Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a646330303a3a2f34342d3434203d3e20323134373537.roa
File:                     326130393a353463363a646330303a3a2f34342d3434203d3e20323134373537.roa (raw, json)
Hash identifier:          cQJEjo1i7R/0mepik9jKBidoPOaUEQcoO62xzcM05zw=
Subject key identifier:   2A:05:E6:AB:C9:18:5B:25:A6:AC:45:AB:3D:E9:76:49:67:2E:0D:76
Certificate issuer:       /CN=F163E1EE74384430F7A75E7448A376D89DBBE730
Certificate serial:       81C029DD35B35B87DD3C786C34B5749E0EF72E
Authority key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a646330303a3a2f34342d3434203d3e20323134373537.roa
Signing time:             Sun 06 Oct 2024 11:11:16 +0000
ROA not before:           Sun 06 Oct 2024 11:06:16 +0000
ROA not after:            Sun 05 Oct 2025 11:11:16 +0000
asID:                     214757
IP address blocks:        2a09:54c6:dc00::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 18:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            81:c0:29:dd:35:b3:5b:87:dd:3c:78:6c:34:b5:74:9e:0e:f7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F163E1EE74384430F7A75E7448A376D89DBBE730
        Validity
            Not Before: Oct  6 11:06:16 2024 GMT
            Not After : Oct  5 11:11:16 2025 GMT
        Subject: CN=2A05E6ABC9185B25A6AC45AB3DE97649672E0D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:09:eb:3c:1d:e8:38:d6:86:62:3c:7c:4a:
                    90:68:5f:de:b4:28:df:1a:ff:2c:13:1d:95:38:a7:
                    ea:07:55:f9:d7:3d:aa:ae:04:f9:c0:cc:a0:1a:fb:
                    c8:2a:6b:da:11:d1:87:ef:e7:0c:8a:5f:9e:58:d0:
                    43:6d:66:82:cf:e6:e9:1c:ad:9f:54:29:ae:d8:8c:
                    66:0b:9c:a1:a2:0e:9f:7e:cf:ef:34:4e:65:07:f3:
                    fd:dc:cf:db:73:7d:97:5f:df:96:9e:5c:4c:6c:15:
                    d9:1f:f9:05:45:63:53:3d:7d:2d:94:36:86:a3:30:
                    9a:50:f4:7a:d8:99:55:7d:89:63:ce:43:0e:59:bd:
                    92:d0:c1:9e:25:3e:54:25:5f:4e:53:3f:2b:9d:9f:
                    c9:d6:fc:d3:cf:0b:1c:0e:ed:dc:ea:9a:0e:08:52:
                    4b:be:29:60:61:09:65:ab:9c:1a:47:41:b6:6d:05:
                    3a:09:60:33:fa:c5:e6:47:30:af:aa:fd:c6:ad:89:
                    64:60:bf:00:ea:27:97:9d:1a:a6:a0:12:dc:bf:31:
                    e6:e4:8a:6f:90:ec:32:cc:d1:0d:ba:e8:a0:7a:0e:
                    cd:50:10:8b:61:e9:ef:30:70:cb:ae:7c:56:46:9b:
                    cb:b1:f6:ab:ba:61:6d:2f:70:96:83:f3:8c:3d:95:
                    71:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:05:E6:AB:C9:18:5B:25:A6:AC:45:AB:3D:E9:76:49:67:2E:0D:76
            X509v3 Authority Key Identifier:
                keyid:F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130393a353463363a646330303a3a2f34342d3434203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:dc00::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:ca:10:a4:1c:fb:9f:a5:af:24:4c:d8:64:0f:47:ac:26:c5:
         06:90:e9:5b:a6:74:00:7f:36:3b:78:d1:74:e0:45:25:67:7c:
         35:75:9d:5b:67:2d:5a:41:82:d4:a1:16:77:3b:06:e1:42:9f:
         55:52:6c:29:be:0e:5e:0a:3e:70:c0:4f:c3:ab:6e:d8:94:b4:
         51:c4:4d:bc:a6:7f:59:f9:58:83:32:34:b3:24:d0:0d:9f:51:
         a2:4e:a4:99:cf:a6:7d:73:6b:18:3f:80:24:a4:f8:bf:96:6b:
         2f:93:6e:a3:7b:e2:2a:83:e1:73:4c:6f:44:94:bf:dc:89:3f:
         4c:3c:a1:85:97:7b:d9:31:8b:13:51:e5:41:b7:4c:65:55:bf:
         13:f6:67:fd:22:50:54:59:79:46:f1:f6:f3:da:e2:b5:1b:68:
         ab:af:8f:ec:89:b1:ad:eb:27:fc:a4:3b:32:33:b7:4b:4e:46:
         ae:08:8a:21:3b:2b:c6:ed:d6:d0:c4:53:ab:4f:05:21:e0:59:
         2f:4f:53:84:e2:de:cc:5f:64:62:55:a4:92:f4:99:54:6d:13:
         f5:1a:3b:95:ba:1d:96:bf:69:fd:3f:2f:9f:40:3e:d2:d8:76:
         ab:6e:7a:c1:41:02:d6:b3:2f:07:9a:89:77:ea:cd:e3:2a:50:
         4d:e9:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----