Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313937393139.roa
File:                     326130373a353463303a623030623a3a2f34382d3438203d3e20313937393139.roa (raw, json)
Hash identifier:          DGTD7CkcjbSCxv8y+Tv2Cvrcci+hSLN0NzgwTiQZT/g=
Subject key identifier:   26:3D:CB:34:7B:12:EE:DC:F8:C8:B3:7B:E2:14:68:7F:22:A2:0A:C0
Certificate issuer:       /CN=99D922574ADCFE8B3741930044512F9A57EF91A4
Certificate serial:       18AA7590DB1A72F4EF77EF5D2680AAB128A328F5
Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313937393139.roa
Signing time:             Sat 29 Jun 2024 11:29:39 +0000
ROA not before:           Sat 29 Jun 2024 11:24:39 +0000
ROA not after:            Sat 28 Jun 2025 11:29:39 +0000
asID:                     197919
IP address blocks:        2a07:54c0:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 15:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:aa:75:90:db:1a:72:f4:ef:77:ef:5d:26:80:aa:b1:28:a3:28:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4
        Validity
            Not Before: Jun 29 11:24:39 2024 GMT
            Not After : Jun 28 11:29:39 2025 GMT
        Subject: CN=263DCB347B12EEDCF8C8B37BE214687F22A20AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:04:d8:50:2b:60:58:03:dd:79:86:9e:fa:
                    e7:85:7a:93:2b:b0:d5:86:42:ec:9b:25:87:6c:8b:
                    65:55:8e:95:99:4e:bd:e3:be:ac:f6:bc:07:fc:9e:
                    ef:1a:23:6c:4e:56:f9:46:db:3f:7a:8c:1c:dd:58:
                    81:34:11:9f:f6:dc:26:73:50:40:df:89:3e:24:2b:
                    86:e3:bb:05:19:49:ef:c4:2c:15:7a:00:60:74:e0:
                    26:91:66:71:37:b3:95:59:6a:08:96:42:3c:c1:76:
                    74:44:35:94:72:e0:3d:6a:71:26:b8:61:55:83:59:
                    66:eb:ad:42:ad:ef:4d:a6:e6:50:3e:5b:4e:0b:44:
                    3a:c9:57:25:56:e5:a6:d0:09:ba:e8:1d:4a:ff:b3:
                    b3:98:b8:88:1c:dd:5e:42:8c:cc:ca:84:a0:88:93:
                    84:ed:65:d3:80:93:89:a5:42:b3:63:cc:22:d4:09:
                    0b:74:e0:4d:be:d4:29:40:8a:f4:bd:49:bb:d8:99:
                    41:0e:0a:f1:33:01:b9:79:7a:80:cb:f0:c1:1a:24:
                    1e:16:80:b1:1a:7d:fe:3e:f5:36:ad:0e:96:3b:33:
                    90:b0:c5:8c:b7:f7:25:34:be:55:45:23:67:83:fc:
                    e4:5a:08:4f:cf:ff:4f:d5:f1:a4:a7:38:d3:70:19:
                    37:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3D:CB:34:7B:12:EE:DC:F8:C8:B3:7B:E2:14:68:7F:22:A2:0A:C0
            X509v3 Authority Key Identifier:
                keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313937393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:13:cc:ed:01:b9:b1:17:ce:e6:a7:dc:f7:6e:b1:55:d6:69:
         49:68:fa:be:62:1d:18:84:a8:b4:43:1e:aa:dd:6c:cb:c4:00:
         58:d6:e8:58:d6:13:d3:37:c1:a6:fd:bd:c5:ea:38:24:12:a9:
         20:08:05:95:ec:5b:25:a4:7a:71:6c:08:d5:99:d2:1f:11:94:
         6c:a7:cd:08:ac:07:16:8d:6e:a2:5e:fd:d7:5e:1f:4c:db:76:
         7e:3d:36:a3:df:bb:ad:99:78:9d:04:29:95:b6:de:ff:34:da:
         ce:7b:b6:c3:fc:45:4c:17:39:ea:2d:2a:d8:cf:c9:9e:6d:c4:
         1e:d7:a8:aa:31:45:b0:55:ba:01:6f:11:a9:88:e0:d4:18:9a:
         f0:0d:aa:b9:b8:d1:1e:c6:c9:82:8a:78:c5:a3:ba:78:56:9f:
         3d:93:f1:7f:03:10:3f:1f:75:58:74:08:10:4b:e8:0d:30:12:
         7c:e8:f3:f5:3a:a2:a5:ad:85:3c:21:cc:05:1f:18:eb:65:3a:
         06:05:e2:4d:06:ea:aa:94:53:09:eb:18:d4:1c:30:e5:dd:ce:
         31:56:b4:10:7c:4b:91:6c:6c:53:76:66:dd:25:48:f4:46:a4:
         2b:c6:db:1a:50:7a:37:c5:e6:f1:14:a1:d8:c7:f7:4f:58:40:
         3e:c9:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----