Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/326130623a346530373a313666663a3a2f34382d3438203d3e20323134373537.roa
File:                     326130623a346530373a313666663a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier:          cL+TgueTtYtm89uzNg07PV2gzoJ5tKuKjydJymZgJuA=
Subject key identifier:   32:F0:D0:CA:41:96:E6:5E:6D:3D:63:86:C1:50:A0:68:C8:18:15:67
Certificate issuer:       /CN=9734125D9DE143331CAA39CA06CB928F0A7B5E53
Certificate serial:       3468488295ED754626E693C960263249684E155B
Authority key identifier: 97:34:12:5D:9D:E1:43:33:1C:AA:39:CA:06:CB:92:8F:0A:7B:5E:53
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/326130623a346530373a313666663a3a2f34382d3438203d3e20323134373537.roa
Signing time:             Wed 30 Oct 2024 18:56:44 +0000
ROA not before:           Wed 30 Oct 2024 18:51:44 +0000
ROA not after:            Wed 29 Oct 2025 18:56:44 +0000
asID:                     214757
IP address blocks:        2a0b:4e07:16ff::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 14 Nov 2024 18:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:68:48:82:95:ed:75:46:26:e6:93:c9:60:26:32:49:68:4e:15:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9734125D9DE143331CAA39CA06CB928F0A7B5E53
        Validity
            Not Before: Oct 30 18:51:44 2024 GMT
            Not After : Oct 29 18:56:44 2025 GMT
        Subject: CN=32F0D0CA4196E65E6D3D6386C150A068C8181567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:1e:ff:7c:6f:66:1c:ac:9c:24:d2:a0:2b:
                    e1:f3:d8:41:95:3b:8e:00:81:2a:6c:88:3b:21:7d:
                    c5:4e:8c:65:68:f9:9f:05:45:19:82:7d:af:e5:1a:
                    a0:c5:17:5c:a8:17:6e:03:fe:26:b2:5f:17:f8:f1:
                    ca:0d:41:71:bb:a3:80:08:c0:45:08:88:ac:45:ec:
                    3b:f3:4a:d9:09:cc:2e:8e:98:6f:06:3b:99:55:1a:
                    cd:09:43:17:e4:1e:e2:71:75:e9:a3:b5:5b:37:4a:
                    b9:38:2b:8d:9c:1a:6d:4d:3d:d7:76:2d:18:5e:b3:
                    bc:15:41:b5:ae:fe:22:5d:7a:04:88:2a:a3:d1:ad:
                    e4:b2:75:1b:a1:e7:66:79:f6:b2:2f:01:23:af:9e:
                    6c:05:d9:33:7e:93:94:dd:df:4d:5b:4a:9d:f9:c2:
                    5e:55:ef:44:fe:24:57:18:6e:fa:a7:24:ba:08:e9:
                    8b:5c:5a:53:81:d0:09:ab:e1:e7:86:69:c4:6e:fa:
                    38:50:58:0b:00:db:b3:c5:30:21:c0:a3:78:88:ed:
                    31:9d:94:7e:2d:54:f3:d2:66:f9:a6:aa:74:25:ad:
                    c3:a3:2a:fe:6e:b8:d5:48:07:87:34:22:cd:c2:91:
                    84:a1:12:f1:d7:63:b3:d9:a1:25:e5:e0:f5:8b:97:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F0:D0:CA:41:96:E6:5E:6D:3D:63:86:C1:50:A0:68:C8:18:15:67
            X509v3 Authority Key Identifier:
                keyid:97:34:12:5D:9D:E1:43:33:1C:AA:39:CA:06:CB:92:8F:0A:7B:5E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/326130623a346530373a313666663a3a2f34382d3438203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:16ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:36:4a:e7:a5:5e:48:10:1c:17:de:f2:43:b1:68:46:20:bf:
         6a:a7:be:d1:eb:4f:89:7c:00:c8:57:68:60:de:87:3d:52:02:
         f1:c9:e2:49:87:c4:f8:d1:67:d3:45:e9:ed:28:5c:e4:5e:69:
         a3:ff:9b:9b:43:73:c5:89:29:d2:cc:e8:9d:02:a4:ab:a8:dd:
         65:55:29:ee:50:94:72:2b:df:3e:ce:9a:3a:46:07:42:fc:b4:
         ea:c3:8b:22:5b:6c:e4:fc:e2:ae:53:c5:6c:62:52:94:a4:31:
         6a:bf:2f:71:7e:bf:d8:2f:f8:c8:dd:72:7d:60:ca:f4:85:70:
         1b:f9:98:d9:7e:8b:05:5f:e1:53:5b:cf:be:8c:b6:fe:bf:0b:
         35:04:7b:43:f2:da:46:4f:b4:07:b0:f0:82:50:e1:63:5b:fe:
         8c:63:14:40:e2:8c:b6:fe:de:ba:19:42:58:17:fc:12:1f:12:
         8c:19:81:bb:a2:4e:e2:86:eb:fa:49:32:55:25:c4:b0:42:91:
         ae:05:47:6f:f7:fb:2e:c3:c0:73:4f:b2:ee:8f:41:23:5b:9f:
         0e:a8:2c:c4:48:80:c4:43:b6:e5:b4:a6:93:90:7a:60:9f:c5:
         cd:bb:5b:94:f0:a3:88:72:1f:8c:cd:8a:c1:31:48:77:3a:83:
         39:fc:9a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----