Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a646530303a3a2f34302d3438203d3e20313939363839.roa
File:                     326130363a313238333a646530303a3a2f34302d3438203d3e20313939363839.roa (raw, json)
Hash identifier:          /bZHu1PnSfsA4bAmSBmFzB12VcEwS0m3FqZtJFpdkEo=
Subject key identifier:   24:59:CA:9F:EF:0E:A9:C7:6B:D3:67:EE:30:50:DA:DA:53:C0:FD:66
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       22351CAA7BF5111D9F580D5A22F7CB245DFC45E0
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a646530303a3a2f34302d3438203d3e20313939363839.roa
Signing time:             Tue 14 Nov 2023 20:32:35 +0000
ROA not before:           Tue 14 Nov 2023 20:27:35 +0000
ROA not after:            Tue 12 Nov 2024 20:32:35 +0000
asID:                     199689
IP address blocks:        2a06:1283:de00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Sun 28 Apr 2024 20:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:35:1c:aa:7b:f5:11:1d:9f:58:0d:5a:22:f7:cb:24:5d:fc:45:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Nov 14 20:27:35 2023 GMT
            Not After : Nov 12 20:32:35 2024 GMT
        Subject: CN=2459CA9FEF0EA9C76BD367EE3050DADA53C0FD66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ea:d1:f9:e1:d0:bd:cd:f3:cc:71:1b:36:0a:
                    f4:3d:e3:8f:44:59:19:a7:f3:4e:69:ae:90:de:03:
                    14:96:6e:67:8b:84:c7:13:1d:c6:12:f5:59:ff:8d:
                    db:8d:16:6f:4e:df:e5:47:3e:41:7b:5b:e1:24:29:
                    8f:cd:b6:42:ba:ad:a2:55:3e:76:c4:61:e4:dd:f1:
                    6d:7a:d2:1d:e6:77:ab:6b:66:13:d0:a1:b2:c9:fb:
                    15:53:32:1b:a9:d5:d3:12:2b:67:64:6d:68:7a:b4:
                    88:66:e6:7a:94:55:2a:bd:0c:2d:05:e0:ec:7c:e6:
                    bf:9d:45:fd:7d:d2:a5:a1:d4:8f:7f:ce:78:f9:72:
                    91:04:f8:48:31:eb:72:f2:8d:25:a6:c6:3e:42:f7:
                    f8:95:6d:c2:4b:7f:21:f8:42:c1:a5:49:4f:28:bd:
                    ff:60:0d:5f:9a:aa:0b:fd:8c:b4:32:ab:9a:03:03:
                    f7:dc:38:8c:7b:b3:3b:1e:94:73:6d:44:86:c0:b9:
                    6b:6b:e2:bd:3a:86:ee:9c:0f:2c:34:ae:87:e9:1c:
                    5a:56:37:96:6d:fa:78:8f:a9:ef:f1:b7:88:d5:05:
                    65:27:9b:00:7b:d5:97:59:1e:5c:e1:01:5e:89:a1:
                    e3:17:4a:65:cd:30:d3:8e:67:f3:1a:cf:0c:f2:4d:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:59:CA:9F:EF:0E:A9:C7:6B:D3:67:EE:30:50:DA:DA:53:C0:FD:66
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/326130363a313238333a646530303a3a2f34302d3438203d3e20313939363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:de00::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:ef:b3:ca:bd:d1:fc:92:98:2e:19:81:1d:ef:74:e8:93:ae:
         6a:dc:ed:c5:74:11:13:39:0d:27:c1:98:fd:17:61:ea:74:c0:
         5b:0f:40:60:3a:a0:32:93:b8:b8:94:04:bf:94:89:3b:ce:67:
         3a:fa:2d:a1:74:c1:cb:5a:43:4c:ed:ff:fe:5c:f4:67:6b:16:
         d3:4c:c7:8c:39:6c:3b:74:15:c9:8f:0d:0d:51:84:2e:8a:85:
         2f:8c:e4:86:13:f2:6e:9c:e4:90:80:6a:4e:45:14:f6:89:9d:
         60:52:f2:ae:5c:23:db:fc:98:11:03:bc:3d:53:f6:90:15:15:
         5d:b6:38:bb:b0:f3:ca:5e:b6:f4:75:c9:7a:d7:9d:73:75:53:
         91:5d:b0:68:a1:c4:4c:a3:e8:c1:12:23:60:7d:21:3e:3f:86:
         4f:56:46:7e:61:4f:fc:14:f2:2e:33:d9:7a:eb:43:93:ec:28:
         e9:2d:96:36:7a:d2:d2:0f:4f:a0:28:99:a7:91:83:56:65:f3:
         a4:8d:41:b9:ad:cc:30:f9:40:ce:c2:0f:ba:0a:33:cc:58:fc:
         04:24:a5:50:3d:f7:4f:73:f4:3b:c6:ad:36:03:9d:59:29:e2:
         2f:bb:89:0b:cd:df:36:a4:1a:01:ec:6d:a9:eb:ac:84:bf:0b:
         cf:93:8b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----