00:84:15:10:61:55:59:39:96:
                    5e:cd:b2:b6:35:ef:93:81:72:15:f8:e1:b2:27:9c:
                    0a:fb:68:dd:a1:24:19:77:78:eb:6d:8c:1a:d9:c9:
                    ae:af:28:dd:48:72:ad:17:34:1b:db:aa:53:a2:ca:
                    05:43:fa:c1:14:3e:db:6d:be:a4:7b:48:b2:a6:0a:
                    a1:2d:d0:67:14:51:dc:e0:5e:4e:76:9a:05:b5:70:
                    53:a1:37:a5:37:6e:15:01:28:98:14:64:d5:65:4e:
                    14:94:db:18:0c:3f:0a:5e:77:4b:fb:48:0e:8e:fd:
                    92:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:71:5A:15:B2:13:77:71:2A:32:94:AB:6C:EE:38:A6:27:7E:95:C6
            X509v3 Authority Key Identifier:
                keyid:F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643033303a3a2f34342d3434203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:d030::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:cd:fe:fd:81:55:6c:eb:f5:6c:3d:c8:2e:c0:82:7d:94:e2:
         9e:5e:58:c3:29:01:29:e4:d9:10:b7:7f:73:d7:e0:55:08:de:
         6e:28:8b:b7:7a:6f:99:8b:83:ff:3e:5d:27:cc:71:6b:71:60:
         9c:60:0a:c4:3c:f9:ef:0d:f5:d1:01:ad:1c:32:6a:dd:fd:db:
         99:d1:5d:a7:6d:3c:13:33:e9:29:02:20:26:7b:54:c2:ee:e7:
         e8:da:24:73:9f:22:56:4e:ed:9f:06:56:f8:8a:bd:bc:cd:42:
         61:70:93:ed:bd:c1:8c:0a:9d:1f:75:0c:4a:c0:0b:24:3e:e4:
         fc:1e:75:60:ed:e5:3b:3f:dd:6f:20:82:6d:32:75:dd:ce:1e:
         30:86:aa:90:e6:47:44:f7:f8:72:c8:fe:dd:f4:b4:73:c4:27:
         59:28:31:95:72:7c:c7:46:56:e7:1a:bb:c2:70:99:a2:92:63:
         f9:a3:5d:22:11:fa:a5:5f:ff:0f:36:57:2b:3d:d0:e4:f7:97:
         0d:12:52:2a:a3:8f:4f:b2:24:79:63:02:8a:14:75:93:ce:17:
         d4:a1:a0:ce:70:65:77:49:fb:a5:c2:c5:3e:e1:7b:69:77:ce:
         af:72:83:f2:d8:ef:54:55:e2:9a:4e:e6:9e:7d:55:f5:fd:1e:
         14:80:7a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----