Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643061303a3a2f34342d3434203d3e20323134373537.roa
File:                     326130393a353463363a643061303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier:          gQQATNS9pKiVA1fNMXzxy3s+pxFmh+Jujeu1EvRDmFU=
Subject key identifier:   37:04:2F:05:9C:0E:B6:1E:2B:79:88:C2:8A:E4:F8:58:14:E9:2A:41
Certificate issuer:       /CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Certificate serial:       2D247C15F72807F5785BBC76C96B6228ED3FA2EC
Authority key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643061303a3a2f34342d3434203d3e20323134373537.roa
Signing time:             Mon 30 Sep 2024 16:57:52 +0000
ROA not before:           Mon 30 Sep 2024 16:52:52 +0000
ROA not after:            Mon 29 Sep 2025 16:57:52 +0000
asID:                     214757
IP address blocks:        2a09:54c6:d0a0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Sun 06 Oct 2024 11:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:24:7c:15:f7:28:07:f5:78:5b:bc:76:c9:6b:62:28:ed:3f:a2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F163E1EE74384430F7A75E7448A376D89DBBE730
        Validity
            Not Before: Sep 30 16:52:52 2024 GMT
            Not After : Sep 29 16:57:52 2025 GMT
        Subject: CN=37042F059C0EB61E2B7988C28AE4F85814E92A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:e6:19:9d:28:b3:53:72:01:12:0e:b6:c2:
                    d4:22:5e:79:8d:17:d7:8f:f2:b4:dc:5f:5c:15:c6:
                    e4:4d:59:08:b4:61:9d:75:8e:a5:c0:76:fe:25:4d:
                    38:1b:db:a8:04:5d:13:ef:03:21:96:47:92:b9:6f:
                    5b:26:56:4c:51:79:5c:7e:c9:af:4f:14:87:3c:3c:
                    75:23:aa:46:c0:f1:ba:41:3b:d6:4f:66:de:0a:43:
                    a1:c6:d7:17:68:f6:30:91:3a:46:48:66:36:65:d0:
                    88:3b:5f:10:3e:0c:06:3e:62:ac:e5:88:8b:a8:5f:
                    6c:e4:77:de:76:11:a8:30:6a:ea:a4:3d:b3:59:b1:
                    0c:79:5f:34:c3:ba:82:d8:91:2c:b2:1f:22:00:7c:
                    3f:eb:80:b4:c3:be:a9:c0:fb:e6:3e:fb:6f:1b:80:
                    f7:0e:95:fd:18:ef:10:2f:54:45:53:ef:7b:ee:2a:
                    0a:a9:cd:d3:f1:92:77:c5:29:4b:b4:67:6a:8a:af:
                    35:69:0c:11:f8:16:ce:38:86:76:54:ba:54:49:31:
                    2f:04:fd:f9:f7:1d:fb:a2:7d:b0:ff:81:93:84:21:
                    31:4c:40:95:9b:8f:b7:ff:f7:67:9c:72:f6:53:f7:
                    3f:a8:a9:91:37:83:c9:28:b7:58:d4:7a:36:f5:55:
                    d9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:04:2F:05:9C:0E:B6:1E:2B:79:88:C2:8A:E4:F8:58:14:E9:2A:41
            X509v3 Authority Key Identifier:
                keyid:F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a643061303a3a2f34342d3434203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:d0a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:f7:f1:7c:d5:34:f2:45:34:fb:4f:0d:8e:1f:29:33:a9:
         39:6b:f4:ca:d6:a1:9a:86:29:12:59:ee:65:cb:36:61:cd:90:
         78:84:21:77:34:b4:45:89:c1:c7:17:5b:43:ef:b7:e4:f1:6f:
         f5:3b:72:16:8a:dc:1a:31:ed:bf:b8:3f:ec:09:1a:e1:c5:33:
         5c:bb:ba:65:1d:33:6d:9a:4f:8b:8e:50:2f:d8:94:a5:1f:c0:
         a3:02:ce:03:55:f4:45:cb:d6:9b:7f:5d:86:74:88:28:39:16:
         83:5c:4c:e5:6d:89:c1:21:41:a2:ce:7d:a1:c7:c8:50:27:09:
         3b:ff:e5:a5:a6:35:24:2c:89:5e:f8:d3:6c:ee:b9:5f:b5:2e:
         e8:26:59:3a:e6:b7:a9:85:f8:d9:a2:d0:9f:07:26:8e:6b:10:
         3e:75:7d:a7:00:27:fd:81:af:39:cd:6d:23:18:75:91:12:c1:
         5b:a5:d9:b4:60:a2:89:f5:92:0c:e6:0d:a1:06:b1:28:b2:c0:
         ca:2e:d3:02:08:a1:fc:9a:60:5f:4a:c0:ed:d2:ca:11:86:bb:
         09:c8:a4:29:65:7a:90:bd:df:3f:93:5a:6c:34:0d:2d:b4:46:
         b2:f3:b0:49:86:b6:3e:88:03:3b:9d:79:71:37:30:77:0c:6c:
         b2:b3:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----