Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a643830303a3a2f33382d3438203d3e20323135363439.roa
File:                     326130363a313238333a643830303a3a2f33382d3438203d3e20323135363439.roa (raw, json)
Hash identifier:          bZwFNKUFljh9+emXhdPDFL/1IitKKtAs7+rLGcbv8A4=
Subject key identifier:   C9:11:93:41:5C:62:1D:2E:40:48:38:EB:06:75:BD:F5:89:76:D2:67
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       2CC0FD85252CC9B6CD57A26F20FEF234811EB106
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a643830303a3a2f33382d3438203d3e20323135363439.roa
Signing time:             Wed 24 Jan 2024 18:12:44 +0000
ROA not before:           Wed 24 Jan 2024 18:07:44 +0000
ROA not after:            Wed 22 Jan 2025 18:12:44 +0000
asID:                     215649
IP address blocks:        2a06:1283:d800::/38 maxlen: 48

Validation:               Failed, certificate revoked on Sun 28 Apr 2024 20:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c0:fd:85:25:2c:c9:b6:cd:57:a2:6f:20:fe:f2:34:81:1e:b1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Jan 24 18:07:44 2024 GMT
            Not After : Jan 22 18:12:44 2025 GMT
        Subject: CN=C91193415C621D2E404838EB0675BDF58976D267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:31:b3:e3:07:aa:38:ec:8c:df:ba:4f:de:
                    16:82:2d:c0:ba:98:46:8a:96:c7:eb:ab:1a:91:5d:
                    0c:ca:7b:73:74:52:7a:37:96:70:d7:b3:73:48:4a:
                    cd:92:a1:1d:93:dd:e7:f9:38:ca:06:36:7f:dd:55:
                    06:25:06:8f:b7:25:b0:63:52:5d:10:11:1a:5b:d4:
                    f9:47:8c:7a:bd:d7:f5:87:f1:4a:d2:58:ce:df:e3:
                    66:27:4d:a5:6b:84:e0:97:33:55:df:b9:98:f4:b1:
                    ea:5d:ed:54:81:ae:52:e6:b9:8a:07:fe:51:55:8f:
                    f8:09:13:15:33:71:b6:ff:8c:56:04:f5:92:bd:66:
                    80:ba:ee:17:52:c8:01:5b:e6:2c:4b:95:8c:a2:19:
                    99:4d:26:71:33:c5:0d:bc:07:bf:72:63:29:ef:fe:
                    b4:f2:27:19:79:16:f1:f3:34:60:4c:ca:ed:5b:c9:
                    a7:cb:2a:d7:85:f8:43:90:90:ee:5e:e8:0f:57:69:
                    44:a5:ac:d6:39:a7:8b:9d:b9:c6:21:e7:72:f0:7b:
                    06:fe:82:1e:49:c8:d4:a4:ff:a4:44:86:76:15:34:
                    b3:41:9d:a1:c4:fe:bb:a8:aa:a1:ab:4e:3d:91:ca:
                    00:c3:bb:c6:6b:b7:0f:6e:dc:82:94:32:be:83:5e:
                    d7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:11:93:41:5C:62:1D:2E:40:48:38:EB:06:75:BD:F5:89:76:D2:67
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a643830303a3a2f33382d3438203d3e20323135363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:d800::/38

    Signature Algorithm: sha256WithRSAEncryption
         1f:46:4d:84:8f:23:cb:9a:64:b2:d8:1b:e7:7c:3b:11:b7:ad:
         60:0b:4b:f4:4b:93:c1:a9:00:44:98:89:fb:73:01:89:12:9e:
         9e:d9:89:11:b9:0a:5a:a5:92:fe:f2:96:1e:36:28:8b:21:ba:
         4d:27:ce:8a:39:9f:60:9f:65:98:93:95:cc:39:c9:71:51:14:
         8c:ae:8b:0b:5d:79:6a:e5:b4:ff:d1:8d:bc:54:a3:ca:14:38:
         e1:73:d2:9d:62:c2:3b:da:63:9e:33:46:32:48:dd:30:25:fc:
         91:00:05:f8:c4:7d:e0:11:f8:4e:06:e8:49:d7:eb:42:21:98:
         78:a3:e6:7a:be:52:a5:13:f7:3f:d2:11:ac:e9:2c:1c:d8:27:
         6b:03:56:0f:6b:18:22:98:db:22:3d:ee:a2:02:af:79:3e:ef:
         44:13:97:3c:23:45:cc:bf:da:b7:b3:c6:ce:8a:1b:cd:9e:49:
         16:cb:41:a9:29:a9:19:18:32:b7:ab:f8:a4:02:59:46:ed:b3:
         d6:ed:92:bc:64:79:f6:9f:a6:3e:0b:a4:a3:4c:ea:9c:25:3f:
         58:7f:3c:dc:7d:36:d4:6e:ed:27:85:71:09:35:17:d8:e6:b9:
         0a:bb:5a:bc:b0:69:9e:7c:a6:8d:6f:53:b2:f7:c7:62:75:32:
         6d:ce:7b:96
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIULMD9hSUsybbNV6JvIP7yNIEesQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVB
MDY3QjI1RTAeFw0yNDAxMjQxODA3NDRaFw0yNTAxMjIxODEyNDRaMDMxMTAvBgNV
BAMTKEM5MTE5MzQxNUM2MjFEMkU0MDQ4MzhFQjA2NzVCREY1ODk3NkQyNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm1zGz4weqOOyM37pP3haCLcC6
mEaKlsfrqxqRXQzKe3N0Uno3lnDXs3NISs2SoR2T3ef5OMoGNn/dVQYlBo+3JbBj
Ul0QERpb1PlHjHq91/WH8UrSWM7f42YnTaVrhOCXM1XfuZj0sepd7VSBrlLmuYoH
/lFVj/gJExUzcbb/jFYE9ZK9ZoC67hdSyAFb5ixLlYyiGZlNJnEzxQ28B79yYynv
/rTyJxl5FvHzNGBMyu1byafLKteF+EOQkO5e6A9XaUSlrNY5p4uducYh53Lwewb+
gh5JyNSk/6REhnYVNLNBnaHE/ruoqqGrTj2RygDDu8Zrtw9u3IKUMr6DXtd3AgMB
AAGjggJ5MIICdTAdBgNVHQ4EFgQUyRGTQVxiHS5ASDjrBnW99Yl20mcwHwYDVR0j
BBgwFoAUOYbbVBUkhtZTOEFYmd6tlaBnsl4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmNhODExZjgtZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcx
NjhmLzIvMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVBMDY3QjI1RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvMzk4NkRCNTQxNTI0ODZENjUzMzg0MTU4OTlERUFEOTVBMDY3
QjI1RS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmNhODExZjgt
ZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcxNjhmLzIvMzI2MTMwMzYzYTMxMzIzODMz
M2E2NDM4MzAzMDNhM2EyZjMzMzgyZDM0MzgyMDNkM2UyMDMyMzEzNTM2MzQzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGAioGEoPYMA0GCSqGSIb3DQEBCwUAA4IBAQAfRk2EjyPLmmSy2Bvn
fDsRt61gC0v0S5PBqQBEmIn7cwGJEp6e2YkRuQpapZL+8pYeNiiLIbpNJ86KOZ9g
n2WYk5XMOclxURSMrosLXXlq5bT/0Y28VKPKFDjhc9KdYsI72mOeM0YySN0wJfyR
AAX4xH3gEfhOBuhJ1+tCIZh4o+Z6vlKlE/c/0hGs6Swc2CdrA1YPaxgimNsiPe6i
Aq95Pu9EE5c8I0XMv9q3s8bOihvNnkkWy0GpKakZGDK3q/ikAllG7bPW7ZK8ZHn2
n6Y+C6SjTOqcJT9YfzzcfTbUbu0nhXEJNRfY5rkKu1q8sGmefKaNb1Oy98didTJt
znuW
-----END CERTIFICATE-----