Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a643830303a3a2f33382d3438203d3e203434353932.roa
File:                     326130363a313238333a643830303a3a2f33382d3438203d3e203434353932.roa (raw, json)
Hash identifier:          vX0l7CJsaWwlh0MsfdSButLnlO+vS7oSnG9pmPR3vhQ=
Subject key identifier:   2D:41:09:DF:E2:3F:B8:F5:73:42:F7:FA:7A:96:3B:FF:E0:9B:27:BD
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       5B4612EE3FA0C4575E3CEB790AD0696FCB066CEC
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a643830303a3a2f33382d3438203d3e203434353932.roa
Signing time:             Mon 22 Jan 2024 10:58:49 +0000
ROA not before:           Mon 22 Jan 2024 10:53:49 +0000
ROA not after:            Mon 20 Jan 2025 10:58:49 +0000
asID:                     44592
IP address blocks:        2a06:1283:d800::/38 maxlen: 48

Validation:               Failed, certificate revoked on Wed 24 Jan 2024 18:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:46:12:ee:3f:a0:c4:57:5e:3c:eb:79:0a:d0:69:6f:cb:06:6c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Jan 22 10:53:49 2024 GMT
            Not After : Jan 20 10:58:49 2025 GMT
        Subject: CN=2D4109DFE23FB8F57342F7FA7A963BFFE09B27BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:b0:1e:81:85:db:9f:7d:3d:0a:2c:88:7e:
                    72:1b:17:97:0e:bf:bd:6d:3e:d5:ba:fc:2a:96:fe:
                    56:b6:4d:9e:c9:e8:da:e6:36:59:c2:3e:fd:47:52:
                    d5:5d:86:b5:8d:bb:d6:4e:c5:68:d3:1c:b4:36:32:
                    69:8c:89:92:72:70:8f:00:b2:ee:a6:06:3f:4c:ff:
                    fd:5c:b0:50:4f:08:5c:cd:a9:0c:b5:b5:c0:d7:33:
                    c6:9b:db:af:19:b3:9d:fa:5b:71:20:b8:31:87:c8:
                    29:7f:e4:71:d1:25:d0:21:96:37:c9:df:8e:e6:42:
                    14:1d:49:51:b9:dd:bb:af:d0:7f:0b:c5:9a:bf:af:
                    6a:48:db:d8:6c:fb:cc:2b:b9:22:72:61:c7:03:7d:
                    c4:c7:c0:1e:aa:23:65:e6:6e:51:ad:b8:72:d2:28:
                    9b:8f:a1:4f:be:18:bc:dc:09:62:2c:ea:ff:a4:e7:
                    a6:3b:44:cd:84:1c:8d:33:2d:b0:2a:c6:11:91:37:
                    16:0d:93:e3:27:f3:df:db:b6:dd:d2:5e:ff:cf:dd:
                    de:92:14:bb:1d:2c:a4:a2:7b:d0:bc:8f:b9:a8:12:
                    7c:07:f8:b2:5f:38:f9:08:a7:6a:43:48:16:85:5a:
                    03:8a:a7:71:8e:ca:91:16:71:07:e3:7b:71:d7:29:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:41:09:DF:E2:3F:B8:F5:73:42:F7:FA:7A:96:3B:FF:E0:9B:27:BD
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a643830303a3a2f33382d3438203d3e203434353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:d800::/38

    Signature Algorithm: sha256WithRSAEncryption
         24:41:8b:b8:ed:ba:1e:64:9d:fa:16:31:2a:85:b2:b5:b3:c3:
         3f:ca:a2:e4:66:3a:c3:5a:94:3f:af:21:3f:8a:a0:21:4c:74:
         47:bd:27:ef:04:26:4d:b8:18:9c:82:4d:01:72:8b:26:63:de:
         e6:3a:35:2a:bd:09:25:75:44:28:13:cb:08:76:13:65:31:aa:
         6a:0c:3e:0f:a2:c1:fd:20:6a:15:3e:39:65:e8:b4:85:e1:2c:
         c8:bc:ba:cd:35:94:23:6e:ce:47:73:cf:37:75:0b:35:1a:fd:
         b7:3b:dc:d9:ab:0a:3b:ad:85:81:27:32:0a:03:0a:80:10:9e:
         44:a6:53:eb:ba:7d:af:f2:d6:ac:a2:27:00:b0:ef:7a:93:34:
         97:3a:81:be:fe:ae:05:2f:21:9d:fe:b3:df:69:ab:a3:d7:04:
         fd:9b:88:e4:e1:d4:8a:45:b9:55:99:32:17:aa:cb:bf:ba:40:
         0f:d4:34:e2:9d:e4:fe:94:fa:75:be:ba:c0:4d:97:38:47:75:
         5c:fc:6a:a0:0e:69:64:8b:ec:0b:11:1d:65:cc:f9:28:41:1d:
         06:35:be:56:f5:b1:36:c7:c9:21:d9:41:29:7a:0c:e3:4f:bf:
         58:b7:11:7b:1d:a8:1f:50:c7:b4:23:35:02:1b:ee:36:6c:73:
         bd:f6:4e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----