Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633037303a3a2f34342d3438203d3e20323136303739.roa
File:                     326130363a313238333a633037303a3a2f34342d3438203d3e20323136303739.roa (raw, json)
Hash identifier:          Mj2XC7qT/S8UY0gpvBfm44k32ba9coTjolpHTu/hps8=
Subject key identifier:   CA:C4:22:F7:B4:CA:49:59:AC:FA:0A:45:A2:AE:BE:8E:23:DE:A7:F0
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       2335758B1653073F26C15AF67E47AC76623DC1FC
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633037303a3a2f34342d3438203d3e20323136303739.roa
Signing time:             Fri 17 Nov 2023 21:59:06 +0000
ROA not before:           Fri 17 Nov 2023 21:54:06 +0000
ROA not after:            Fri 15 Nov 2024 21:59:06 +0000
asID:                     216079
IP address blocks:        2a06:1283:c070::/44 maxlen: 48

Validation:               Failed, certificate revoked on Sun 28 Apr 2024 20:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:35:75:8b:16:53:07:3f:26:c1:5a:f6:7e:47:ac:76:62:3d:c1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Nov 17 21:54:06 2023 GMT
            Not After : Nov 15 21:59:06 2024 GMT
        Subject: CN=CAC422F7B4CA4959ACFA0A45A2AEBE8E23DEA7F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:e8:66:55:7a:3f:a4:bf:43:7f:1c:96:f4:
                    fb:82:64:e6:f3:1e:91:6f:a5:03:70:8a:ff:9d:65:
                    5c:68:29:0f:f7:e0:e7:d4:34:71:0b:70:75:3f:e8:
                    ef:15:8c:fa:44:ce:e7:5e:53:2d:74:8b:17:eb:a7:
                    0e:1c:e7:92:e7:03:94:10:19:34:b6:aa:3d:df:26:
                    e8:c8:6e:18:2d:b8:b6:88:58:41:f3:5e:ce:4c:1b:
                    9a:43:62:fd:52:c2:a7:1a:62:a3:34:2e:15:54:75:
                    f5:f6:2c:b7:79:80:66:88:1e:2a:30:0e:37:69:0b:
                    ff:07:80:2c:d7:fe:23:7b:de:49:91:f2:42:83:f4:
                    61:34:e0:6d:99:d2:a5:e8:a5:aa:f9:0e:c5:c1:9c:
                    d4:4f:51:12:8a:eb:51:fc:89:96:0d:9b:5a:b3:1f:
                    2a:89:d6:9d:e4:ab:51:9a:95:76:4c:68:ae:47:17:
                    49:ef:5a:e2:e2:8a:64:1a:da:82:da:d4:5e:a0:44:
                    ed:bb:fe:3f:aa:41:c4:99:38:07:ef:61:0d:bc:d1:
                    51:0c:8e:33:93:cd:86:ed:b2:ab:0d:34:59:78:d0:
                    d3:33:b9:d4:b9:50:32:f2:9b:50:b1:5b:81:01:ed:
                    ab:c4:56:f4:0a:80:3e:3f:f7:b0:80:33:9e:de:50:
                    96:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C4:22:F7:B4:CA:49:59:AC:FA:0A:45:A2:AE:BE:8E:23:DE:A7:F0
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a633037303a3a2f34342d3438203d3e20323136303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c070::/44

    Signature Algorithm: sha256WithRSAEncryption
         91:23:44:f7:22:63:38:47:1d:f8:89:07:ba:29:f4:87:bc:07:
         f1:dd:ba:0d:98:28:d2:bd:85:2d:ec:0a:6f:6e:0f:1f:d5:13:
         69:4e:42:e1:ff:65:6a:6f:57:7a:3d:5a:31:18:16:c1:d4:74:
         4c:51:c8:80:23:23:5d:48:35:fc:e6:e6:28:4c:7c:33:52:ae:
         9c:87:22:49:f1:d4:f6:c2:18:a1:54:dc:92:f7:73:1d:24:6b:
         5c:c9:a2:a5:27:16:92:89:fc:1d:6b:14:00:95:f0:d7:5d:dc:
         c3:6a:dd:bc:26:4e:64:ba:8e:79:5f:1d:62:5c:a7:37:65:14:
         0b:ae:9b:c3:86:7b:9c:94:91:bb:53:1c:7c:9c:49:89:30:30:
         84:7c:ab:26:a6:3f:74:1f:f0:fe:30:61:37:d0:f2:68:fd:74:
         f2:d8:94:10:83:41:37:db:de:5a:f2:03:fe:07:c4:80:b0:af:
         5e:f5:32:50:79:7c:fe:c9:90:3b:75:66:93:d7:ce:a2:a2:df:
         56:8f:88:2f:9a:2e:a6:9a:bc:8e:f5:35:54:8f:8b:bd:f8:53:
         0f:c4:66:3e:7e:67:1b:ea:35:de:43:e4:4c:4b:39:fd:a6:3a:
         2f:2e:09:ac:1b:d5:57:07:0d:1f:6b:82:7b:98:5d:c6:b8:54:
         3b:02:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----