Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623530303a3a2f34302d3438203d3e203434353932.roa
File:                     326130363a313238333a623530303a3a2f34302d3438203d3e203434353932.roa (raw, json)
Hash identifier:          kwMQ9ppNlC43KYi3diOEAXDek+Shjg3FqpQ5hkKrSjc=
Subject key identifier:   42:26:2E:FB:D1:9F:7C:D4:E8:02:A0:46:29:D6:2F:F0:06:43:ED:A6
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       148DFEE7C65BEC2C0AB01DB6CB6F80B71E214D54
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623530303a3a2f34302d3438203d3e203434353932.roa
Signing time:             Mon 22 Jan 2024 10:59:33 +0000
ROA not before:           Mon 22 Jan 2024 10:54:33 +0000
ROA not after:            Mon 20 Jan 2025 10:59:33 +0000
asID:                     44592
IP address blocks:        2a06:1283:b500::/40 maxlen: 48

Validation:               Failed, certificate revoked on Wed 24 Jan 2024 18:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8d:fe:e7:c6:5b:ec:2c:0a:b0:1d:b6:cb:6f:80:b7:1e:21:4d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Jan 22 10:54:33 2024 GMT
            Not After : Jan 20 10:59:33 2025 GMT
        Subject: CN=42262EFBD19F7CD4E802A04629D62FF00643EDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:dd:a4:ad:b1:26:73:1c:a3:25:ef:54:ac:
                    74:a9:ca:b5:0b:51:91:97:3e:85:8a:df:63:88:04:
                    35:5a:ad:b8:82:71:00:3b:5e:26:4f:50:81:57:67:
                    ae:44:45:23:66:06:d2:5a:9f:83:ae:d8:28:81:20:
                    0f:b1:0c:ea:4d:a5:0d:4d:3d:ac:54:ae:4c:bc:08:
                    54:24:85:da:72:54:63:1e:15:7e:fd:23:53:11:fc:
                    69:a9:20:51:af:a2:78:9a:e1:8b:80:c7:ef:ab:d9:
                    a6:82:85:2f:a5:f9:6f:ec:74:e4:e0:20:be:03:06:
                    c8:4f:9f:09:87:2a:1e:16:4f:a9:df:8a:26:84:13:
                    dc:0d:2a:b0:c3:0e:d4:74:91:91:23:5e:5a:5d:43:
                    53:20:b5:35:dd:1d:2d:24:9e:2e:29:f8:e2:78:51:
                    3a:f5:9f:f5:61:cd:92:61:68:d2:38:c8:70:00:66:
                    69:a5:39:a6:bc:65:88:b2:5a:c7:a5:8c:f9:fe:bf:
                    5e:8e:42:fe:73:a6:d9:b2:b2:35:eb:e1:d7:d0:9c:
                    d2:24:68:5c:1f:07:99:ce:79:4b:00:33:dd:58:84:
                    be:14:f1:b2:13:c6:8b:ae:f8:e8:36:46:0b:d6:b7:
                    0c:74:2b:0e:3d:86:01:f9:d8:d1:fe:a4:96:f0:31:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:26:2E:FB:D1:9F:7C:D4:E8:02:A0:46:29:D6:2F:F0:06:43:ED:A6
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a623530303a3a2f34302d3438203d3e203434353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b500::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:79:86:4c:68:14:cd:bf:8e:55:64:48:60:7e:e5:4d:35:da:
         bc:17:35:03:ee:e6:7c:0b:53:19:86:56:f6:16:b0:6c:1a:06:
         fd:1f:0f:f8:ee:0d:84:3a:8d:e4:9b:fa:86:b4:ce:6d:bd:c4:
         c5:a4:ee:91:56:3c:45:71:73:42:00:ef:8c:85:13:eb:73:5b:
         d9:74:32:ed:71:69:a6:18:04:2a:87:ef:3f:4e:25:14:44:d0:
         d2:84:77:19:0f:6d:d8:a8:a5:87:40:c2:61:29:c5:3e:17:ea:
         b8:11:56:0f:f4:23:b9:97:02:25:cd:4c:5c:89:32:a2:a6:fd:
         71:0f:da:fa:92:60:5c:03:42:ba:89:28:f9:3d:33:f6:57:1f:
         aa:3b:e1:d0:54:fa:ae:37:98:3b:6f:70:e8:e3:68:18:9b:ca:
         ad:b7:bf:b6:e8:29:ca:a6:63:42:3e:a7:2b:6b:e0:6c:0e:7f:
         3c:40:9a:fe:59:c3:09:54:a0:99:8f:a7:c8:c8:fa:1f:2f:08:
         be:12:a5:1f:0d:49:cb:8d:ca:be:ba:25:ba:1a:68:31:cc:82:
         56:59:64:69:48:5a:fc:25:c5:13:38:7d:b7:51:d7:30:8d:09:
         01:61:3f:e7:fc:89:b9:e2:85:f9:8e:47:22:89:48:b3:29:26:
         2e:dc:dc:97
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUFI3+58Zb7CwKsB22y2+Atx4hTVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVB
MDY3QjI1RTAeFw0yNDAxMjIxMDU0MzNaFw0yNTAxMjAxMDU5MzNaMDMxMTAvBgNV
BAMTKDQyMjYyRUZCRDE5RjdDRDRFODAyQTA0NjI5RDYyRkYwMDY0M0VEQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJd2krbEmcxyjJe9UrHSpyrUL
UZGXPoWK32OIBDVarbiCcQA7XiZPUIFXZ65ERSNmBtJan4Ou2CiBIA+xDOpNpQ1N
PaxUrky8CFQkhdpyVGMeFX79I1MR/GmpIFGvonia4YuAx++r2aaChS+l+W/sdOTg
IL4DBshPnwmHKh4WT6nfiiaEE9wNKrDDDtR0kZEjXlpdQ1MgtTXdHS0kni4p+OJ4
UTr1n/VhzZJhaNI4yHAAZmmlOaa8ZYiyWseljPn+v16OQv5zptmysjXr4dfQnNIk
aFwfB5nOeUsAM91YhL4U8bITxouu+Og2RgvWtwx0Kw49hgH52NH+pJbwMemDAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUQiYu+9GffNToAqBGKdYv8AZD7aYwHwYDVR0j
BBgwFoAUOYbbVBUkhtZTOEFYmd6tlaBnsl4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmNhODExZjgtZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcx
NjhmLzIvMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVBMDY3QjI1RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVBMDY3
QjI1RS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmNhODExZjgt
ZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcxNjhmLzIvMzI2MTMwMzYzYTMxMzIzODMz
M2E2MjM1MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM0MzQzNTM5MzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqBhKDtTANBgkqhkiG9w0BAQsFAAOCAQEAk3mGTGgUzb+OVWRIYH7l
TTXavBc1A+7mfAtTGYZW9hawbBoG/R8P+O4NhDqN5Jv6hrTObb3ExaTukVY8RXFz
QgDvjIUT63Nb2XQy7XFpphgEKofvP04lFETQ0oR3GQ9t2Kilh0DCYSnFPhfquBFW
D/QjuZcCJc1MXIkyoqb9cQ/a+pJgXANCuoko+T0z9lcfqjvh0FT6rjeYO29w6ONo
GJvKrbe/tugpyqZjQj6nK2vgbA5/PECa/lnDCVSgmY+nyMj6Hy8IvhKlHw1Jy43K
vroluhpoMcyCVllkaUha/CXFEzh9t1HXMI0JAWE/5/yJueKF+Y5HIolIsykmLtzc
lw==
-----END CERTIFICATE-----