Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33332d3438203d3e20313937343737.roa
File:                     326130363a313238333a3a2f33332d3438203d3e20313937343737.roa (raw, json)
Hash identifier:          yAdcrmA7UVx/gjQINkM0rl3OYJeX3EvfPdcB05va8b8=
Subject key identifier:   8C:81:32:7F:4B:95:EB:49:9B:4E:4F:EC:67:2E:74:F1:C9:47:F8:D9
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       761DFEF1CA64321EE11043266AD3E60376D3388D
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33332d3438203d3e20313937343737.roa
Signing time:             Wed 15 Nov 2023 17:06:27 +0000
ROA not before:           Wed 15 Nov 2023 17:01:27 +0000
ROA not after:            Wed 13 Nov 2024 17:06:27 +0000
asID:                     197477
IP address blocks:        2a06:1283::/33 maxlen: 48

Validation:               Failed, certificate revoked on Sun 28 Apr 2024 20:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1d:fe:f1:ca:64:32:1e:e1:10:43:26:6a:d3:e6:03:76:d3:38:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Nov 15 17:01:27 2023 GMT
            Not After : Nov 13 17:06:27 2024 GMT
        Subject: CN=8C81327F4B95EB499B4E4FEC672E74F1C947F8D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:67:7c:dd:b2:e7:5d:cc:fc:a1:82:a8:e0:25:
                    8f:41:dd:b8:c6:18:9f:4f:64:9f:dd:e0:26:1d:fa:
                    bc:2c:73:7a:27:8b:01:84:c3:93:52:ea:32:e2:78:
                    d0:e2:3a:34:59:06:4a:78:8b:ac:68:a1:af:c4:e7:
                    44:b0:a0:97:6a:46:b9:9a:20:67:95:c4:b2:84:c3:
                    52:06:61:37:ea:71:fb:3e:72:89:da:23:45:26:ad:
                    6c:20:20:05:20:bc:7c:e1:ed:6e:99:0a:6d:5a:71:
                    ae:98:76:53:5d:b9:ae:de:b9:51:25:02:e4:64:99:
                    92:af:8a:16:ab:ba:ca:19:0b:d4:20:9a:30:53:98:
                    c9:c8:ce:a6:ff:99:4f:2a:22:36:26:da:36:1c:4b:
                    34:e6:32:32:d5:8e:f5:05:54:74:a8:c0:ea:cc:6d:
                    85:6d:2a:f0:70:f9:95:81:cb:6c:0a:b3:8f:80:6a:
                    d0:ff:8b:70:0b:08:a5:fb:94:f3:cc:f4:a8:b2:c2:
                    43:0f:04:6b:b4:0c:a9:ab:7c:97:16:23:28:0b:0f:
                    a8:f2:3f:5e:76:64:ee:f2:1d:1b:8b:9a:72:9b:9e:
                    29:7e:e5:36:57:41:f3:ce:27:b7:f3:38:66:d0:a1:
                    7b:0d:54:7f:7c:34:03:98:96:46:da:e8:c7:53:88:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:81:32:7F:4B:95:EB:49:9B:4E:4F:EC:67:2E:74:F1:C9:47:F8:D9
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a3a2f33332d3438203d3e20313937343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:d2:fe:6a:17:a8:3f:3d:d8:79:67:da:dc:4b:43:f3:5d:
         bb:4c:98:f3:61:7a:49:d3:f6:c6:11:18:d3:11:a1:4a:9c:d9:
         ad:dd:61:b8:f9:ba:01:91:d4:66:77:d8:3a:94:a7:2c:60:6a:
         2f:1c:fc:99:84:62:ce:d2:7e:d3:b6:75:6d:f2:60:8b:cb:a3:
         f8:b3:7c:7d:bb:a5:b3:18:e8:f8:c9:10:c5:d3:73:53:35:21:
         e8:51:b1:53:c0:93:e7:7b:cc:b7:3d:59:19:24:87:48:a2:6d:
         21:66:f7:21:cf:44:e4:e3:5b:4c:26:6d:0b:1a:20:61:41:0b:
         1b:6b:56:e5:3d:0e:30:d5:be:f6:63:97:f0:fc:d6:e5:8b:f8:
         1f:8b:f9:ad:85:d3:ba:37:1b:64:68:2a:62:1a:ba:bc:5c:ae:
         a9:7d:5f:3c:b0:9d:6b:b2:04:f0:d3:b8:d3:1b:13:b1:1f:8c:
         f8:89:fa:6b:24:38:c4:66:63:a6:67:b8:6c:60:fb:05:e7:1a:
         54:e8:5a:5f:fd:a0:ae:72:29:bb:e2:6c:e2:3b:20:a8:78:eb:
         d4:82:ce:ca:3b:8d:80:8b:ca:cc:da:c6:63:96:da:c8:74:78:
         43:44:0f:65:54:3d:d3:39:db:46:0f:da:6a:fb:85:23:e5:18:
         a7:e8:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----